Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: CFTrm3BDqJAKatvLAF/XDO1pvaF9hRFqd0MICAxGdcg=
Subject key identifier: 68:AF:AB:29:86:54:4F:22:91:13:F6:BA:8D:CA:1E:DE:AA:51:02:87
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019352E2DC8BDCCE1EC20FB8624FE789EAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 08:00:19 +0000
Manifest this update: Fri 22 Nov 2024 08:00:19 +0000
Manifest next update: Sat 23 Nov 2024 08:00:19 +0000
Files and hashes: 1: _U9rtl2dTcjQYCHUlx8FMEKieSQ.roa (hash: pvwCS4i35JfYCU7NmIh9ucGzTYXitu+DXgxqz9J9QXk=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: S3N+B8B74mAPVMX32cX7gRkkWlZ3A48ME0RpQCfTNi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:dc:8b:dc:ce:1e:c2:0f:b8:62:4f:e7:89:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Nov 22 08:00:19 2024 GMT
Not After : Nov 23 08:00:19 2024 GMT
Subject: CN=68afab2986544f229113f6ba8dca1edeaa510287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:9a:be:ae:6b:e2:d1:5d:6b:02:a5:56:b0:
15:66:33:21:df:39:8a:50:3d:fb:e6:70:85:37:f6:
1c:09:c2:9a:51:15:0b:5c:5e:9e:33:5b:2b:96:78:
0f:40:95:86:0a:39:f3:c3:97:5d:66:58:78:d7:ea:
a9:1c:43:24:33:ab:09:02:91:27:a9:db:8d:9d:d1:
26:51:17:1a:19:83:a8:1c:92:36:8c:00:2a:56:4b:
5f:d5:e9:61:c3:16:d8:a4:67:7e:f7:b2:79:a3:3a:
b9:7c:65:75:c2:06:1d:5d:95:71:47:d4:50:63:db:
a4:83:5b:e4:da:31:26:06:8a:37:33:3b:ef:e8:21:
f8:03:6b:ef:4a:88:24:bb:7a:84:cf:66:d6:9a:7a:
3a:e4:62:d9:85:57:68:95:e3:f8:3e:f9:34:8c:db:
6f:f3:c3:c1:c4:29:fa:e3:14:1c:8b:44:08:58:1d:
c7:9c:d7:af:23:28:be:4e:c8:36:fb:1b:19:b3:2b:
2a:62:8b:df:8c:33:34:f0:be:5c:89:3c:38:52:c1:
8d:9f:de:16:86:7b:ef:a0:3a:25:7a:4b:fd:aa:7c:
53:16:fe:a1:81:23:4c:5a:74:3e:1e:4d:3a:f7:5a:
8e:60:56:67:09:3f:e6:52:93:4b:d6:42:bf:7e:11:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:AB:29:86:54:4F:22:91:13:F6:BA:8D:CA:1E:DE:AA:51:02:87
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5f:6d:67:16:f5:ed:b0:10:c2:15:de:e1:36:9c:bd:6e:28:
34:f3:fd:b4:5e:ec:68:05:92:56:f5:89:0d:54:83:3e:79:40:
a1:3d:5b:ac:7d:50:eb:00:cc:09:fc:66:9e:37:92:91:9c:46:
dd:1e:15:b9:83:9f:f7:5e:af:52:03:6e:90:cd:91:f8:3d:fe:
d4:d5:36:55:29:a0:04:ba:50:38:f9:33:19:38:c2:7f:93:29:
21:69:0b:2a:60:30:4b:de:fa:a6:7d:b6:cc:58:0d:40:40:39:
d4:27:40:84:ed:a7:88:15:e3:4c:ff:bd:d8:97:cc:f9:b0:74:
ef:7a:75:26:20:42:4e:98:3a:0c:8b:92:d2:e3:fa:93:ed:41:
81:a1:19:9e:ad:c6:71:ff:5d:48:68:78:d7:ff:fb:11:38:86:
c5:57:0e:b9:00:f8:b3:ca:90:cf:8c:f0:70:76:15:34:d4:89:
bc:4c:dc:51:db:64:ce:8f:4a:2a:31:b2:5b:44:13:38:32:a3:
a8:36:83:07:51:f2:2c:ae:3d:64:3b:35:92:c3:65:82:a2:2c:
8c:f6:b2:30:49:c4:87:d8:0d:6b:ac:e5:af:99:dd:4e:89:7f:
9d:4a:4d:37:50:b2:44:74:37:99:0d:01:ff:45:ce:41:95:be:
14:a6:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:41:55 2024 by rpki-client on console-ams.rpki-client.org