Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: ipcpMdzrbo1VWvsTcDsIe/lcwxnFfMYOlRI011arHMs=
Subject key identifier: 22:96:EE:BD:5C:2D:D8:F5:D5:E3:8D:E0:66:29:13:7B:E0:67:11:2F
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 0193579B7FE8B225EA969B6DD0FD86520815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 06:00:28 +0000
Manifest this update: Sat 23 Nov 2024 06:00:28 +0000
Manifest next update: Sun 24 Nov 2024 06:00:28 +0000
Files and hashes: 1: 57Qrt9jAHJiVHR4TRc6BCopAfLk.roa (hash: qzXLWD4uUbmyqbvzgJ/SxB0uAfY5CuIJ6gjtUcYoDlU=)
2: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: dSQmkgOYlpl1mTioLtQug1L9vR7MYpOXdQrJLXRZS94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:7f:e8:b2:25:ea:96:9b:6d:d0:fd:86:52:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Nov 23 06:00:28 2024 GMT
Not After : Nov 24 06:00:28 2024 GMT
Subject: CN=2296eebd5c2dd8f5d5e38de06629137be067112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:20:a6:10:7a:2f:9f:8a:81:08:54:bf:ac:
74:ec:4d:a0:3d:01:02:3d:36:3b:a7:d2:b6:d7:14:
fd:a7:91:01:0e:4e:d2:2a:96:7c:63:4b:89:86:9d:
7d:e6:ca:6c:99:af:0d:3b:a2:01:b5:90:18:07:a3:
e9:ed:8b:34:d9:a6:da:d4:3d:3a:ef:6a:5a:2e:f2:
0e:72:e7:95:7f:9f:ab:44:cc:97:f1:86:22:bc:6e:
34:56:55:a3:cb:f7:14:f0:26:f4:7e:16:04:69:b1:
99:33:77:d9:ea:6f:e5:fa:3a:cd:f5:6d:56:2a:a5:
7a:1f:86:6d:be:21:52:67:b6:a0:6a:fb:a2:ea:fe:
f0:c4:03:b2:0b:bb:8e:5c:44:84:57:b6:8b:b0:15:
63:0d:2e:a8:8f:e4:bd:ee:9e:ab:d2:da:f5:48:a5:
11:29:87:be:18:d4:1c:ba:1b:49:d3:0a:82:52:df:
f6:7e:78:a6:ee:10:d6:99:2c:e5:24:f4:cc:69:b6:
27:f0:3a:87:68:cf:30:46:f9:d7:4f:59:e4:81:4d:
90:24:5a:ed:7f:e4:b0:20:54:23:fa:42:b2:43:b1:
5e:2c:eb:44:61:c5:77:3d:cf:cf:14:6c:fe:ca:d5:
50:8b:ad:e6:d0:c9:b0:7e:b0:34:6f:62:61:d8:4b:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:EE:BD:5C:2D:D8:F5:D5:E3:8D:E0:66:29:13:7B:E0:67:11:2F
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a4:2a:7c:7b:1c:f1:9f:3a:04:11:df:f2:48:b2:25:ce:10:
59:14:c0:43:65:e7:11:f7:f6:1d:05:a8:28:2c:0d:03:5f:a3:
05:bc:90:bc:e9:b1:82:65:9f:f3:e2:05:06:01:69:40:76:4e:
d4:1d:54:c2:4d:24:0d:e1:30:0c:7c:bd:96:af:f4:24:ee:ad:
ef:f9:c9:13:ad:28:bb:35:4a:73:09:e9:77:76:e4:69:c8:0d:
f6:cc:9e:00:77:dc:59:cf:3e:99:47:55:0d:ae:b3:13:e2:27:
7a:e6:c5:38:d0:24:2f:c9:4b:d8:73:29:3d:4d:56:d9:2b:9b:
bc:4d:d2:c7:06:5b:4b:65:c3:e1:66:6d:08:d5:87:b7:34:7a:
93:1c:3c:db:27:21:fd:fc:96:5c:ad:f5:79:cf:e4:71:b4:ec:
31:e7:4a:4c:48:e1:53:6a:97:f5:3f:33:c1:bd:6a:3c:74:5d:
6c:92:1d:0f:a4:17:01:59:da:0c:1f:26:4f:28:21:84:2a:b1:
fc:24:38:eb:14:5e:bc:f8:16:1e:13:28:68:ee:4f:e9:ee:5b:
55:3e:84:82:84:eb:0f:fc:55:19:e5:cc:81:3f:97:39:f6:2c:
8e:75:e6:5a:3a:a2:71:ff:f2:d6:ef:be:25:94:71:b8:07:f2:
2a:0e:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:06 2024 by rpki-client on console-fra.rpki-client.org