Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: PnitYsFUk0+drKhqbQYEgyT5bPjn+GyLMcscDKUKXiw=
Subject key identifier: 3D:51:D4:8F:28:CA:59:66:FA:0D:2B:8A:C6:04:7C:D4:7D:69:75:E6
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0193640F30EFBB8004190D48297FD3301486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 138A
Signing time: Mon 25 Nov 2024 16:02:17 +0000
Manifest this update: Mon 25 Nov 2024 16:02:17 +0000
Manifest next update: Tue 26 Nov 2024 16:02:17 +0000
Files and hashes: 1: saMpOH0h-a1X6S_qpr0soor6TYs.roa (hash: XxTmGyx921Wi4JYtDBQt+AXuqAoAN1WuijINDGlFMac=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: dkJzw/nVF7tXRv9wpVdXWK4WNEqsitp/Gq3VVATjzx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0f:30:ef:bb:80:04:19:0d:48:29:7f:d3:30:14:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Nov 25 16:02:17 2024 GMT
Not After : Nov 26 16:02:17 2024 GMT
Subject: CN=3d51d48f28ca5966fa0d2b8ac6047cd47d6975e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:4e:a2:65:1f:0d:39:25:d3:1c:ea:d7:85:
09:8c:fa:7b:06:63:49:df:d4:f5:b2:7d:6e:7d:40:
b3:4c:c4:38:02:10:29:3b:2e:2b:5a:25:97:e5:50:
bb:ae:ce:60:24:1a:2d:8e:d7:31:73:9a:4c:22:9a:
d9:c1:e4:f2:d0:3d:87:50:cc:64:33:9d:86:98:73:
4b:e9:7b:64:50:d6:54:ad:e6:55:07:e5:ed:81:ef:
c4:90:5e:c3:59:4a:dd:48:fb:62:64:7f:e7:6e:15:
02:e7:6c:69:e2:8f:1b:6f:da:ed:05:2b:79:8c:66:
88:31:f8:b7:6e:ee:fc:89:a3:7d:55:13:91:c2:fb:
01:e4:90:be:6a:aa:2c:b9:f1:7a:fa:87:f4:c9:3c:
2c:99:34:7b:e9:c7:4b:f5:23:fd:22:7f:7b:05:a6:
73:c4:67:c4:7c:b5:31:bf:c3:45:65:c0:ed:6f:f2:
ed:c1:aa:44:66:4d:02:25:24:3e:7e:cf:22:02:3d:
f8:01:c2:32:5d:6f:fc:5e:16:7b:7f:e3:b8:01:1e:
20:2f:97:a9:c4:a9:07:0b:e7:cc:87:9a:02:ac:b5:
66:f0:df:48:d9:ea:f0:55:cc:ef:d5:27:72:c2:65:
e4:0f:49:52:72:3c:8a:c6:09:f9:dc:8d:e3:3e:c0:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:D4:8F:28:CA:59:66:FA:0D:2B:8A:C6:04:7C:D4:7D:69:75:E6
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:ad:c5:f5:bc:38:35:f7:55:aa:4f:d6:4e:54:84:ce:26:
76:42:d5:b0:a0:e3:19:e5:e0:43:d2:4f:89:05:29:c2:c1:2f:
8e:3f:4c:8b:22:13:94:bf:77:fe:37:60:40:25:53:db:4b:1d:
94:d7:02:6a:e5:b3:b0:74:f4:6f:48:0c:f3:ef:d6:8c:e7:07:
1c:36:73:3f:38:0f:2e:5b:b5:00:83:38:60:a0:b2:42:ef:7d:
04:b9:2f:28:10:94:52:de:52:c6:37:44:1a:53:0c:2f:95:41:
78:51:b8:ac:76:f5:59:ec:9f:a3:d5:a9:75:16:c7:9c:9b:9f:
2e:8d:09:da:a2:da:8a:ed:36:01:cf:d1:7c:b2:17:50:8b:94:
66:a7:46:72:84:e7:60:29:e4:bb:f9:e8:23:ec:51:f8:83:45:
ca:a3:96:b8:41:03:16:4e:d6:40:98:d7:43:b4:3a:57:7f:20:
ce:b6:ba:f8:9a:7b:2b:2f:1c:70:88:54:94:a1:f4:d5:8e:94:
8d:6c:b9:dd:26:72:32:60:a2:c0:91:7d:ac:c8:ce:b5:5a:a7:
c8:4b:2d:18:99:23:41:7f:fd:42:5f:f3:a0:1f:c9:48:b0:cd:
0b:55:69:8d:1a:36:76:97:62:bd:e5:63:44:b3:9a:72:e5:df:
57:fe:49:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:24:51 2024 by rpki-client on console-ams.rpki-client.org