Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: fywP1gUGbFMRfeR0+DUOwT6cq71zl63Cl/4SUc9vwNs=
Subject key identifier: 10:C4:2A:BE:59:61:DE:9D:3A:FE:DC:C2:AB:56:1B:52:22:A2:E9:9A
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 019358784FDB0047B83C5BC54106DCB8DC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:01:39 +0000
Manifest this update: Sat 23 Nov 2024 10:01:39 +0000
Manifest next update: Sun 24 Nov 2024 10:01:39 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: zFHflHlDDXSulkrf9fXFUJiqNUJS9yeAWbXntRIDeUc=)
2: U60Ot9PxU91b0DmIISsq3doTc7w.roa (hash: qURFYYo4tmHnK6fhZXZjIV/ZMVcSVNZZT+LrCMYiNV8=)
3: YTFIYMwfHXsketkgljChZuWxQ40.roa (hash: 68E5c///2wHT9v7RspnljA8qZRizKMQb4+YkarAYJxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:4f:db:00:47:b8:3c:5b:c5:41:06:dc:b8:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Nov 23 10:01:39 2024 GMT
Not After : Nov 24 10:01:39 2024 GMT
Subject: CN=10c42abe5961de9d3afedcc2ab561b5222a2e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:34:86:20:b3:f4:73:b8:e5:8f:03:eb:6e:
72:62:0f:ba:22:cc:77:5a:85:92:5f:14:42:ae:31:
9e:d2:16:d4:28:9d:ac:8f:0c:d9:63:28:cb:c6:44:
2b:33:b5:ad:75:14:e8:e0:0c:17:13:41:d6:68:2c:
e5:1e:f7:c7:35:9d:21:52:0d:28:6e:6e:2a:85:30:
31:08:24:35:f2:52:e5:aa:19:f9:c9:49:42:24:9c:
c8:09:fe:98:cd:0a:47:60:6a:e6:66:62:85:c4:15:
85:74:bd:0f:3c:83:7e:4f:36:d2:77:9f:04:21:7d:
be:98:8e:51:d3:62:52:8e:21:6e:05:28:b8:00:ce:
3f:3e:56:b2:8b:fa:f7:ab:3d:3b:83:8d:ea:ed:2a:
91:2f:a8:1b:2d:7e:28:8d:20:3e:cd:53:79:2f:ef:
a5:09:cf:c0:c2:b2:12:9f:a9:23:6f:0b:11:4c:71:
fa:c8:d3:1f:15:63:4f:0f:20:bb:35:d6:c2:f5:3b:
69:24:b9:4f:11:8a:2c:8b:61:70:fb:2f:56:b3:da:
07:21:ec:79:c4:11:93:b4:50:cb:45:7b:5e:b6:b6:
7f:99:a0:12:34:11:64:bf:b8:32:eb:fc:bb:d4:4c:
12:30:62:2c:c6:4a:48:a5:fb:94:f0:7b:11:64:27:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:2A:BE:59:61:DE:9D:3A:FE:DC:C2:AB:56:1B:52:22:A2:E9:9A
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:61:c1:1b:a3:14:47:49:8b:a9:e3:bb:82:84:71:a2:f6:47:
2d:07:b0:2b:a9:75:42:80:f4:66:c4:d9:9a:63:5a:a1:54:28:
6e:7c:a1:a0:ae:65:3f:a3:41:2a:8e:e4:cf:96:66:73:b0:52:
e1:8d:1c:d0:16:9d:a3:dc:73:03:03:da:76:cd:9f:3e:14:ab:
03:6a:f7:f8:d7:df:1b:3c:7e:05:48:ec:32:1f:bb:8c:61:35:
90:73:f6:b6:18:83:b7:02:34:14:fb:5e:62:15:b9:3e:49:73:
82:64:a5:e9:d0:d2:21:d7:8c:8c:07:c0:62:1b:19:23:4d:9c:
61:c5:f1:45:36:79:13:27:f9:9b:26:77:d7:67:37:fc:60:2d:
ca:16:e9:9d:97:62:f8:62:be:47:a3:41:9c:12:7c:55:e9:5e:
5b:80:44:fe:4b:12:09:a5:ee:cb:e1:46:26:b7:bd:05:66:7d:
cc:cc:8c:81:a0:dd:9e:67:2e:35:16:2d:df:dd:51:8f:a0:ed:
af:fc:40:44:7e:7b:64:f3:8d:7d:2f:87:37:d3:8c:52:1c:8d:
3c:9a:1a:57:43:76:90:bb:9f:d7:c7:97:b3:f6:e0:ff:d6:a3:
94:ed:4e:c9:c2:4a:70:91:26:f3:35:c2:69:bd:76:7b:44:de:
91:dd:de:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeE/bAEe4PFvFQQbcuNwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjQxMTIzMTAwMTM5WhcNMjQxMTI0MTAwMTM5WjAzMTEwLwYDVQQD
EygxMGM0MmFiZTU5NjFkZTlkM2FmZWRjYzJhYjU2MWI1MjIyYTJlOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApas0hiCz9HO45Y8D625yYg+6Isx3
WoWSXxRCrjGe0hbUKJ2sjwzZYyjLxkQrM7WtdRTo4AwXE0HWaCzlHvfHNZ0hUg0o
bm4qhTAxCCQ18lLlqhn5yUlCJJzICf6YzQpHYGrmZmKFxBWFdL0PPIN+TzbSd58E
IX2+mI5R02JSjiFuBSi4AM4/Playi/r3qz07g43q7SqRL6gbLX4ojSA+zVN5L++l
Cc/AwrISn6kjbwsRTHH6yNMfFWNPDyC7NdbC9TtpJLlPEYosi2Fw+y9Ws9oHIex5
xBGTtFDLRXtetrZ/maASNBFkv7gy6/y71EwSMGIsxkpIpfuU8HsRZCfT0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDEKr5ZYd6dOv7cwqtWG1IioumaMB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmHBG6MU
R0mLqeO7goRxovZHLQewK6l1QoD0ZsTZmmNaoVQobnyhoK5lP6NBKo7kz5Zmc7BS
4Y0c0Bado9xzAwPads2fPhSrA2r3+NffGzx+BUjsMh+7jGE1kHP2thiDtwI0FPte
YhW5PklzgmSl6dDSIdeMjAfAYhsZI02cYcXxRTZ5Eyf5myZ312c3/GAtyhbpnZdi
+GK+R6NBnBJ8VeleW4BE/ksSCaXuy+FGJre9BWZ9zMyMgaDdnmcuNRYt391Rj6Dt
r/xARH57ZPONfS+HN9OMUhyNPJoaV0N2kLuf18eXs/bg/9ajlO1OycJKcJEm8zXC
ab12e0Tekd3e7A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:43 2024 by rpki-client on console-ams.rpki-client.org