Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: KwnF4bu/wpAilpsIzp48bI3pvcv2Gp60n45tJyXMyMs=
Subject key identifier: B1:1C:4E:C8:3A:5B:D1:C3:CF:40:AC:4F:84:5D:28:40:2E:FC:A1:62
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 0193587967D99ACA9B099D3A5D5DBF51F992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:02:51 +0000
Manifest this update: Sat 23 Nov 2024 10:02:51 +0000
Manifest next update: Sun 24 Nov 2024 10:02:51 +0000
Files and hashes: 1: Gvf8Z-skBo497-jnOSFRSFJtsTQ.roa (hash: B6L1S8kH3w5rOBcyeVPu8ipBEQrD8yvPF9A1/kdIkq8=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: wWitrxzmfqOgk8OpKQ66l3FU6HR99rNaQTCUi4dICkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:67:d9:9a:ca:9b:09:9d:3a:5d:5d:bf:51:f9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Nov 23 10:02:51 2024 GMT
Not After : Nov 24 10:02:51 2024 GMT
Subject: CN=b11c4ec83a5bd1c3cf40ac4f845d28402efca162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:5f:27:85:ca:0c:4f:28:b0:6d:19:26:44:
57:c0:df:9b:69:32:16:2b:37:72:06:56:9b:64:c3:
d2:78:7c:03:96:69:38:2b:fd:4f:ee:3a:cf:d1:24:
44:e7:46:53:3e:39:10:76:22:02:c8:e8:c7:c1:80:
fb:dd:72:fc:ee:d3:16:86:c6:0b:9c:08:37:ba:7d:
e6:6d:f7:a9:8b:c4:fe:33:e2:8c:5e:33:26:c7:6e:
72:a8:65:3b:fc:3e:53:46:c8:e5:41:e9:48:ba:17:
82:8a:1b:81:04:54:53:a1:16:c0:ff:b5:c7:e2:cb:
e0:b6:d4:d9:55:ed:4c:6f:ce:89:e5:d0:f1:ca:9d:
43:28:d1:86:60:97:20:91:3b:39:db:46:82:68:df:
df:e8:0f:9a:1b:f8:b7:88:bf:55:97:49:0a:79:c9:
4d:9e:8e:7a:25:9b:ae:b6:ce:6e:60:3b:52:84:9a:
af:19:20:2b:03:1b:88:74:03:8f:0f:f4:56:6c:ac:
9f:0f:e4:c4:e7:a8:f2:1d:44:21:81:e2:20:40:9d:
04:91:9b:35:d5:95:3e:00:fc:ae:d6:88:d9:09:e5:
6e:21:5f:9e:f1:be:ef:49:dc:1f:4b:cf:14:f1:05:
a7:22:54:4d:25:b5:18:8a:c4:9d:43:01:14:e7:8b:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:4E:C8:3A:5B:D1:C3:CF:40:AC:4F:84:5D:28:40:2E:FC:A1:62
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:59:e2:73:cb:6f:61:aa:c8:a4:5d:6d:05:fb:2f:c8:51:32:
1b:29:7e:b0:f0:1f:8c:75:a5:70:be:2e:2a:05:e5:47:21:7b:
c6:e4:89:20:e3:94:6a:0b:97:04:27:14:11:aa:92:c1:b7:fa:
66:12:99:e3:22:8e:da:df:be:e2:82:19:08:2a:e5:9b:79:22:
b3:42:e7:d8:10:ac:90:c0:be:8b:dd:13:80:a8:f5:dc:63:7a:
45:d8:24:7d:87:f1:de:13:2f:91:c1:00:83:2a:6d:d2:ec:cb:
23:67:c2:bb:02:e0:c2:72:69:d3:21:ad:dc:2c:09:62:95:ba:
06:70:ac:c2:10:62:51:bf:a2:98:9d:ec:33:df:4b:ea:71:45:
6d:0f:fd:fb:0a:af:86:c3:8a:a2:6f:17:39:d6:9f:3c:0b:52:
3d:b4:85:88:e7:6a:9b:dd:d4:82:c5:74:a5:83:16:d5:aa:44:
3b:fc:eb:ec:96:1c:40:8f:e3:af:d9:3c:dc:31:38:4a:d5:6c:
db:74:23:74:6b:84:63:a3:06:98:45:1c:28:b5:6a:58:c6:14:
7b:8c:7c:71:d3:f6:a2:ba:2c:c5:89:3f:61:e8:74:e8:72:55:
4e:f4:60:9d:75:88:c2:a9:5c:85:74:42:0b:5f:01:1a:9f:bb:
a4:e9:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:19 2024 by rpki-client on console-fra.rpki-client.org