Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: 0vuEUZR1nPyvmTmy0XqknxsQI9JYNEdAcRHWgABg8hU=
Subject key identifier: 0A:52:EF:77:09:ED:2E:B8:E6:2E:68:EB:71:57:86:11:C6:F8:AC:38
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0193587955D3907DB900B0634E8152BA663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:02:46 +0000
Manifest this update: Sat 23 Nov 2024 10:02:46 +0000
Manifest next update: Sun 24 Nov 2024 10:02:46 +0000
Files and hashes: 1: ScccwXon05t59yBDYOkj_6pSBzo.roa (hash: 9L40E9vJNuaMsmt05Rbbr1j90sCXRETKEjensRsXvSM=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: Kwd1seqFltg5jXl98Rjw6+JDDgXOwNFzowavhNbgE3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:55:d3:90:7d:b9:00:b0:63:4e:81:52:ba:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Nov 23 10:02:46 2024 GMT
Not After : Nov 24 10:02:46 2024 GMT
Subject: CN=0a52ef7709ed2eb8e62e68eb71578611c6f8ac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:41:3a:b1:13:5c:0f:eb:8d:a1:53:6b:9c:
24:b4:12:ad:47:49:2b:04:2c:96:3f:f8:6d:b6:0e:
7d:43:50:79:05:80:ea:05:18:16:4f:67:aa:81:60:
04:10:74:f5:29:5e:24:71:41:c6:cc:95:1b:ef:bc:
cb:a0:89:38:a8:ea:1a:48:d8:13:9d:3a:7d:1c:46:
db:7f:91:90:c1:4a:12:91:ce:6a:ee:52:0c:61:b4:
5f:b6:d4:c9:20:6e:d3:58:a4:c3:c3:9c:21:6e:50:
51:b9:19:d8:a5:d1:a0:ac:da:e8:37:a5:b8:0c:3c:
2e:bc:59:91:7a:0a:fd:af:1d:66:d0:51:61:1f:0b:
a8:b6:c3:1d:cc:53:8d:52:82:4e:26:77:fc:b6:42:
3a:9d:62:05:3c:dc:1d:eb:f0:fd:00:d4:1f:d2:51:
74:c1:6f:a3:20:7a:38:f1:e2:a9:c4:d5:f5:14:61:
73:83:df:f8:ee:4c:7b:f7:6b:59:74:33:c7:ec:72:
ca:56:25:83:b7:36:73:ca:74:26:69:8e:1c:a8:68:
4b:77:70:be:55:0c:11:be:62:c0:7f:14:57:63:77:
c0:f1:c4:8f:27:41:a4:ae:e1:4a:05:48:dd:f1:a6:
3b:40:d3:bc:0c:c7:3c:69:31:25:3e:b4:81:a3:a5:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:52:EF:77:09:ED:2E:B8:E6:2E:68:EB:71:57:86:11:C6:F8:AC:38
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:bf:c5:1f:7b:42:d4:2a:87:e7:94:68:4c:ad:bc:b4:27:
c3:ce:6c:7e:0b:18:d8:9f:93:33:c9:60:40:f7:e3:2c:05:24:
6a:58:6d:73:d0:26:5c:3f:53:98:a1:c7:17:69:6e:0b:52:0d:
ce:1e:5c:eb:a6:92:d3:60:c2:b2:84:37:3c:42:d1:68:c6:3e:
97:32:99:37:40:5f:87:90:c2:f7:a2:19:00:46:aa:4f:34:cd:
f5:b5:0b:18:cf:8f:0c:31:2b:0c:4c:b8:8f:a6:a0:2f:61:82:
43:40:ba:70:f8:24:68:d5:94:2d:41:f6:64:2e:81:a9:f0:6d:
42:26:40:24:cb:8a:a7:2f:6b:2c:f7:7b:2e:5d:f4:0f:d3:8b:
9a:04:e5:9c:9b:ab:0a:20:1e:58:b8:34:f1:16:a0:6b:44:cd:
a4:b8:67:34:8f:7d:b5:bd:03:de:e0:a7:90:3e:8b:3a:ee:4b:
e8:61:8e:e6:29:71:b2:c3:82:a5:80:fe:c8:65:45:de:49:8d:
b7:ef:2c:8b:86:5d:2a:d2:d9:35:81:d2:4b:63:71:92:3e:b4:
42:99:f9:88:02:0d:af:19:78:0f:d2:2b:3e:a6:94:cb:dd:f2:
5d:aa:4f:e3:17:be:b2:58:e7:85:bf:87:fd:8d:52:5b:aa:a9:
a7:0a:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:24 2024 by rpki-client on console-fra.rpki-client.org