Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File: oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier: q/xiWaf0xaUdVprj4iJG6sHLguR0RdhTpRmFk7NaONA=
Subject key identifier: 0D:01:71:2C:4C:AF:4C:5B:EE:CB:92:A7:23:28:14:E4:EA:E2:80:1F
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 019356BF9AAD4CAF85E46D29ED431F99B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number: 137A
Signing time: Sat 23 Nov 2024 02:00:17 +0000
Manifest this update: Sat 23 Nov 2024 02:00:17 +0000
Manifest next update: Sun 24 Nov 2024 02:00:17 +0000
Files and hashes: 1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: zD2Iv/jgeut8XkyCW8N7DWvh+vcR6bNiwxXOGJmILE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:9a:ad:4c:af:85:e4:6d:29:ed:43:1f:99:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Nov 23 02:00:17 2024 GMT
Not After : Nov 24 02:00:17 2024 GMT
Subject: CN=0d01712c4caf4c5beecb92a7232814e4eae2801f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:b3:1a:5c:04:3f:b2:ed:f0:54:2a:11:c6:
0b:aa:0c:4e:09:0a:d7:2a:d3:31:bb:a5:da:7a:a0:
5c:90:0a:be:00:dd:47:fe:8c:ba:c3:75:77:80:51:
0d:bf:7b:41:ae:30:9d:cb:29:b9:74:6a:e5:5c:e7:
90:0c:14:d9:d7:8c:b6:0a:37:9c:54:9b:86:b7:d9:
95:6e:23:79:cb:9c:ba:12:db:0a:dd:9d:18:0a:e3:
60:75:1e:f8:f6:55:d9:e8:93:02:d9:74:82:81:1c:
70:23:f4:11:1c:1b:f3:2b:52:4b:93:ac:cd:da:1f:
b7:6c:4e:82:bc:80:78:c4:cb:ca:83:3d:7f:2e:36:
19:c8:bb:4f:e0:0d:15:c1:9b:46:71:16:49:78:fa:
76:66:43:de:80:7b:38:85:16:1a:73:0e:04:b0:dd:
4e:0e:3e:e6:ea:ea:f9:27:cf:32:68:92:63:be:0d:
da:fe:b2:b5:11:e1:af:44:b3:53:b8:69:a1:7b:9c:
34:71:1c:e9:ca:a9:6f:c5:3e:b1:5f:4c:df:78:83:
aa:1c:13:0c:33:f3:26:d9:ce:83:b6:81:7f:25:61:
e8:c9:e5:24:f8:e5:94:11:84:8d:72:42:7d:8e:2d:
5a:5d:37:09:15:ee:8e:ee:67:a3:2d:c8:e5:9b:85:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:71:2C:4C:AF:4C:5B:EE:CB:92:A7:23:28:14:E4:EA:E2:80:1F
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:80:83:1e:05:5e:6d:8d:f5:63:2c:65:ab:f5:92:ba:ee:c0:
9a:9b:93:91:ae:56:60:18:e8:d5:c7:e1:e8:ca:15:95:09:c6:
a7:0f:0f:11:e7:25:fe:47:6a:88:65:76:7f:bc:e5:d5:3d:76:
a0:bd:9b:5e:c8:71:8a:46:37:ba:78:eb:17:fc:24:4d:f5:90:
19:31:22:36:93:ee:6f:59:c0:5e:72:32:3c:a1:7b:59:5f:9a:
d0:9d:0d:b0:c9:be:b6:c3:ae:33:8d:be:3e:2a:fb:91:95:97:
95:ee:e0:6f:20:de:b2:9c:15:52:62:79:f3:b0:f7:41:41:06:
65:1f:40:f0:d6:e0:1c:10:20:b8:31:fd:70:6c:a1:5e:18:0e:
2a:c9:cc:2c:ee:8a:16:ae:4b:c2:01:0e:f8:c6:fe:fa:77:6e:
4d:9b:30:32:78:d7:47:cc:35:d7:09:df:0b:ab:61:b0:c9:13:
99:89:5a:cc:d0:48:c9:d9:3f:32:96:77:e8:ed:f5:cd:28:e2:
1d:a6:c5:69:d7:16:1f:00:b9:b2:7f:41:e2:7b:cd:73:8e:c9:
9a:7e:bb:c4:4a:3b:b5:71:30:2e:59:6e:cb:84:d3:22:e7:42:
0c:52:48:bf:ee:1e:c4:b6:60:56:e0:e3:04:1c:32:03:d5:3d:
34:21:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:07 2024 by rpki-client on console-fra.rpki-client.org