Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: Q6xLFH37ayQID3JKhtYl1XhgoMG5ht6hu01gpTpa9oU=
Subject key identifier: 9A:8F:AA:34:82:26:2B:27:08:5F:34:44:EB:08:BB:D7:9B:37:C6:D2
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019358795B3F9B18C958CB4693D31A087762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0A52
Signing time: Sat 23 Nov 2024 10:02:48 +0000
Manifest this update: Sat 23 Nov 2024 10:02:48 +0000
Manifest next update: Sun 24 Nov 2024 10:02:48 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: dkB2f5KoikZse/3NgUI5z9lkLnZ5KnnIrX6/l1B/wSs=)
2: slTDgJGgePj22_paILeoG59QckU.roa (hash: MDKxC8tJKoB9ixlqJ+ZHSG1jC7ZZNOtsZINiazW91mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:5b:3f:9b:18:c9:58:cb:46:93:d3:1a:08:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Nov 23 10:02:48 2024 GMT
Not After : Nov 24 10:02:48 2024 GMT
Subject: CN=9a8faa3482262b27085f3444eb08bbd79b37c6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:f5:7c:77:79:26:ce:87:1e:27:aa:5d:b7:
db:37:46:4f:ac:a2:7f:21:41:c1:05:f0:45:aa:d2:
7e:b5:5b:c0:cd:c4:1a:0d:76:a6:2f:56:79:5b:8c:
d0:51:a8:68:22:33:0b:75:20:f8:e3:36:90:00:f9:
4f:5c:9a:bc:e7:25:41:e9:7b:84:46:90:9c:84:62:
a6:6f:87:3c:f9:1b:f6:74:74:87:67:8c:c4:59:df:
4b:9b:af:40:ef:ea:27:22:66:06:c6:fe:4e:12:fc:
d5:35:5d:ac:5b:1e:b9:be:41:33:32:b6:e2:79:ec:
e6:6c:a7:ba:65:a0:8e:4a:98:db:ff:10:5e:41:da:
34:cb:76:9e:d0:40:5a:41:da:ab:18:f5:e2:98:07:
a6:13:bc:af:2a:a7:a4:c9:c0:99:65:2f:90:54:36:
f9:6a:9f:14:a7:c9:5a:e0:e2:6d:b0:94:38:6b:56:
f9:01:83:e5:98:8d:bb:6a:c7:25:0a:a4:39:29:69:
77:cf:11:35:df:b6:53:ff:49:f1:2b:d6:81:f3:83:
6e:07:a1:0b:e5:fe:cd:df:98:3b:64:79:a6:a0:11:
ad:44:b6:a5:39:df:5e:23:92:ff:67:12:dc:55:3a:
aa:0b:f3:8c:24:63:ad:21:bf:64:cf:78:d3:4d:be:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8F:AA:34:82:26:2B:27:08:5F:34:44:EB:08:BB:D7:9B:37:C6:D2
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:e0:ff:88:79:40:51:fd:7d:66:e6:83:07:25:9d:c4:bc:
23:f8:92:49:f5:8a:19:04:2d:ff:49:88:90:f0:0b:fc:2f:13:
aa:5d:d5:2e:d5:c7:14:60:99:be:c4:d2:23:7e:44:b3:c5:bb:
d9:f9:91:2a:70:95:7f:7c:96:06:33:82:df:bb:67:15:f8:00:
8a:48:1e:eb:56:c4:12:58:cd:3a:49:99:68:cd:21:54:56:b9:
2f:85:3d:bb:b5:d1:65:a8:a3:be:29:a4:e1:09:37:31:a4:77:
c0:59:41:71:45:d0:06:45:ca:6a:ce:65:67:5c:0c:31:4c:f2:
72:7f:2d:fe:fa:d3:a8:d3:39:75:60:ea:da:45:de:53:1b:6e:
82:93:97:7e:f4:38:b9:d4:ca:52:2f:eb:87:4c:b4:1f:63:cf:
ae:2e:4a:11:97:fd:2d:d4:37:fb:66:5b:bf:c2:dd:99:8e:5e:
10:71:3f:c2:f5:c8:46:c0:b5:c3:c9:27:f0:26:48:c0:99:39:
e8:60:6b:25:9c:55:95:f6:dc:62:36:89:94:88:b1:b3:d1:22:
9d:33:35:e4:a2:ec:ef:df:c2:5e:e2:ae:e8:a6:e1:0a:46:a3:
2d:c2:d7:2b:ac:1b:54:01:f6:f1:2f:4e:fa:fd:b4:e9:25:b1:
55:6a:2e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeVs/mxjJWMtGk9MaCHdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk
YTA0NmIwHhcNMjQxMTIzMTAwMjQ4WhcNMjQxMTI0MTAwMjQ4WjAzMTEwLwYDVQQD
Eyg5YThmYWEzNDgyMjYyYjI3MDg1ZjM0NDRlYjA4YmJkNzliMzdjNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw71fHd5Js6HHieqXbfbN0ZPrKJ/
IUHBBfBFqtJ+tVvAzcQaDXamL1Z5W4zQUahoIjMLdSD44zaQAPlPXJq85yVB6XuE
RpCchGKmb4c8+Rv2dHSHZ4zEWd9Lm69A7+onImYGxv5OEvzVNV2sWx65vkEzMrbi
eezmbKe6ZaCOSpjb/xBeQdo0y3ae0EBaQdqrGPXimAemE7yvKqekycCZZS+QVDb5
ap8Up8la4OJtsJQ4a1b5AYPlmI27asclCqQ5KWl3zxE137ZT/0nxK9aB84NuB6EL
5f7N35g7ZHmmoBGtRLalOd9eI5L/ZxLcVTqqC/OMJGOtIb9kz3jTTb51/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqPqjSCJisnCF80ROsIu9ebN8bSMB8GA1UdIwQY
MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt
ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm
LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXng/4h5
QFH9fWbmgwclncS8I/iSSfWKGQQt/0mIkPAL/C8Tql3VLtXHFGCZvsTSI35Es8W7
2fmRKnCVf3yWBjOC37tnFfgAikge61bEEljNOkmZaM0hVFa5L4U9u7XRZaijvimk
4Qk3MaR3wFlBcUXQBkXKas5lZ1wMMUzycn8t/vrTqNM5dWDq2kXeUxtugpOXfvQ4
udTKUi/rh0y0H2PPri5KEZf9LdQ3+2Zbv8LdmY5eEHE/wvXIRsC1w8kn8CZIwJk5
6GBrJZxVlfbcYjaJlIixs9EinTM15KLs79/CXuKu6KbhCkajLcLXK6wbVAH28S9O
+v206SWxVWouIQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:51 2024 by rpki-client on console-fra.rpki-client.org