Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: zlyICEiMggz6wkjR0Mvlz85SuwHzzL+wdRFvwJkdXqQ=
Subject key identifier: 65:72:63:00:19:C7:FF:D9:7F:B6:D9:D9:3D:08:B5:2B:E6:C5:9E:7B
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019357647DCB6134C4403930C8BD1A6FE4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 0D67
Signing time: Sat 23 Nov 2024 05:00:23 +0000
Manifest this update: Sat 23 Nov 2024 05:00:23 +0000
Manifest next update: Sun 24 Nov 2024 05:00:23 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: 8t8C2r9unJCSwCwfO+g29rVmWP01x742Eo61lO4ZErA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:7d:cb:61:34:c4:40:39:30:c8:bd:1a:6f:e4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Nov 23 05:00:23 2024 GMT
Not After : Nov 24 05:00:23 2024 GMT
Subject: CN=6572630019c7ffd97fb6d9d93d08b52be6c59e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:0e:5f:db:22:23:58:d3:7e:1c:7b:2e:37:
88:28:8a:89:8b:37:41:4b:63:a4:33:09:39:6d:ae:
a9:91:58:14:ad:87:55:1b:2b:0b:c2:67:9b:45:f3:
02:58:15:98:49:91:14:5f:48:c0:93:dc:68:f2:b4:
85:2a:93:be:02:62:e1:cd:c6:c4:f5:fa:fa:f1:79:
76:4a:8d:a3:9a:a1:4f:2e:cc:fd:f8:50:31:2b:bc:
1f:08:d8:5d:c9:c3:81:c0:6d:a2:d3:a4:14:ed:c5:
7e:c5:af:6c:ba:c7:09:17:81:29:ac:73:f8:1c:a4:
6f:15:06:a2:90:91:f2:92:fa:41:47:f7:05:09:3f:
ff:39:43:ab:c5:67:b6:bd:46:fe:e6:ce:ae:ad:5e:
fc:84:2e:0a:ac:1b:00:00:5f:70:ff:dc:62:2b:b6:
e7:80:92:9b:cb:96:07:8e:69:89:8f:83:8e:d4:1f:
da:66:e0:cc:b6:e6:12:2e:15:90:fc:8a:e7:bf:02:
cd:d2:bf:05:c5:76:46:03:dd:70:31:3f:2c:b4:00:
08:7a:81:b3:5e:52:3c:55:80:97:b2:2b:1a:ae:6a:
45:f1:3b:e3:a0:bb:da:17:95:9a:22:2a:aa:c7:08:
b3:f4:48:01:b9:a0:b7:31:a0:a6:ff:05:93:da:7f:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:72:63:00:19:C7:FF:D9:7F:B6:D9:D9:3D:08:B5:2B:E6:C5:9E:7B
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:1c:62:04:7c:9e:65:04:99:5b:d6:a9:5e:6b:81:7f:78:
5f:89:09:fa:58:c5:7e:dd:56:14:3b:a4:97:ae:f1:16:04:ab:
ec:27:84:ef:71:2f:25:9f:f3:8d:e6:5d:c3:74:d9:ff:7a:54:
2b:1f:cd:16:b3:8c:c5:70:18:f4:a7:46:91:bb:99:5e:e2:a6:
c1:41:ab:29:e2:84:99:c2:e5:94:c6:a2:7c:9c:18:71:fe:ad:
be:11:76:ab:2d:b8:52:e2:dd:23:2d:df:c4:32:8a:2e:ce:e7:
bc:f2:fc:02:44:40:dd:70:6d:8a:cc:75:18:84:0a:4a:bf:ca:
d0:05:7d:04:61:ba:1f:72:a8:37:2c:11:a2:60:e2:51:2e:56:
45:c4:93:b1:f9:7d:bd:4f:9b:13:eb:45:3e:0d:2e:e0:70:af:
4e:4d:8f:f8:46:b8:01:7b:e3:fa:b3:f8:54:01:c3:bf:02:dc:
02:67:d6:04:e3:a6:7a:f3:bf:d1:9a:a5:46:a7:89:af:2b:13:
0e:76:11:a3:de:d4:c5:ff:2a:9b:cb:0d:fe:aa:9d:8c:3b:ea:
75:48:c9:56:77:d3:9a:b7:f3:5c:75:6a:fb:ad:80:f1:24:85:
5c:41:7b:ef:84:32:e3:84:e8:21:67:af:fa:59:dd:41:e7:9b:
a4:71:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:32 2024 by rpki-client on console-ams.rpki-client.org