Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: bQ67NVHLlOx7uZwKwA/BSyD0ZTitORu7DBNUlmpeNlA=
Subject key identifier: 60:17:E1:9A:BC:0B:C5:C8:81:92:E0:46:8F:B6:56:02:8C:46:A4:92
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 0193549A5008E4230CAC60990B96D71F2DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 16:00:19 +0000
Manifest this update: Fri 22 Nov 2024 16:00:19 +0000
Manifest next update: Sat 23 Nov 2024 16:00:19 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: O+NAC/hmcE7bNMdlQk4/z9BYf8ZURYsskXtaVuEyL5E=)
2: UPOSqSZP-jXijJtBDvLlqsoaF54.roa (hash: EZH/KhvZol1jGlejQB3ga10+eCKY8xwE3iHctH5zuRc=)
3: fBIKhGuDs2L4EbfNdPCgcHXUXww.roa (hash: E1Lg4+WA7U1e0033zKsPtjQLujuHu6WKSG7Jgjhfuk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:50:08:e4:23:0c:ac:60:99:0b:96:d7:1f:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Nov 22 16:00:19 2024 GMT
Not After : Nov 23 16:00:19 2024 GMT
Subject: CN=6017e19abc0bc5c88192e0468fb656028c46a492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:10:83:7c:e1:71:3a:d3:07:38:60:34:22:
c4:85:59:f5:f7:8e:84:3d:02:69:ed:1e:5e:4a:a3:
40:e4:7b:5b:95:73:0a:0d:b4:4d:d4:b0:bd:71:7a:
b2:87:10:e4:0d:a2:c9:85:74:dc:b9:f6:3e:61:ab:
70:7d:c5:7b:15:27:b2:a1:17:af:c9:a2:86:1e:e9:
f6:91:fd:c4:b7:6f:79:50:ba:06:5d:cb:b5:3b:af:
cd:67:d8:ff:19:d5:b9:9d:0f:b9:01:4a:a6:d5:11:
e3:36:95:a7:6c:28:99:8b:b7:b3:7f:b0:20:d6:14:
2b:d8:5f:a6:b6:df:f3:47:40:64:7c:86:ba:55:e3:
8e:f0:08:fc:be:7f:fe:6d:04:66:e5:7c:2c:c3:e9:
cb:a0:3a:dd:e3:eb:ce:e2:52:6a:aa:7e:b1:2c:0d:
db:f4:12:3f:b6:29:d3:0c:45:91:27:a8:45:3e:12:
5e:4f:8a:c5:d0:e1:ff:b1:df:55:68:0a:66:e5:8f:
35:8d:3c:36:58:ac:33:8a:d2:fe:a3:8a:0f:9b:11:
d8:2d:34:46:8e:62:80:ff:83:21:cf:f4:3f:58:ac:
ba:2a:e7:21:e1:4f:35:4f:55:43:6f:37:b7:b8:58:
8e:81:9d:72:6a:4e:cf:2a:b8:e9:cb:3d:b2:c6:91:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:E1:9A:BC:0B:C5:C8:81:92:E0:46:8F:B6:56:02:8C:46:A4:92
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:59:b0:ee:ff:8a:ab:78:2d:91:37:2b:4e:fd:97:87:8c:ce:
ef:8e:2e:fd:40:b1:5b:3b:4c:59:aa:29:1d:23:54:ec:eb:28:
8b:70:60:08:ea:0a:d6:51:cd:6e:ca:70:e0:e5:d5:1a:06:81:
dd:f5:97:7b:37:43:8d:ae:27:b5:02:56:c1:f7:75:ac:f6:12:
aa:5a:23:9c:16:36:3b:80:83:98:54:d4:8b:3d:9f:00:a2:b8:
06:0e:e2:3b:79:0f:1f:0e:21:2c:da:58:19:ad:c3:c2:06:04:
fa:bc:bd:3b:43:a9:d1:c2:b6:c4:68:a1:75:27:76:97:9c:d9:
98:9e:cc:b4:ae:3d:c6:14:05:64:38:dd:18:df:f5:b5:a3:f3:
78:be:d9:75:63:82:c6:5b:d1:a3:de:c3:69:54:2a:7b:a4:84:
2b:78:6a:96:d6:11:88:da:39:e6:00:0b:b3:5b:88:b3:26:1a:
6b:3c:7e:4b:a4:5a:b5:72:14:21:d4:f3:43:13:e6:49:38:aa:
a6:2d:be:3f:45:4e:9c:e1:c2:61:07:d4:7e:b4:90:2d:09:04:
cd:41:85:c8:30:45:4a:e8:da:b6:21:9b:05:95:4d:54:69:0a:
a7:72:4b:ec:8e:f9:43:e4:a3:4e:51:3d:63:ed:65:2e:d1:1f:
f4:70:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:39 2024 by rpki-client on console-fra.rpki-client.org