Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File: JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier: JVJfxwF9dNkj3ZaCb3a1LWNdbABy6y1HcpH20gZRGgY=
Subject key identifier: ED:99:60:2F:F4:86:E7:62:D9:0C:79:D6:5F:34:1D:FC:53:7A:9A:92
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer: /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial: 0193568A5FB0250BB22811AAF738DA137914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number: 06C9
Signing time: Sat 23 Nov 2024 01:02:09 +0000
Manifest this update: Sat 23 Nov 2024 01:02:09 +0000
Manifest next update: Sun 24 Nov 2024 01:02:09 +0000
Files and hashes: 1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: AMVwSNFh6HmV4r2QGTw+2EB/0D5Ffyy4/EarOwZ4uu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:5f:b0:25:0b:b2:28:11:aa:f7:38:da:13:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
Validity
Not Before: Nov 23 01:02:09 2024 GMT
Not After : Nov 24 01:02:09 2024 GMT
Subject: CN=ed99602ff486e762d90c79d65f341dfc537a9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:a8:e7:4d:49:e5:8f:51:10:ad:ed:60:9f:
91:cb:18:f9:c5:d0:99:1b:90:43:4b:fc:b8:4a:9c:
f7:21:e9:09:95:42:66:38:4f:34:b4:f7:1e:29:08:
14:16:de:e9:88:19:49:ec:9f:ac:db:7c:78:fc:e4:
2f:48:02:6c:49:51:3e:c7:5e:1c:19:d8:8c:9b:4b:
9a:84:c1:fd:94:24:ca:e6:03:7e:3c:20:57:ec:a4:
07:18:4c:16:4d:6b:1c:f0:13:5b:66:c8:7e:82:2c:
ad:c1:e9:b6:39:96:41:81:c7:15:0d:6f:c8:24:ec:
e5:98:50:2c:30:30:49:8c:4f:d9:53:bd:8e:bb:ab:
79:1f:21:e4:07:e8:aa:49:cf:4e:65:9b:99:49:5d:
e3:46:11:a4:47:af:00:b1:b5:b4:88:f8:75:e7:19:
91:9e:49:b8:78:5b:c8:a1:d8:42:97:4c:0c:27:80:
ee:6d:80:c0:7c:9c:ad:65:37:f5:c7:54:ab:97:a5:
9c:64:7c:92:c1:df:90:c5:47:d2:cc:9d:e8:f1:16:
48:7b:3c:99:89:31:1f:30:73:5b:81:0b:33:d3:bb:
cd:a1:40:b4:84:65:1e:c6:e2:f7:43:c9:e8:36:65:
06:02:ac:89:14:eb:89:5a:9d:b5:63:c1:f4:df:1c:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:60:2F:F4:86:E7:62:D9:0C:79:D6:5F:34:1D:FC:53:7A:9A:92
X509v3 Authority Key Identifier:
keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:26:a5:a5:af:08:b4:99:2d:1c:fc:2d:63:ba:f0:c5:6f:8f:
e4:15:74:02:b4:1b:cb:b1:88:2f:e7:1e:92:52:fa:62:07:d4:
1e:d5:a7:8e:7c:14:98:1a:14:1b:25:59:a5:7b:f2:f8:3d:da:
5e:af:7e:0f:ae:4c:44:9b:55:9d:31:e3:25:1a:d2:36:10:8d:
09:39:77:5f:5b:91:7c:39:b8:49:c5:a5:c2:9a:de:24:01:fc:
d1:a9:4c:30:81:92:21:2c:19:8f:63:57:84:ec:79:d9:c1:f6:
6d:13:72:6e:80:89:e0:ee:a1:08:4b:52:19:a4:39:64:aa:e6:
9c:af:7c:f3:d6:fa:cb:4a:05:d4:05:70:cc:87:7d:03:83:f1:
25:90:63:99:25:18:ad:3b:8f:87:45:94:1a:cd:c1:e6:ce:8c:
f6:38:de:94:4d:cb:25:54:e2:9f:0e:b8:5b:94:da:b4:ad:c9:
8f:da:2f:8b:81:54:f2:89:46:56:e7:0a:f6:c7:dd:46:41:32:
f4:f1:f9:60:03:9b:d8:3a:66:53:cf:6b:57:c8:5c:6a:1a:d2:
69:62:89:67:fc:e6:23:fe:ac:c7:9c:e9:0b:4d:35:67:f3:42:
1a:28:9a:58:30:33:fe:c0:f9:4d:86:82:88:c7:db:03:4f:db:
1d:3e:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:17 2024 by rpki-client on console-fra.rpki-client.org