Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: ilFGssw5zGUVIH9pZKRJv9b7eYk7De6qOwizVCY6l8k=
Subject key identifier: 07:0D:98:0A:75:4B:E0:CC:ED:C5:55:20:D1:34:93:F8:38:97:6C:F4
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 01935576355451545DDD1952D9D804D77379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 20:00:30 +0000
Manifest this update: Fri 22 Nov 2024 20:00:30 +0000
Manifest next update: Sat 23 Nov 2024 20:00:30 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: 37R1/Kp+rHlEVHL6lv0oQY3IOvrw7IxTQeOONwjtNDs=)
2: qRp5jN7Ipfthiin5xppDik9uiLI.roa (hash: fsTlvB7JUVxfsitCfgyEQqbjXai2/3dkBtGssl4iU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:35:54:51:54:5d:dd:19:52:d9:d8:04:d7:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Nov 22 20:00:30 2024 GMT
Not After : Nov 23 20:00:30 2024 GMT
Subject: CN=070d980a754be0ccedc55520d13493f838976cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:44:ae:e2:a2:92:fd:8b:4f:39:28:25:fa:
cf:49:99:97:a1:56:29:df:81:e4:c9:74:95:4c:e0:
e9:a6:ff:96:5f:c5:33:a5:3e:e5:c1:6a:e0:95:53:
bd:1c:49:f3:af:36:f4:7e:f0:81:c2:6b:e5:43:71:
82:13:c2:df:ed:66:8c:0a:d4:82:78:5f:b8:bc:c6:
4a:75:5a:60:f7:2e:c2:37:4b:79:f8:db:d2:fb:c5:
9d:39:5a:83:09:df:cf:c5:f6:9a:cc:78:28:b3:86:
23:cc:8b:b7:48:9a:3c:2d:26:92:d4:eb:f7:aa:67:
ca:f0:95:c7:84:3a:ae:ad:0d:e0:0b:fc:8c:91:5a:
b2:47:b0:9d:a7:2d:72:f8:b6:c8:7b:2b:05:d1:54:
55:9e:b4:fe:65:f6:c7:a7:b2:05:13:af:67:1f:36:
0c:df:05:3e:f8:f8:f8:24:65:30:05:7f:de:42:6b:
02:0d:2e:aa:68:13:a8:d9:dc:e2:f9:12:a3:d6:d6:
39:2e:8c:7d:18:4e:8f:05:45:fa:78:24:bb:67:09:
c1:e3:ab:d0:39:a3:a7:57:d2:f8:0d:6c:c4:f7:dd:
c9:d0:90:49:46:d3:6b:98:bd:18:6b:12:e1:f4:92:
e7:b7:cd:b9:2d:67:59:3a:4e:70:bb:03:72:a1:4b:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0D:98:0A:75:4B:E0:CC:ED:C5:55:20:D1:34:93:F8:38:97:6C:F4
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f6:5a:ac:1e:90:db:ca:f4:ca:2e:88:00:8b:0e:2a:d2:64:
05:e1:2d:bf:25:03:79:d4:54:54:07:95:55:4c:9a:45:2e:7d:
aa:08:73:91:cb:4a:6c:fc:91:89:37:54:71:1e:6c:77:e2:38:
78:f5:48:a2:01:1c:18:13:7b:1b:83:dd:9f:6e:96:6e:53:84:
78:80:60:1d:98:79:5c:06:fc:af:80:1c:48:9c:82:76:7c:f9:
0e:aa:e7:94:1b:4d:10:85:9e:10:06:8d:6d:5a:04:e0:b4:58:
23:6e:cf:49:54:ad:e9:e9:15:6b:b7:6b:c8:ab:9e:9a:9c:5a:
22:28:a8:22:40:46:28:d7:98:ec:be:a6:fa:e7:34:96:e1:d7:
59:65:9b:47:f3:08:85:fa:a7:88:e0:c4:f9:cc:82:eb:1f:a2:
45:1f:09:af:79:17:1b:f3:18:6a:10:80:74:00:ce:ac:1a:d8:
6e:24:84:e7:e2:66:cf:03:cc:26:49:02:7e:9a:7d:0a:5a:11:
d1:b7:71:1f:dc:94:67:a1:c8:5d:cb:0e:69:82:ca:06:d9:30:
2a:34:d8:aa:9d:da:47:cb:53:52:ac:7a:e3:ef:59:f5:3c:0a:
50:4d:26:27:81:2a:fa:4e:da:7b:7e:da:ee:8e:fc:cf:88:ba:
4f:9a:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:54 2024 by rpki-client on console-ams.rpki-client.org