Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: sPoD6RitMZnV8jvfWL+pArbsZxnHTPT0L47/ikX7pDE=
Subject key identifier: 34:E4:19:F9:1F:DB:C3:F1:99:61:B8:BE:AF:A8:63:B8:2A:D2:30:78
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0193568A590EAE48AB48296BB8FB51925296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0B77
Signing time: Sat 23 Nov 2024 01:02:07 +0000
Manifest this update: Sat 23 Nov 2024 01:02:07 +0000
Manifest next update: Sun 24 Nov 2024 01:02:07 +0000
Files and hashes: 1: 2SA-pU10nYaeDKMIsnAAHuIGi1c.roa (hash: AxiiLjcM2JO5jRhxuL+R68mTwsB0Or/TSNElO2SSOTo=)
2: R0YJl09TDcfd96Zynya53vkq-8o.roa (hash: NRrCtnFDbBIgWbjic825UjeT21nxx5cpe8lbgYZRRmU=)
3: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: hG8ApxQKeMIJlfkh3cOl88N4ABHx7DCZuWUJcE9HZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:59:0e:ae:48:ab:48:29:6b:b8:fb:51:92:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Nov 23 01:02:07 2024 GMT
Not After : Nov 24 01:02:07 2024 GMT
Subject: CN=34e419f91fdbc3f19961b8beafa863b82ad23078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:f3:d0:76:9f:6b:8d:4c:42:91:fa:29:1b:
18:e3:8d:4f:6e:95:47:31:46:93:c4:ae:3d:0c:20:
4c:38:14:8f:71:55:e4:cd:3a:4d:95:0a:6c:94:f1:
34:e4:db:61:de:b7:58:b9:1a:33:51:dc:0b:f6:f7:
84:37:c8:00:33:73:d9:be:32:d0:c7:f4:e6:02:57:
ea:be:de:e2:cf:34:e5:0a:83:88:fe:f5:b9:88:b1:
37:e4:f7:a7:29:82:de:db:a6:bb:c1:ba:a0:50:f0:
81:3f:cf:31:f4:d9:5b:3a:c3:c3:60:d1:d6:31:ab:
21:a6:4f:ff:24:f0:2b:f5:4a:a5:92:e2:fd:a5:db:
af:66:3f:66:69:df:7f:cc:e7:c1:00:75:87:97:94:
ba:94:54:ea:6c:b7:81:0b:f9:53:81:da:38:20:5e:
2d:a0:c7:6f:ee:18:2e:da:d0:1e:17:e4:b9:0f:7d:
45:f9:c5:86:55:4c:9d:01:bd:ab:ee:b3:a0:0d:aa:
d9:13:8f:f3:23:2f:6d:81:90:a4:35:bb:06:c8:6c:
c6:fe:9c:db:ec:64:52:62:b8:4f:bb:83:f9:79:2b:
58:53:fd:8c:2f:d9:82:61:76:48:05:fc:ca:c9:f4:
4d:fc:dd:f8:35:bc:0f:b8:b0:56:6b:9a:a5:81:00:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:19:F9:1F:DB:C3:F1:99:61:B8:BE:AF:A8:63:B8:2A:D2:30:78
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8d:86:cc:b1:1c:66:11:80:c1:2d:f2:38:06:da:4c:25:a2:
b1:64:b2:6c:69:89:78:23:2f:2e:44:68:3c:70:9f:a6:ad:89:
ff:8f:33:f5:f8:b1:32:d9:19:2e:30:3f:30:e9:49:86:5d:dd:
68:94:e4:3a:d4:42:8b:33:fa:fd:b5:05:b2:54:65:31:67:5e:
99:03:b1:35:11:55:29:10:fc:69:88:8a:cc:a2:af:94:2d:4d:
a0:a5:1a:aa:d8:21:3c:19:0c:54:3a:7d:07:64:2d:64:0c:e7:
1d:bb:00:a8:d9:ca:86:24:02:65:0d:4e:da:32:88:73:a8:e1:
05:17:6e:dc:42:6a:a9:e6:d9:29:ba:5d:a8:d0:94:ca:2e:bf:
6d:4d:92:56:83:41:38:2e:53:b8:95:5d:cf:d2:93:ba:92:8c:
82:42:f1:df:7b:7b:13:ea:a4:49:29:ad:c6:f0:25:d4:65:4c:
72:4f:df:a2:34:8b:51:42:d9:78:32:37:6a:27:50:dc:21:e8:
38:50:69:ef:53:0c:13:05:00:20:45:1a:61:58:99:02:c4:1c:
39:f0:de:5d:54:ce:17:94:5c:b4:c3:04:46:55:a9:cb:2d:52:
4f:ee:53:50:55:e1:11:1f:76:e3:3d:b5:07:c6:e8:08:4b:b5:
8e:6b:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:15 2024 by rpki-client on console-fra.rpki-client.org