Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: q9ek8AsrGLtH2pXTDsh45CmhbPq7GfExdnp7O6m27/A=
Subject key identifier: 19:61:B3:52:80:DD:9E:35:10:97:54:AE:7E:FC:2E:F5:DC:FE:EC:B3
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0193591C079349A81D005F1DAB5EFFCC9CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 13:00:29 +0000
Manifest this update: Sat 23 Nov 2024 13:00:29 +0000
Manifest next update: Sun 24 Nov 2024 13:00:29 +0000
Files and hashes: 1: KdCqUGyIyCtb6BU-2DJngF5sAtg.roa (hash: Obe3428r3w+UG/xbSpY9dwkqjrD6gNTag6/FtrTepKM=)
2: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: CtM1IHlfaRh2Sj9ijEYUTR10MVThg8gLnWCvnMqNxic=)
3: ua2D3DZ_yFjqLtiaonk0Ekn2xWw.roa (hash: QJ9Ho0jYdXTiLzW+Tmdnr+5RyxpgnT1FVAg0oVraMeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:07:93:49:a8:1d:00:5f:1d:ab:5e:ff:cc:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Nov 23 13:00:29 2024 GMT
Not After : Nov 24 13:00:29 2024 GMT
Subject: CN=1961b35280dd9e35109754ae7efc2ef5dcfeecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:dd:a6:e1:8e:ed:b7:d7:72:5f:19:80:d8:
47:65:1d:ac:d1:38:9f:80:8c:7a:b8:d7:43:5e:c8:
0e:5c:cb:9a:4e:de:87:72:ff:57:a0:a4:68:c3:94:
47:8c:43:fe:70:78:f2:2f:09:77:47:69:96:ff:23:
59:0b:79:bf:60:34:e4:48:c0:09:40:17:a6:7e:71:
90:b6:d3:31:c3:c3:41:c3:c9:5f:1b:a6:c4:05:12:
a6:50:86:f5:6b:d8:6e:f2:c2:3c:f8:84:aa:79:5c:
30:d7:66:2e:a7:f3:ea:e5:2e:32:41:1b:01:32:9b:
a8:30:39:f2:dd:0a:76:3c:c1:7f:30:49:13:fe:fa:
90:48:e3:16:41:3a:8d:d1:5a:89:2e:43:6a:b6:64:
33:a1:9e:84:82:99:fe:e7:ec:73:df:35:39:41:0b:
5a:4b:26:dd:79:60:ab:15:94:3d:33:85:ef:81:e2:
69:c5:d0:7c:a5:2a:21:e6:b6:25:d6:db:2a:1e:5f:
30:6f:a3:19:bb:18:74:2b:a9:f9:5f:66:8d:56:7c:
a4:a5:45:3d:27:38:8a:1f:b8:3f:78:8c:95:e3:84:
9b:fa:e8:24:30:04:c6:5c:f8:84:6f:c8:be:e6:4e:
a1:dc:71:ff:58:9d:b6:44:d2:71:83:a2:ef:c1:6f:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:B3:52:80:DD:9E:35:10:97:54:AE:7E:FC:2E:F5:DC:FE:EC:B3
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6f:07:ea:f0:f0:b7:f2:fb:66:9b:a6:49:3c:72:22:99:a6:
01:1a:df:4a:9c:27:89:6a:b2:9e:f8:7e:49:b2:86:86:6e:e3:
00:5b:d8:8a:26:46:65:27:0f:72:7d:4e:cd:23:9b:5d:ef:3a:
47:d8:bd:df:c0:de:80:a6:c9:87:b6:50:90:8a:eb:b2:73:77:
66:30:0d:ee:ca:14:23:d6:d7:5e:1f:23:fe:03:b9:c0:b4:a5:
34:12:ee:74:f7:d4:1f:59:4f:5a:de:b3:5b:23:51:01:8d:2d:
54:89:e4:f4:68:b8:93:4e:60:d4:b7:41:29:5d:44:83:2b:e3:
3c:33:99:45:67:11:5d:12:d9:bb:9e:a9:ca:8f:07:a2:e9:32:
b7:2e:dd:6d:af:e5:d9:2d:0b:0d:a6:89:a8:78:24:fe:87:d8:
58:3a:ab:a9:77:28:61:43:51:a9:8d:cd:89:7b:fa:25:c6:a4:
2d:00:65:30:ac:b1:f3:0b:cb:4f:b8:f4:3d:45:02:ff:a9:6e:
9e:93:32:2c:74:3f:d1:26:bf:bc:49:80:e7:db:f6:4a:5b:2a:
47:3f:d3:ca:7d:47:91:f3:53:63:1e:38:95:3a:2f:2d:05:62:
f0:a2:45:f4:15:cf:e4:c9:fb:86:e4:24:c8:83:6f:7d:30:ab:
d6:0e:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:51:18 2024 by rpki-client on console-ams.rpki-client.org