Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: jJ9bPQUn4D7CwvCjVIhZ8IAapdWhg4UFDlmNmhJLlwE=
Subject key identifier: A7:85:68:53:77:26:BB:3B:00:0F:E6:E5:00:87:43:4D:D9:B7:5A:33
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 01936C35630967E91DF13691FA36B284B42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1081
Signing time: Wed 27 Nov 2024 06:00:58 +0000
Manifest this update: Wed 27 Nov 2024 06:00:58 +0000
Manifest next update: Thu 28 Nov 2024 06:00:58 +0000
Files and hashes: 1: 0H4x4q5_LjUvnPZFW2od7cjhawU.roa (hash: HAZgzZdZtN9lNP9ClNQsCoDSb7mNQ7XdzXksXsgixNU=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: L+AIC3Am6e+1l1z5zz3mweYbT24c/t7NY2iD5EBe7ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:35:63:09:67:e9:1d:f1:36:91:fa:36:b2:84:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Nov 27 06:00:58 2024 GMT
Not After : Nov 28 06:00:58 2024 GMT
Subject: CN=a78568537726bb3b000fe6e50087434dd9b75a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:8f:e5:c0:0c:0d:14:a8:65:e4:82:bd:2b:
f6:75:39:0c:04:d9:df:a1:9e:a2:eb:c9:a4:5d:67:
56:be:43:43:15:79:2b:4e:76:e5:75:38:19:c6:6f:
e4:dc:dc:f0:8e:45:f9:e1:d5:6b:42:17:04:b2:d2:
e7:24:e4:c2:9f:8c:b1:55:32:41:7b:4f:9a:91:2d:
20:03:46:d9:f1:86:4f:db:95:51:3b:81:5f:98:f2:
b2:58:19:06:3c:18:2d:27:5f:78:20:9d:c7:96:33:
ee:53:34:27:d5:99:3a:b8:99:f2:2e:d0:08:13:d1:
0c:8e:4e:7b:ff:5a:72:37:d7:a2:54:c0:15:9d:b3:
59:7c:1b:26:02:7f:ae:c9:46:60:8a:73:f7:d5:b8:
f5:a3:80:03:db:de:f4:7d:02:79:66:af:31:a4:5c:
2a:9f:e9:3f:19:7a:be:d6:c3:a4:2d:9c:dc:30:0d:
26:0c:15:69:2e:9b:2d:77:5c:81:71:cc:2c:7e:d1:
e4:06:a5:13:0e:14:c6:77:6d:28:52:a1:fe:3c:73:
91:ec:32:52:9d:2b:34:88:b7:44:27:c4:f0:7e:b7:
e1:22:dc:29:6f:18:8d:9a:bd:9b:30:4f:70:fa:a0:
01:1d:9a:c0:f6:e3:83:a7:2e:69:26:ea:fc:af:ab:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:68:53:77:26:BB:3B:00:0F:E6:E5:00:87:43:4D:D9:B7:5A:33
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:d6:a6:15:36:79:69:35:bc:28:bb:bd:ed:e5:a1:73:db:
fd:a5:26:2e:33:f0:10:47:73:2f:56:7a:53:01:65:09:02:48:
f9:8b:52:6f:6f:a9:8b:ae:2b:d8:62:cd:e0:4e:9a:95:30:5d:
3a:4e:f2:86:95:42:c3:e5:5d:c1:62:e9:bd:1b:a8:0b:d0:f2:
b9:79:85:95:d7:9b:60:29:ba:0c:5f:68:55:9e:54:c1:eb:c1:
42:f7:ca:5e:2e:72:00:cd:8d:39:fe:f3:10:8a:4e:3d:37:7f:
9f:ad:6c:fa:97:48:76:de:1a:e8:7f:47:48:d5:55:bb:c9:f3:
f9:cb:aa:fb:70:27:c5:34:7a:b1:32:71:f7:63:41:c5:4e:1e:
d0:43:79:90:91:43:4e:38:61:4b:91:60:18:d7:a4:5a:08:f7:
76:8d:d0:b4:1c:ac:66:45:c3:0e:29:01:25:c3:54:c0:f9:d5:
33:b4:63:dc:69:0a:c3:b4:a5:ce:5c:f5:3a:e3:3d:ca:e6:76:
54:5d:d6:1a:dd:89:6a:5a:1e:b8:3f:4a:69:9f:05:02:84:59:
27:b7:62:ab:1f:0e:3d:e2:82:f5:be:64:17:6f:68:5e:be:b0:
a0:2d:00:cf:9a:92:0a:a9:a5:93:08:e8:17:32:2e:0d:8c:54:
3b:f1:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:31 2024 by rpki-client on console-ams.rpki-client.org