Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: aOziN5DSELAviVrJiCn54CILqh29F8XXHsJ5ESRjONM=
Subject key identifier: D2:23:C2:D2:40:91:CA:72:62:F4:FF:0B:DF:63:BD:EF:30:03:54:C5
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019369D9F92ACF271AE7210D291F7B6407D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 044D
Signing time: Tue 26 Nov 2024 19:01:52 +0000
Manifest this update: Tue 26 Nov 2024 19:01:52 +0000
Manifest next update: Wed 27 Nov 2024 19:01:52 +0000
Files and hashes: 1: 19VFNSGwkOjoKkhMp6c31_3s4m4.roa (hash: 9iv2IryXVGVTamSMuPhqofLOFbWiSzxW087/Hl7gzhI=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: PYUmQ7duWEL/E2x6+LiUYG9ibE+ge9NvULKw/6gUsQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:f9:2a:cf:27:1a:e7:21:0d:29:1f:7b:64:07:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Nov 26 19:01:52 2024 GMT
Not After : Nov 27 19:01:52 2024 GMT
Subject: CN=d223c2d24091ca7262f4ff0bdf63bdef300354c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:e6:37:67:a6:3d:a2:71:e5:b1:96:ca:b8:
c6:ed:58:75:91:14:a8:89:e5:b9:8e:6d:86:aa:5e:
43:82:2c:bd:ae:cd:8d:8c:e6:b8:dc:45:94:d8:e4:
e3:8c:b5:12:69:9a:33:4f:ba:a4:8d:da:0d:cb:e5:
08:8a:96:4d:e9:63:03:8b:4c:75:f1:f3:97:42:23:
de:e4:53:0b:73:a3:cd:1b:98:5e:34:4b:fc:eb:56:
91:b7:3a:e6:f2:b5:c5:10:76:3c:0e:70:51:6c:7b:
af:fd:1b:7e:9f:b1:94:f4:6d:72:60:8d:96:55:76:
d9:38:6a:3d:70:81:7e:cc:0f:75:4b:89:9c:36:15:
dd:d4:e3:63:e1:f8:05:76:18:04:17:13:f6:3b:30:
2b:5e:85:b7:04:44:79:e3:18:6c:82:3c:0c:b3:f2:
dd:04:66:63:71:3d:90:8e:19:0c:de:ca:43:88:b0:
f8:32:a8:be:3a:1a:76:02:80:74:4c:16:d6:65:d2:
68:f1:5d:9f:da:cd:01:7d:d8:1f:23:5e:b7:82:c0:
6e:2f:8c:d1:a6:9c:af:46:eb:73:5d:7a:9a:c3:10:
72:fc:3a:0f:df:25:2c:d5:37:7e:15:72:18:40:a4:
86:c4:ad:00:67:cf:f3:8e:e5:3d:b6:71:16:b1:2a:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:C2:D2:40:91:CA:72:62:F4:FF:0B:DF:63:BD:EF:30:03:54:C5
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:91:78:be:40:6a:bd:85:f9:9d:51:98:58:7d:8e:a3:f0:6e:
bf:64:88:1b:0a:bb:ec:43:70:bf:76:91:0a:fb:95:f7:f7:2c:
2b:a2:6b:2c:75:bd:02:ec:12:90:5d:f4:c5:19:04:68:94:f4:
43:24:2b:54:0d:13:2e:7c:f0:8b:2a:5d:d0:f0:16:99:65:9d:
b1:76:1b:c0:90:6a:c1:f1:06:1a:6e:6e:4d:c0:44:86:b6:03:
45:0d:b8:63:f4:98:de:49:fd:b8:46:cc:25:48:f0:cb:a0:2f:
75:2a:4c:f4:b5:07:98:61:a2:8b:ad:77:b7:6a:68:96:19:35:
a1:7d:78:50:68:78:fc:0d:73:39:96:f9:24:30:4e:b6:c3:a2:
2d:31:3e:9b:21:08:06:c8:04:63:34:44:02:22:d4:fb:bf:e0:
4d:e1:cb:ee:72:25:01:77:80:19:1c:5b:fc:dc:ee:eb:1a:5d:
39:3f:04:53:85:93:f1:5a:81:3f:94:ff:ec:d9:34:c1:58:de:
ce:44:49:08:77:85:ea:86:d5:19:8b:37:6d:ea:8e:30:3e:00:
4d:2d:d7:8b:6b:c5:11:ee:b6:24:39:24:69:88:a1:e6:32:84:
c5:9e:cd:64:a6:00:5b:f2:ec:52:82:4e:7f:8c:70:0c:d7:65:
2a:5c:0e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2fkqzyca5yENKR97ZAfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjcxMjcwYjY5Y2VjNTA0NjA2YjEyNmM0Y2E4MzM4MTZh
ZjdkYTQwHhcNMjQxMTI2MTkwMTUyWhcNMjQxMTI3MTkwMTUyWjAzMTEwLwYDVQQD
EyhkMjIzYzJkMjQwOTFjYTcyNjJmNGZmMGJkZjYzYmRlZjMwMDM1NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV3mN2emPaJx5bGWyrjG7Vh1kRSo
ieW5jm2Gql5Dgiy9rs2NjOa43EWU2OTjjLUSaZozT7qkjdoNy+UIipZN6WMDi0x1
8fOXQiPe5FMLc6PNG5heNEv861aRtzrm8rXFEHY8DnBRbHuv/Rt+n7GU9G1yYI2W
VXbZOGo9cIF+zA91S4mcNhXd1ONj4fgFdhgEFxP2OzArXoW3BER54xhsgjwMs/Ld
BGZjcT2QjhkM3spDiLD4Mqi+Ohp2AoB0TBbWZdJo8V2f2s0BfdgfI163gsBuL4zR
ppyvRutzXXqawxBy/DoP3yUs1Td+FXIYQKSGxK0AZ8/zjuU9tnEWsSrfgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIjwtJAkcpyYvT/C99jve8wA1TFMB8GA1UdIwQY
MBaAFMdnEnC2nOxQRgaxJsTKgzgWr32kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2Qt
OTg2ZWEyMDNmOWVjLzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2QtOTg2ZWEyMDNmOWVj
LzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZF4vkBq
vYX5nVGYWH2Oo/Buv2SIGwq77ENwv3aRCvuV9/csK6JrLHW9AuwSkF30xRkEaJT0
QyQrVA0TLnzwiypd0PAWmWWdsXYbwJBqwfEGGm5uTcBEhrYDRQ24Y/SY3kn9uEbM
JUjwy6AvdSpM9LUHmGGii613t2polhk1oX14UGh4/A1zOZb5JDBOtsOiLTE+myEI
BsgEYzREAiLU+7/gTeHL7nIlAXeAGRxb/Nzu6xpdOT8EU4WT8VqBP5T/7Nk0wVje
zkRJCHeF6obVGYs3beqOMD4ATS3Xi2vFEe62JDkkaYih5jKExZ7NZKYAW/LsUoJO
f4xwDNdlKlwOIg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:47 2024 by rpki-client on console-fra.rpki-client.org