Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: ZudxJEp7ZSQAYAtInDPNlS5u3V8OzJkVqoXOgGa6Xck=
Subject key identifier: 6C:F1:33:69:AA:E6:7C:12:BA:13:02:08:82:C1:71:50:7F:F3:76:91
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019352077E6E85A64477C3C75D027EE87470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 1373
Signing time: Fri 22 Nov 2024 04:00:42 +0000
Manifest this update: Fri 22 Nov 2024 04:00:42 +0000
Manifest next update: Sat 23 Nov 2024 04:00:42 +0000
Files and hashes: 1: FwBT6fO1eZGmthsE2_v3plJbe5s.roa (hash: 4oy6ZnuHk0wZGiw/ek0sj1a+pEq/QpwEq6a38bnoIAY=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: NMLmASki7z+AkShExqh25YsTHrzGupd6QDR51AGbAFY=)
3: kdm3v2WXPWKh3cWBPWJatzd1HB4.roa (hash: 3JTfhtJ+PUMhb7bepHfNxmsdi6WhYgoTJTi9vxjnHy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:7e:6e:85:a6:44:77:c3:c7:5d:02:7e:e8:74:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Nov 22 04:00:42 2024 GMT
Not After : Nov 23 04:00:42 2024 GMT
Subject: CN=6cf13369aae67c12ba13020882c171507ff37691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:25:1e:61:6e:fa:19:11:1b:4b:e0:00:ee:
4c:4a:36:1a:d4:e1:2e:16:98:39:ec:69:67:48:f4:
ff:5f:37:2c:2f:00:66:58:cb:c1:cf:5a:d8:30:4e:
5c:55:7b:df:19:f0:21:f3:48:b4:96:96:b8:ff:95:
a9:4d:e9:c8:6e:96:20:af:f1:c5:09:ec:48:b0:7f:
30:3a:87:b4:3b:71:05:cc:25:2a:96:b5:70:11:78:
fa:15:72:ed:73:fa:ad:c4:0c:84:1f:c5:e4:dc:62:
21:ec:0e:de:2a:13:8b:f7:fc:e7:0d:14:bb:ec:6a:
d2:13:1a:17:6e:5e:ae:86:0b:0a:72:d6:8e:ed:95:
d9:26:8a:51:6b:0d:ad:fd:7c:f2:b6:c9:dc:d1:55:
2d:95:75:f0:62:ec:ec:56:71:d9:af:64:ea:94:c8:
77:26:87:97:db:20:25:3f:0b:da:0c:c4:ff:ca:7d:
e4:80:ca:39:b8:6b:41:b8:30:a2:47:a9:87:39:12:
7f:e8:34:c5:3d:1b:85:d4:89:a8:cc:22:23:9d:2e:
d7:87:c1:2b:d7:95:41:05:0b:12:ed:88:c3:83:b5:
b4:98:25:2c:cb:c9:62:fc:ca:a9:d4:a1:87:4b:82:
cb:e5:ae:ef:40:c3:d0:df:19:bc:c1:11:65:d2:4e:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:33:69:AA:E6:7C:12:BA:13:02:08:82:C1:71:50:7F:F3:76:91
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1f:76:d3:67:3d:91:20:1c:da:75:a2:34:9b:1e:79:52:43:
ed:ec:98:b2:63:0a:24:68:69:94:d4:2c:df:5b:ce:bd:f5:2e:
b9:14:fb:a2:0a:c5:1b:75:0b:f4:18:76:94:02:62:40:35:4b:
c7:2b:c7:66:db:d8:b6:d1:4b:d3:24:32:a0:bb:c4:ca:e1:41:
0d:5d:e8:23:9f:5c:42:dd:76:9a:69:d3:09:16:48:5c:20:72:
e2:8f:69:d3:35:c4:12:9c:ad:ad:b6:25:02:46:b4:14:d6:4f:
94:56:95:3c:fb:09:1e:de:7d:35:2c:4b:16:37:af:ef:f1:45:
15:01:16:7d:1e:56:4e:c8:98:5a:eb:9c:21:f0:1e:ad:7c:59:
17:61:d5:27:87:52:d5:d0:ee:3d:19:d8:54:22:fc:93:ad:d0:
48:a6:e5:fb:c3:56:f3:86:2b:23:57:80:85:f2:1d:d3:aa:6c:
2c:d3:3d:14:f6:6b:a3:ac:db:d1:58:33:11:e1:c8:71:cf:56:
c1:91:65:d3:4c:e3:3f:a8:a0:d2:a9:81:25:1a:35:4f:24:a9:
60:88:8d:be:19:27:5a:df:1b:49:41:db:91:4a:7d:ec:ae:d9:
31:85:4c:d3:bd:da:35:87:de:20:47:3f:08:7c:9e:19:0b:14:
46:e7:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:19 2024 by rpki-client on console-fra.rpki-client.org