Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
File: LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft (raw, json)
Hash identifier: 4nLY1e9GV8/G/O5nM6KNE/rf8PLScsfvGXUVtzDIe0I=
Subject key identifier: B5:AA:9A:8A:00:82:C4:49:55:51:EE:35:74:F6:65:5C:7F:E9:89:41
Authority key identifier: 2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
Certificate issuer: /CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Certificate serial: 0193572DBBDE5F34E1FF0585CEC4A1AE8178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 04:00:35 +0000
Manifest this update: Sat 23 Nov 2024 04:00:35 +0000
Manifest next update: Sun 24 Nov 2024 04:00:35 +0000
Files and hashes: 1: Fd_O0meoBJxOr1FhdBT1UrwRHOc.roa (hash: UidVlB0HyX/vjPax7RE3VFbamOlkG9F6mLlUCCdtqQQ=)
2: LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl (hash: fH5mEp11TXNlwCaKi6OwVERVC/h4r6fvircIAQzytOo=)
3: bWi0plzwqv0v7xYAxMKLXsrQZ7U.roa (hash: L8SSPHl6CrvJh7Odrb1ki3f2ZcjsZS8PEM+TUDWJ5aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:bb:de:5f:34:e1:ff:05:85:ce:c4:a1:ae:81:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0342e0d23ef7e06b1dff5cc6ee4fa17af8bd98
Validity
Not Before: Nov 23 04:00:35 2024 GMT
Not After : Nov 24 04:00:35 2024 GMT
Subject: CN=b5aa9a8a0082c4495551ee3574f6655c7fe98941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:bb:17:5c:99:54:6f:92:9b:f0:4f:9c:8b:
b9:e5:2a:cb:9f:1d:9c:5a:7f:2b:85:ac:cb:a6:1c:
21:b4:46:76:93:17:4a:a1:33:3f:bb:45:9c:5c:d1:
2c:54:0f:87:92:ca:ce:5a:23:2c:ce:15:23:10:59:
63:08:a5:5e:1e:ec:85:c6:3c:8d:4e:0d:f7:48:fa:
4c:17:03:f4:59:8b:4d:23:bb:ce:e5:99:5d:a4:ce:
8e:7b:2b:53:08:97:5c:7e:b2:05:b9:4f:16:49:ef:
f3:8b:5f:52:ac:7d:1c:cc:bc:3f:b7:1f:48:47:f6:
f5:02:95:b0:90:78:5a:ac:b7:92:9c:34:a8:8e:6b:
80:ab:21:b5:0f:1f:b1:72:7e:23:ff:fc:32:73:80:
c1:44:9f:a0:f5:d4:9f:d2:84:91:b0:c0:00:9e:3c:
5f:48:8e:20:94:bf:d7:c1:ea:9f:9a:42:3a:03:3b:
d3:bd:a7:9a:64:aa:07:c7:00:5d:f7:8c:fd:f3:56:
cf:f5:1c:fb:79:71:24:fe:3a:80:fd:d2:6a:6c:ea:
7c:a3:43:6f:00:79:7c:1e:9d:36:bf:76:4d:d9:c2:
1a:af:57:44:92:91:87:e1:ae:ad:70:04:0e:08:76:
aa:54:f5:5f:97:d3:f7:3c:1d:19:56:7e:0c:c4:02:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:9A:8A:00:82:C4:49:55:51:EE:35:74:F6:65:5C:7F:E9:89:41
X509v3 Authority Key Identifier:
keyid:2F:03:42:E0:D2:3E:F7:E0:6B:1D:FF:5C:C6:EE:4F:A1:7A:F8:BD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwNC4NI-9-BrHf9cxu5PoXr4vZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d1fd48-916b-4d83-96cc-c910af93e426/1/LwNC4NI-9-BrHf9cxu5PoXr4vZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:55:40:e2:cf:26:b1:d6:ae:a1:6a:d9:f8:2f:29:f1:48:
29:35:f6:9b:af:fc:2a:1a:31:00:49:d9:ca:fa:a9:38:db:99:
16:cc:9b:d8:f1:fc:69:32:7a:81:dc:c4:4e:e9:9d:2a:d6:72:
38:c2:77:dc:78:97:a6:10:da:16:af:af:74:9a:fb:71:24:01:
22:36:11:24:46:db:39:5d:bf:26:c9:50:67:82:76:ac:43:e5:
9b:39:dd:b7:e4:a5:51:69:27:f6:51:83:05:73:b2:b9:2e:27:
45:9c:a2:05:ae:ed:ee:eb:f6:60:ee:13:66:5e:77:e1:c8:17:
4d:a8:84:fc:c6:b2:83:e0:34:2e:19:b2:41:30:52:93:2a:79:
87:00:6b:ea:f3:14:16:be:0f:88:53:82:0d:a0:93:fc:1d:f8:
3f:24:77:62:2f:ff:8f:85:ad:24:fd:48:d1:89:cd:25:97:9d:
1d:76:5b:31:ac:38:e3:d3:a3:f5:be:00:05:d3:2e:aa:c3:3b:
92:28:27:0e:39:db:c5:77:c6:f6:96:05:b0:4a:60:b7:21:fa:
81:fd:01:f7:c5:5f:04:8c:4f:b3:e5:81:a2:f9:bc:5d:72:bc:
98:6f:1d:91:20:d8:06:e8:b0:2a:cb:96:1a:17:b2:81:32:ed:
85:2a:dd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:05 2024 by rpki-client on console-fra.rpki-client.org