Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: i4F6PRJsYeyznuoINVbPOeWXVOv7//HjKjE+n5Io5aQ=
Subject key identifier: BF:35:C6:79:15:E3:55:39:69:9A:37:A8:90:50:DD:E0:7B:0B:8E:96
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01935350A700AA4312DC211C4D0BAEAE146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 03AA
Signing time: Fri 22 Nov 2024 10:00:14 +0000
Manifest this update: Fri 22 Nov 2024 10:00:14 +0000
Manifest next update: Sat 23 Nov 2024 10:00:14 +0000
Files and hashes: 1: 0b1Octt82kvN3_6VYldJ1TYabDw.roa (hash: Uig0RqQqSxl07Ve6Php0kJj4hZeVUZWqQBytkviUS/s=)
2: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: GBe6gFhauv0w+lyxuowCVY/U/paw5YBgkSgAk8m3TK0=)
3: H7GYWmW13EbBIUuSxCNToHedUX8.roa (hash: Ask4B72t9CuxOH4AIJuRLiRpycuVRooD2wWHfyK03v4=)
4: NuoH07lrjioUbYobQv22IBUxWR4.roa (hash: /1r1or4Kj1Bc0bjkaGE1lqWuSvsvNANGARbI4Rgtuso=)
5: TiGKxumKNOdpmFEy0nFQeB-Sl5Q.roa (hash: 5WZMAvso2vSfxM/Vfx+0ariJIeccIct/su+/Fvw9xds=)
6: UbKsxrteJtroI_6cIyZbYo9WHek.roa (hash: FQOK4kVQpf1kRsqBnmLN4RxWfh8M7SksMf+esxnCofg=)
7: YJuZj8n25SVA_oefrF23FQLw_H4.roa (hash: qEFZwVu6PJWciyih9keAKNMNwy8zhrioZ+uAKudkg+c=)
8: oD0KXOKNz7mOKIT0kgeXdDaT2aw.roa (hash: 6uNeWtnoDE3euitBmaSJ9nV7C0if8x/KMc9Ox+GI4wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:a7:00:aa:43:12:dc:21:1c:4d:0b:ae:ae:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Nov 22 10:00:14 2024 GMT
Not After : Nov 23 10:00:14 2024 GMT
Subject: CN=bf35c67915e35539699a37a89050dde07b0b8e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:29:4a:a5:85:e6:bd:1e:04:de:6e:47:52:
f3:38:33:cb:2a:f1:c3:21:31:55:13:d1:84:1b:55:
83:ee:22:1c:f2:63:a1:28:97:1a:de:31:ab:df:d0:
19:e2:6a:a7:69:23:a3:a7:6e:59:09:ed:55:8b:26:
01:59:e1:4a:f0:a6:64:62:d7:5b:74:78:82:d4:f7:
73:da:76:53:8b:30:0e:eb:98:2b:cb:59:a9:fe:3c:
21:98:71:d8:97:77:a0:9a:f4:6c:f7:41:bc:17:76:
0a:ad:ca:9f:d8:ed:ba:d9:3e:35:7a:44:8c:f0:00:
ca:62:3b:61:5f:ef:ea:32:14:3b:0e:9e:b2:c1:7b:
ae:a2:61:b9:c0:eb:32:71:ce:42:fd:91:42:35:4b:
0c:a6:be:53:9c:5b:aa:a4:3a:33:e5:76:fb:58:65:
15:f1:de:fa:e4:fa:7b:5c:da:e7:d2:e3:31:44:54:
09:08:6b:b7:b8:9a:df:96:36:69:22:cc:52:9b:fd:
3a:31:12:fd:55:a1:42:34:ee:4a:62:d5:9e:ee:2f:
ae:97:a8:69:1f:46:72:f9:ff:d9:5b:54:bc:bf:26:
c2:0c:a0:fa:0f:ac:2d:07:e8:cc:36:26:3d:8e:f2:
ca:13:c6:52:ae:2b:ca:97:be:57:94:3f:0d:19:7a:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:C6:79:15:E3:55:39:69:9A:37:A8:90:50:DD:E0:7B:0B:8E:96
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:d0:d7:c7:16:fd:d8:ba:51:52:c4:30:33:85:16:0d:74:
39:0a:07:05:01:b0:b3:ac:50:d1:4e:d3:dd:dc:8c:05:78:84:
6d:dc:0f:b7:3e:1f:19:cf:01:df:3d:bd:be:22:53:1d:17:2e:
54:90:b1:6c:fa:f7:a0:22:24:44:51:cb:2a:0f:0f:e7:1b:f0:
4b:ae:f3:7d:27:4b:7b:04:1e:d0:ab:45:0d:49:24:68:e0:3c:
4d:d7:fc:92:8a:ad:5d:b7:3a:26:c3:96:40:2e:2a:fd:e1:09:
fa:cc:be:c8:77:59:a0:e3:0f:ba:6f:65:ca:4d:c0:50:d1:7b:
09:d7:75:8d:87:d7:ca:f3:e6:af:5e:62:9e:e4:df:e2:e5:39:
00:c7:40:33:8e:3d:85:b2:e1:9f:99:5e:8b:bf:6b:e1:a6:20:
48:b6:89:6a:4d:de:9f:a8:62:28:0f:17:00:27:a2:ea:4a:94:
bb:46:55:c5:20:c2:f7:d4:a7:57:fc:67:f3:58:50:05:1d:b4:
69:79:6b:61:a7:33:5c:c1:aa:4f:43:31:60:87:ea:45:c3:80:
43:99:10:c5:23:cc:51:a6:95:1f:42:a7:a2:3a:c1:73:82:e2:
90:50:e4:f1:d2:95:b3:6c:4c:9e:d7:63:4d:d8:de:e7:f1:d7:
f6:6e:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:33 2024 by rpki-client on console-ams.rpki-client.org