Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: nspIkdbbRSK7oRsyz6R9X+JbBsHrI0XD10L83Bv6cDM=
Subject key identifier: DC:03:DF:C6:28:A2:3C:07:C1:C7:44:F4:4C:67:1A:8B:FF:81:7B:7C
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 01935689FF738C52180A15A3135E00818892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 01:01:44 +0000
Manifest this update: Sat 23 Nov 2024 01:01:44 +0000
Manifest next update: Sun 24 Nov 2024 01:01:44 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: eUuA2hAH2apoQnmriNncCWFIJE/omnjLo3HlGIT20wg=)
2: bFKuzVJ7XUgYspchMdoR3Uj9gRk.roa (hash: zpzRO3aKHvWhvcl4jdikS6hF1KVJfIZ5wCWWf4DcHcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:ff:73:8c:52:18:0a:15:a3:13:5e:00:81:88:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Nov 23 01:01:44 2024 GMT
Not After : Nov 24 01:01:44 2024 GMT
Subject: CN=dc03dfc628a23c07c1c744f44c671a8bff817b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:92:78:c5:23:dd:17:0a:19:6d:98:05:72:
e1:26:65:f0:7b:4a:4b:62:23:45:ea:5a:a4:28:07:
ff:ca:3c:5f:aa:ba:14:cc:e7:92:01:c0:8e:8a:46:
a6:53:8d:fb:7e:0c:55:c4:13:20:6d:94:2c:b0:92:
8e:b3:d6:46:9e:17:dc:de:8c:87:78:f7:04:2b:a8:
ad:9c:de:0c:72:72:1b:dc:1b:fd:cb:28:b3:42:2d:
a9:8a:f3:d0:00:ad:b2:88:89:78:b1:c2:e1:c7:a0:
32:bc:99:4f:b5:85:1c:0f:55:6d:3f:b6:db:e5:10:
ad:b2:10:db:96:2e:61:f4:de:c5:ce:d5:15:98:84:
ac:bf:55:29:4a:c3:cf:87:77:2b:f2:44:01:02:60:
75:13:45:f5:cc:15:0d:62:12:16:53:85:05:d5:50:
84:75:aa:a2:54:66:bf:46:66:1b:1d:7e:c8:10:6b:
c5:8b:c1:2b:f0:66:86:b4:de:5b:b0:b0:87:a3:c0:
1d:46:ae:dc:fc:82:20:f5:3a:8f:a3:02:46:6f:3a:
5f:aa:14:c3:c8:3c:f5:90:fb:4a:94:8c:5a:80:25:
84:04:20:ed:24:d8:d6:b0:e7:cd:41:ed:e6:be:3e:
47:38:8b:d1:91:cf:df:d8:94:bf:6f:d6:1e:2d:62:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:DF:C6:28:A2:3C:07:C1:C7:44:F4:4C:67:1A:8B:FF:81:7B:7C
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:2c:ba:0f:35:ff:ba:59:77:99:df:6e:b5:72:83:85:35:
3a:06:af:be:be:08:d9:ae:9d:c5:9a:84:70:9f:80:c2:d6:48:
7e:a4:f2:1a:de:dd:d3:2b:8e:fb:59:8f:90:5d:3c:64:9a:19:
20:69:78:ec:28:73:e5:84:1d:d0:6f:05:e6:5e:a2:7a:7d:48:
88:23:07:df:ef:19:54:cb:a1:8c:41:67:c4:d8:fd:45:0b:75:
2d:43:78:b2:5b:f8:f1:3a:ef:4a:7b:e8:4d:d0:de:74:ad:cf:
61:66:40:8b:d2:2c:45:db:ef:f6:08:e6:33:b6:b2:6c:45:45:
82:5b:98:14:b6:9b:1b:66:ea:0a:24:cc:5a:62:1a:5c:b9:34:
17:a7:9d:3f:96:d3:c3:94:e6:f3:c3:71:58:79:60:44:82:59:
0a:4f:6d:c3:ce:cd:09:b5:07:df:29:0b:95:15:ad:21:33:dd:
d2:87:64:4b:e7:c1:94:f7:df:b6:ff:9d:b6:4b:5b:c5:07:ad:
18:b9:34:28:af:83:dd:c4:bc:7e:5c:83:d7:db:f7:e1:ac:04:
f2:f9:96:b4:f1:54:86:b0:64:54:f7:f9:c6:0b:66:91:fa:a1:
9a:79:33:8b:54:34:b9:bf:17:39:d4:16:b9:0a:e6:2f:07:b4:
dc:13:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:44 2024 by rpki-client on console-fra.rpki-client.org