Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: i8n+oySeVv+pXptMYwXepXLfwBmQlu+RhMQGFDJVDj4=
Subject key identifier: 58:95:5D:1A:EE:FB:31:96:CB:FF:C5:A3:DB:B1:DE:DF:01:D8:56:DE
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 0193553FBC46B3E51743C2870E52606BC68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1303
Signing time: Fri 22 Nov 2024 19:01:00 +0000
Manifest this update: Fri 22 Nov 2024 19:01:00 +0000
Manifest next update: Sat 23 Nov 2024 19:01:00 +0000
Files and hashes: 1: E-bhFVg_0faXIm5CzT4pQ913CZk.roa (hash: AJQAiRcO8QOk34XAd/2XHvSwdV7szmKFTbY8XgLPb3g=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: Y4+8/OE7esZxhGgGRXsJxBbQo//ktKyH38Lol98/0AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:bc:46:b3:e5:17:43:c2:87:0e:52:60:6b:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Nov 22 19:01:00 2024 GMT
Not After : Nov 23 19:01:00 2024 GMT
Subject: CN=58955d1aeefb3196cbffc5a3dbb1dedf01d856de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:ad:74:2b:e0:da:d5:60:db:2d:19:ac:79:
4e:86:59:61:a6:50:b3:53:97:b0:06:56:9f:01:cf:
bd:7b:69:c9:f1:b5:53:12:e7:9e:9b:93:e6:61:e6:
31:86:2c:77:a3:26:76:6b:39:03:d9:c7:fc:c9:af:
ee:73:f9:ec:18:96:0e:8c:5f:f9:2f:3c:24:b5:30:
74:c2:cf:28:f0:45:ff:a2:fa:c7:6b:39:18:19:9e:
14:96:7d:27:a5:41:9b:24:31:a8:09:c8:72:7c:8f:
fd:89:a4:cf:07:cb:7b:4c:8e:53:77:31:0d:68:12:
88:60:3e:ad:cf:ca:74:92:02:29:d7:a9:90:1f:a5:
c7:c4:dc:41:dd:c7:cf:6a:7e:c2:95:f1:ad:72:b6:
47:12:37:0e:c6:b5:69:42:a8:92:3f:ac:8c:0c:1b:
64:e0:17:8c:9a:0f:f9:ff:01:5e:a5:66:bb:9e:5f:
3e:fd:39:1c:81:f7:7c:70:51:2a:a7:0f:8b:b0:c1:
a2:6b:17:7a:c8:48:d1:e6:96:2f:bd:09:2f:4a:33:
5e:1a:6c:db:87:18:a3:78:f1:26:8b:b3:1e:2c:1c:
76:da:5d:dc:c6:85:df:14:18:ad:d9:d0:1f:8f:bd:
ab:10:ce:e7:2f:c8:a7:92:b7:44:c5:3c:5a:05:db:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:5D:1A:EE:FB:31:96:CB:FF:C5:A3:DB:B1:DE:DF:01:D8:56:DE
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bc:28:c9:d8:e6:89:84:5c:66:17:f4:b4:66:5d:31:82:26:
78:53:4f:0a:cd:c8:14:ce:77:a6:e3:a0:fa:46:8d:87:85:ff:
76:1e:05:c7:cf:19:a9:ef:ad:dd:64:54:e0:bc:ee:93:10:b4:
a5:30:4d:03:52:1e:29:e0:e9:e3:67:f0:d0:7d:e1:36:0b:21:
d4:44:b0:a3:06:16:2a:45:c6:4d:6f:dc:66:5e:79:db:1f:9a:
0e:80:f4:1b:34:60:27:08:0c:0d:97:9e:53:98:11:8c:9a:2e:
06:26:67:34:6f:b2:e8:c9:d6:c6:43:76:41:1d:f2:1a:f5:ce:
55:be:de:d1:79:67:c3:a3:57:ae:4b:33:46:4e:29:5a:ee:78:
70:85:2d:6b:f7:f6:33:9c:3d:e6:42:08:af:22:d9:4d:b6:95:
a1:05:8c:7c:e9:6c:68:32:5a:03:d3:fd:69:4b:4b:2a:5d:07:
d8:98:93:31:2a:d8:ad:d4:f7:70:1a:cf:89:cb:3c:c6:76:a2:
e6:f4:21:9e:b7:ef:07:74:07:2f:94:1b:c3:27:dc:b0:57:63:
e1:eb:8c:89:91:c4:fa:3d:96:df:7a:2c:a4:62:5a:f9:4e:f2:
08:09:60:94:1e:24:4e:47:65:f3:0d:d7:22:0e:9e:38:61:9f:
c2:0e:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:40 2024 by rpki-client on console-fra.rpki-client.org