Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: BudgBkwqPLW/Mxc/JmzB38Oxpm9Ap2D/AEMVqDPM+TU=
Subject key identifier: 43:BD:99:06:C8:47:AD:5B:B4:EE:E5:F0:13:73:3D:7B:3B:8E:A3:B2
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019369D98D5B3F3213DCE56C98DB6B0488F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 19:01:25 +0000
Manifest this update: Tue 26 Nov 2024 19:01:25 +0000
Manifest next update: Wed 27 Nov 2024 19:01:25 +0000
Files and hashes: 1: LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa (hash: erOTdSaVnRD2fUxIPaB7c346uJMPrVnrq1/g7tb8HTk=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: R1/EXvU3y6Ty2R6zSU90TFHBeTxsAo0KPLSsf011+90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:8d:5b:3f:32:13:dc:e5:6c:98:db:6b:04:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Nov 26 19:01:25 2024 GMT
Not After : Nov 27 19:01:25 2024 GMT
Subject: CN=43bd9906c847ad5bb4eee5f013733d7b3b8ea3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:78:71:39:c6:0d:99:b6:a4:61:c4:2b:1a:
a0:5a:7b:7e:94:91:18:34:63:8b:e5:a9:5b:45:fd:
bd:a4:37:d4:92:29:ea:5c:cd:27:d8:26:96:64:ec:
74:19:dd:30:d2:c7:b3:b8:a9:1f:3b:98:87:62:67:
89:9a:e8:f1:5f:1c:14:3e:76:53:3a:70:16:0c:90:
9d:4f:b2:31:3f:ce:65:18:f3:59:29:c6:50:95:e0:
a5:81:c1:ad:7d:72:69:bc:dc:00:e1:94:54:fe:03:
f0:04:4d:36:e6:1b:c3:9d:d5:98:ea:43:47:c3:ed:
b7:60:3c:73:d9:ba:38:89:d9:52:88:40:77:c8:e3:
f0:23:b9:5e:b1:26:b7:3d:92:42:3d:c1:20:01:a2:
8f:a1:eb:8d:3e:8a:5a:cb:52:5c:bb:23:77:25:76:
2e:d2:ce:54:c0:2a:0c:5b:85:dc:78:65:7e:6f:e7:
5f:d2:22:5b:bc:c0:f0:62:df:a6:f8:5d:33:47:2e:
cb:34:43:41:ac:62:5e:c2:ea:dd:71:15:71:5b:38:
9d:08:90:33:cb:de:81:5f:69:4a:1c:55:4a:bc:0b:
b4:22:a7:5c:79:e9:7f:20:71:79:6b:c4:80:54:c9:
2d:67:d4:bc:d7:9a:2f:e3:25:0e:e2:27:a4:74:8b:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BD:99:06:C8:47:AD:5B:B4:EE:E5:F0:13:73:3D:7B:3B:8E:A3:B2
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:77:53:72:7b:43:b9:7a:59:73:9c:b3:ee:43:f2:1b:32:09:
d7:a9:bf:da:98:14:0b:87:db:37:4b:1b:02:78:8c:ce:32:14:
26:b8:b7:55:d0:f8:8a:37:a4:50:73:07:02:a4:0c:87:f6:98:
36:6f:07:2b:c3:2c:4d:1a:29:3c:39:25:27:0d:a8:51:c7:57:
1b:84:e5:2d:78:36:28:c9:3e:4f:4b:c6:1e:04:17:f4:57:94:
5c:b4:8b:09:d4:39:fb:26:0e:33:6e:69:24:54:22:b6:76:fe:
6a:73:94:36:3b:7d:c0:66:01:8f:e8:ae:46:29:06:c0:97:4d:
80:59:37:23:74:ed:fb:5f:f9:1f:b4:f0:05:e3:12:88:fd:ad:
df:14:fd:1b:e0:9f:40:50:8d:03:f7:e1:3a:81:98:ad:e7:66:
c2:82:d9:bc:d2:42:dd:8b:82:2f:4e:00:2d:a2:23:32:70:2c:
ba:f7:5a:2f:1b:95:ba:62:62:fe:1b:2f:08:24:65:8d:32:6d:
e3:a8:5d:24:c4:f1:7c:c8:91:49:b9:3e:49:40:c3:02:58:e7:
ee:a8:9a:38:18:95:6b:f9:11:95:ef:40:b6:a5:f8:a4:a6:3c:
c4:87:b0:c0:6d:15:0f:60:e5:e5:c2:0d:6e:86:45:1a:12:89:
7d:2a:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:32 2024 by rpki-client on console-ams.rpki-client.org