Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: CSKv0ikAOctPGJwhN1P1djcYodlQkFo/aJNESAhyuAs=
Subject key identifier: B1:94:0E:A1:CD:1B:32:7A:B8:E5:6A:74:78:7C:52:42:24:51:BB:E9
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 019356F7391FBEFB54908A149CA045441E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 06BD
Signing time: Sat 23 Nov 2024 03:01:02 +0000
Manifest this update: Sat 23 Nov 2024 03:01:02 +0000
Manifest next update: Sun 24 Nov 2024 03:01:02 +0000
Files and hashes: 1: GbZy-T_dH67WQNN8htaQD3ROb8g.roa (hash: sOqlZ3bRakJPyH5rMmkrNkDH95aGimG8JZYDcjnIHg4=)
2: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: Of5nsbCGt7n0p6rDxUF2YkAmooBDAfAaJFzbvYD/LNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:39:1f:be:fb:54:90:8a:14:9c:a0:45:44:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Nov 23 03:01:02 2024 GMT
Not After : Nov 24 03:01:02 2024 GMT
Subject: CN=b1940ea1cd1b327ab8e56a74787c52422451bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:f9:99:1d:3a:81:bf:95:dd:2f:88:1e:4e:
ea:c1:1d:6f:6f:e8:d1:f0:d4:3f:20:90:a4:f3:2f:
7a:7a:ae:f7:d4:a8:ed:3a:ea:11:93:1d:fb:4a:bb:
d6:32:ec:9f:d8:71:cc:dc:a5:69:6e:7c:ab:73:4e:
13:17:69:f0:a3:46:46:81:25:6a:c4:87:b4:15:54:
d0:1d:04:9f:e5:bc:cb:0e:4f:8b:e0:df:59:c7:09:
02:3f:55:1c:3a:b8:d0:20:b0:00:3f:7c:23:98:a1:
73:e8:99:ca:ed:c9:42:a6:f6:80:46:ae:d8:96:aa:
79:f5:29:fb:ad:6e:e6:d6:83:ad:0e:94:ca:7d:ab:
9d:2b:1e:6d:f4:9d:dc:9a:b4:e5:6e:93:97:71:0f:
2e:84:e1:bb:12:f5:ae:c6:3b:2f:db:7c:d5:2a:2b:
17:b1:e6:69:f1:99:db:f2:ff:82:af:04:19:54:7f:
7a:1a:cb:17:07:10:58:04:41:17:24:1d:92:6e:0a:
6d:a5:48:df:45:bb:de:67:25:59:7b:ef:c7:05:b0:
5e:50:69:d7:32:48:bf:31:f3:e1:7a:84:8c:cf:69:
c2:a5:79:ca:6e:4e:f6:27:a6:59:b8:c5:f4:4c:22:
71:2a:0f:ca:55:2d:1d:a9:2c:86:c5:5d:b7:e0:b8:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:0E:A1:CD:1B:32:7A:B8:E5:6A:74:78:7C:52:42:24:51:BB:E9
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:01:86:46:50:28:7c:f3:92:c6:6c:fc:95:87:52:95:4e:65:
46:ab:34:5d:6e:b3:50:69:1d:fd:85:89:64:c5:00:d3:d5:2a:
e3:a8:39:9b:d2:76:79:10:4f:f0:ad:01:ac:d2:6c:be:e6:86:
df:21:63:26:cb:8c:df:d6:a7:4e:94:59:f6:a0:02:4b:ce:6d:
e7:37:98:2b:5c:7d:dc:fb:3b:31:4b:21:42:42:7f:59:42:c9:
a3:a2:ee:2c:20:20:d6:1b:66:95:e2:1b:df:4b:50:ae:6e:6c:
95:b2:85:d2:94:7d:45:78:37:7a:c9:14:93:2e:59:d4:bc:86:
e4:ff:b6:87:a9:a3:63:69:18:44:37:80:8f:c5:04:a0:c0:14:
20:91:29:09:7c:08:9c:e9:f1:96:3c:92:5a:d4:20:7d:84:00:
aa:0d:9b:ef:6b:2b:c3:4c:67:e9:57:e6:ee:e6:bd:6c:a3:a2:
3a:7f:8f:6a:e0:53:33:70:da:8e:1e:d4:e0:a0:7e:47:c3:6b:
c1:2f:93:6e:e5:8f:d9:2e:2b:28:ff:c4:59:f5:71:5b:21:ee:
4d:fc:34:38:82:43:78:1b:d6:77:12:49:59:56:c4:97:a9:d2:
45:41:c0:3a:55:33:19:ab:30:22:39:44:5c:55:4f:07:1d:a4:
c6:02:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:31 2024 by rpki-client on console-ams.rpki-client.org