Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: jtJKYzsCjq+caYIFESD9WFiuBE3mWfrdxZ3sZTq01pI=
Subject key identifier: 2D:EE:F5:1B:54:2B:40:E0:4A:4D:81:D5:78:10:58:CD:92:0F:2B:C7
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 0193579B60E1A22445A8949E27610D0D82BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:20 +0000
Manifest this update: Sat 23 Nov 2024 06:00:20 +0000
Manifest next update: Sun 24 Nov 2024 06:00:20 +0000
Files and hashes: 1: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: NJvV2JwZ2D1DL9verr/DxfBhtIdaaHyyTkDzt3m6qtw=)
2: D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa (hash: No3GAt1AR9tXk2qzUzK70aRRFrqU2uMXjR5BgucMGgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:60:e1:a2:24:45:a8:94:9e:27:61:0d:0d:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Nov 23 06:00:20 2024 GMT
Not After : Nov 24 06:00:20 2024 GMT
Subject: CN=2deef51b542b40e04a4d81d5781058cd920f2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:82:34:18:95:a5:1c:63:95:76:f5:e2:2c:
4c:95:5e:3a:36:4e:e3:62:af:18:43:db:a5:0b:7a:
28:4d:bf:ea:62:e0:07:24:8e:51:d6:d9:58:83:b1:
b0:ac:43:b4:ad:70:9b:e3:ea:de:af:35:bd:43:2e:
2f:27:af:f4:91:e8:ad:82:5e:b9:7e:4f:6f:63:0c:
7d:52:f7:ee:2d:c5:1c:3f:6c:54:58:85:b7:16:08:
a0:b5:8c:a9:2d:2a:c9:04:f7:d4:cc:fc:5a:18:3d:
3e:da:85:ad:23:bd:62:18:74:42:b1:8c:48:32:3e:
69:88:38:75:c9:eb:cd:ef:5d:72:04:99:e4:07:d5:
d7:7f:55:34:f0:9e:3e:71:b5:e8:b6:1e:e8:ab:d7:
9d:f2:f0:ef:72:09:67:c5:48:45:fb:18:69:47:76:
50:05:3d:71:5b:c6:78:5b:2e:ce:f8:2e:96:80:83:
1a:ef:42:fd:15:10:4c:02:be:39:4a:d7:a2:7e:f9:
a3:fe:18:f3:5f:b7:d0:ff:8f:56:c0:65:9e:df:19:
0c:e0:e2:74:46:0d:b6:c0:3a:6d:85:05:7c:de:2f:
f6:00:a1:99:6d:33:8e:0a:44:b4:a6:6d:19:c4:b8:
20:7b:67:ad:2a:4a:5c:8f:83:1b:cb:71:fd:08:10:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:F5:1B:54:2B:40:E0:4A:4D:81:D5:78:10:58:CD:92:0F:2B:C7
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0b:00:16:f0:2a:19:cd:8c:bd:22:ea:ea:37:bd:80:ef:a6:
23:b1:db:46:69:e3:a6:0d:2c:a4:60:e9:4b:c5:a1:c8:ce:90:
d4:1a:9f:f7:eb:38:09:68:77:49:47:35:a0:2a:e3:4d:d9:28:
42:3b:10:43:b4:64:23:0a:ae:1d:dd:2d:c0:59:30:7a:be:d3:
48:f6:df:4d:22:9a:3f:fa:b3:9d:2e:5b:80:30:3a:4c:44:41:
4b:82:4a:19:07:39:ba:c6:74:fe:97:30:83:c1:8e:0b:01:02:
44:ed:b9:3e:9d:d5:7c:81:ae:bc:b4:c9:16:93:d1:fc:43:13:
e0:37:a1:b1:9e:b8:c2:4e:15:77:0e:17:69:af:6f:fe:21:50:
5c:65:67:26:23:11:e0:c3:1c:49:a9:72:57:33:90:d2:ad:14:
c8:ea:1d:29:63:ad:32:15:9e:dc:44:a4:dd:8c:11:7b:58:0c:
93:70:65:c7:09:88:ac:cc:7a:7b:8c:20:63:cf:97:8f:5d:e8:
ba:c4:39:d8:a0:e2:e6:9b:2a:27:33:52:ad:cf:fc:52:da:c1:
c9:14:11:6a:b5:13:f6:a6:75:1e:82:7d:d2:40:b6:cb:9f:d8:
27:69:88:2e:18:54:38:30:74:32:0b:25:69:e5:79:b2:a5:7b:
51:9e:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:43 2024 by rpki-client on console-ams.rpki-client.org