Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 3zQiaoaaAHa7FiO9mN59xYv2johAOsMPhZ9BaJDklQ0=
Subject key identifier: B5:14:F0:7F:36:F5:86:82:02:69:EA:AE:D5:29:19:34:AB:7E:58:E2
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0193670EB7EDF16B870C8DD349337002A222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 12B8
Signing time: Tue 26 Nov 2024 06:00:37 +0000
Manifest this update: Tue 26 Nov 2024 06:00:37 +0000
Manifest next update: Wed 27 Nov 2024 06:00:37 +0000
Files and hashes: 1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: wnsYn8RmuViZTXG1pc4H+VVr4iSiNJfhnV0BpM+R6/I=)
2: evggUgPGcna2HTbhx_29SRdesko.roa (hash: pawEoWYCKmw6MX54b8cCjnhH5F4ewSg67H67TYiqgS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:0e:b7:ed:f1:6b:87:0c:8d:d3:49:33:70:02:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Nov 26 06:00:37 2024 GMT
Not After : Nov 27 06:00:37 2024 GMT
Subject: CN=b514f07f36f586820269eaaed5291934ab7e58e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:47:8c:0b:ab:4d:96:83:22:df:f1:06:4f:
62:98:e2:dc:38:50:1d:53:62:af:0a:d5:3d:b9:4b:
12:8f:c0:9d:83:70:7c:7f:f8:30:4b:81:a6:af:6a:
82:4b:dc:1f:b4:8b:63:0b:bb:a4:84:aa:0d:fe:ba:
84:49:1d:b6:c4:44:1c:9b:fb:23:a9:db:7b:89:c6:
f7:de:9c:50:83:b3:2c:27:fa:c1:89:3b:f3:df:34:
96:60:f8:39:9b:e3:0e:42:ff:57:46:b5:0e:3b:50:
c8:46:cf:48:4b:3f:25:0a:c7:09:f3:3e:af:6d:8e:
48:47:db:ad:e1:cc:3c:db:7b:88:3c:a0:d0:db:6a:
a3:46:6e:53:36:3f:99:88:ba:ac:ee:72:ea:cd:a8:
3a:b9:e8:3b:d2:b4:bb:ca:7d:b8:6e:68:e2:09:d1:
c3:a4:60:ad:71:3b:99:92:9b:a4:0f:a2:d0:7a:77:
9a:cd:4e:95:71:23:21:4e:de:4f:c9:e4:09:4c:69:
c7:c7:3c:32:db:5e:f9:46:f8:50:0f:13:68:ef:1b:
70:f2:ac:e2:68:eb:c9:6f:35:2b:0e:4f:8d:a1:8e:
58:aa:ed:4d:6e:4a:33:3f:ee:70:f8:7b:7d:d7:a8:
52:09:38:5b:d7:32:53:93:22:03:d6:c5:68:38:40:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:F0:7F:36:F5:86:82:02:69:EA:AE:D5:29:19:34:AB:7E:58:E2
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7a:b7:bd:fb:63:2a:f8:dc:46:bd:4a:4c:b8:13:7e:c5:ea:
fa:ab:0c:5c:2e:09:0f:55:8d:0f:2b:d9:bd:88:8c:9d:e6:3f:
43:65:b7:6a:d0:6a:eb:9b:d0:bb:1a:09:93:b5:b6:7d:8e:2d:
41:d6:76:42:5e:0d:6c:32:c2:43:8a:f5:b4:92:42:52:84:1e:
d6:5f:81:e6:37:bb:07:19:b6:69:ee:4e:22:be:48:4b:9f:d8:
5f:46:0c:64:16:b0:a5:96:4b:f0:19:3d:ef:ab:28:91:91:2c:
36:1f:a3:6c:01:e4:74:b5:bd:66:99:08:52:a3:fc:de:68:83:
b3:33:09:cb:86:8b:a2:4e:bc:f6:ac:21:14:26:f9:67:1e:cb:
93:a0:89:c4:3d:dc:e2:e4:75:54:27:83:8d:0b:fa:fb:5f:3c:
b9:1d:bb:42:1e:58:4c:dc:fe:bb:fe:c5:a4:70:d6:da:83:0f:
2b:45:08:f2:3e:ff:89:15:c3:07:49:c3:5f:ae:c5:48:d6:7d:
8d:c4:d0:00:2f:5c:21:09:8b:c8:f6:da:8d:50:57:ec:6c:7e:
9e:12:2d:34:b2:e4:b8:fe:61:d4:a0:c2:ec:95:a2:fd:62:03:
ed:e6:e3:90:29:39:91:a9:4b:e6:f9:7e:56:7b:f8:8e:37:65:
af:09:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:11:14 2024 by rpki-client on console-fra.rpki-client.org