Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: 2YB5Duf/oJqVn+6wzPcSg/UtrUOLzvqXX11YGZicGEg=
Subject key identifier: DC:AC:14:57:08:38:E1:16:80:3D:17:77:91:52:2E:CE:AD:13:B3:5A
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0193568AB581BC54F3A43189BB8F5B52A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0D90
Signing time: Sat 23 Nov 2024 01:02:31 +0000
Manifest this update: Sat 23 Nov 2024 01:02:31 +0000
Manifest next update: Sun 24 Nov 2024 01:02:31 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: BLkn0QbrR9Yd04PnQv/RWZRVDvpnFUJx7D0elSPCiGY=)
2: NgiZIvgfSE3gRbXKWGjL7-RX4JA.roa (hash: s1nxacAoqwvGw7o6uKwGOjxFDbTY351bALOZ7RPT8kE=)
3: bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa (hash: 30Hov8q4hfIbN9zHbX1aOu5QbHtVsV28wqW/XK69yvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:b5:81:bc:54:f3:a4:31:89:bb:8f:5b:52:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Nov 23 01:02:31 2024 GMT
Not After : Nov 24 01:02:31 2024 GMT
Subject: CN=dcac14570838e116803d177791522ecead13b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:e3:ac:c0:79:8b:5e:33:60:cb:e7:09:c2:
a4:66:71:5c:97:b7:fc:75:82:cf:c6:c3:1b:14:ce:
bf:66:15:0f:d1:f8:7c:a6:ba:91:5f:61:e1:2f:f0:
21:20:4f:9b:45:c9:30:d1:e9:05:2c:11:94:3e:77:
b5:a7:8a:f6:93:a9:b4:36:9e:ef:e1:18:1c:40:f3:
17:c6:4a:e7:90:2f:7f:4c:9f:d3:6f:2e:0c:b4:3a:
fe:e7:06:fe:2c:64:83:0c:1d:30:a4:68:cd:08:00:
50:cb:7c:db:28:46:f4:25:f0:a3:7b:2a:fb:96:3f:
44:81:8f:cb:f0:1e:06:b4:bd:69:2e:c0:d0:7d:bb:
26:b4:ff:93:1a:9a:b7:ca:f2:c9:0f:15:1f:a4:e2:
fe:53:c8:4f:9c:56:ce:8c:f8:94:7e:e6:e6:72:c0:
35:eb:b5:21:d5:f7:01:9c:be:4b:d1:3a:c4:88:90:
8c:aa:a1:ca:b7:81:f7:b1:cf:f6:84:c1:a3:50:d7:
3f:75:6f:63:56:d3:71:fa:8d:a2:1c:ae:96:ed:99:
b8:43:94:cc:9b:1e:97:99:0d:da:08:e1:95:05:d3:
6a:11:5b:fc:62:04:d0:df:e0:3a:c1:71:c7:f7:23:
c6:64:25:c8:e7:1f:24:3b:c2:3b:4e:df:54:62:5f:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:14:57:08:38:E1:16:80:3D:17:77:91:52:2E:CE:AD:13:B3:5A
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:d3:e1:aa:f8:a9:41:c2:37:d3:00:33:f1:11:7f:46:b8:
92:5f:42:5d:ae:03:86:84:6c:30:e0:a4:1c:2a:5d:4c:64:bc:
49:ab:63:00:14:66:12:f7:e8:e9:fb:ee:c4:51:b0:90:c9:93:
de:e9:e9:f9:88:d5:97:20:a7:9c:f8:b8:4f:a8:dd:93:fe:0d:
50:db:cd:92:cb:12:ee:31:e4:a2:02:79:81:3f:4a:05:b3:90:
03:98:68:ec:a5:b6:f0:a1:62:b8:73:e5:8d:e4:17:04:3b:fe:
35:13:5e:29:82:45:7c:70:10:d7:79:8f:cd:9c:6b:67:e4:75:
f6:53:c8:30:92:d1:2b:df:bd:75:f2:99:a3:0c:36:49:d0:c8:
6f:8a:93:47:1e:2e:7d:94:59:65:11:50:95:ad:51:2b:d2:db:
0d:8a:32:0f:fd:6e:9e:11:7a:2a:87:4f:97:4f:35:83:c7:2a:
6e:10:c2:a9:cf:2b:ab:57:c9:25:21:c4:aa:cf:75:da:9d:39:
c0:05:d9:b5:35:84:d0:8c:ac:3b:04:f4:53:38:e6:63:6d:fd:
7d:6c:df:2e:57:c5:58:8b:5a:1e:8e:6d:ea:3c:99:93:54:86:
a5:cc:bc:cc:eb:54:f9:00:1e:31:b3:40:d3:7a:0a:85:c9:ed:
b9:a2:4c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:04 2024 by rpki-client on console-fra.rpki-client.org