Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: yv4ClM+5taJloDdHx186aClnDx30PQXypuOQB6gW2m4=
Subject key identifier: DB:A7:8F:D0:E2:DC:2D:2B:61:51:46:54:D0:64:2D:43:65:15:19:63
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019358403A9AB030B24CFC696C754D3616E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: A1
Signing time: Sat 23 Nov 2024 09:00:24 +0000
Manifest this update: Sat 23 Nov 2024 09:00:24 +0000
Manifest next update: Sun 24 Nov 2024 09:00:24 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: vmfIWqomRrmLkRIk9saK1D2OUIjxiGNNhGSazpR+N/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:3a:9a:b0:30:b2:4c:fc:69:6c:75:4d:36:16:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Nov 23 09:00:24 2024 GMT
Not After : Nov 24 09:00:24 2024 GMT
Subject: CN=dba78fd0e2dc2d2b61514654d0642d4365151963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:4d:58:77:d9:2d:ba:ba:cd:e6:26:78:ae:
11:e1:bb:cd:bc:3b:b0:4d:ce:8d:61:0b:92:a2:f7:
a9:c8:62:8d:3f:67:bf:19:b9:f6:7e:1f:74:fb:7d:
65:4c:18:91:5a:97:d0:b4:d7:ec:6d:37:ec:0d:b9:
0a:e4:8b:12:91:99:7c:fd:4c:83:d1:4e:a0:d0:1d:
f2:67:16:92:8c:a9:8c:3a:80:28:d5:4c:53:db:8f:
9a:ad:dc:19:32:61:f7:e2:b8:6c:7d:09:27:3f:95:
43:55:2a:1e:07:1a:5b:91:ae:e4:b7:fa:11:6a:1f:
20:cd:07:23:3e:6f:38:42:71:ec:09:a8:05:81:b9:
84:95:43:9e:5c:ce:32:4a:51:ad:dd:4e:c1:b0:17:
ca:6e:4c:9f:54:db:81:f0:41:d6:9c:a3:d5:1f:a8:
33:4f:05:8f:a7:33:c2:9e:02:2f:85:02:fe:4b:d5:
d2:4c:52:3b:13:2a:7b:c8:1e:c5:31:8c:29:56:39:
b0:6f:28:63:d7:67:99:c0:83:4f:fa:87:72:0f:ee:
b5:4c:bc:0f:98:fa:48:81:4f:55:c1:b7:61:cb:ba:
4a:a2:0d:2e:2f:50:1f:5d:87:8b:3d:7d:6a:db:e2:
eb:c9:68:e7:c5:6d:48:47:66:fe:3f:38:ec:b8:4b:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:8F:D0:E2:DC:2D:2B:61:51:46:54:D0:64:2D:43:65:15:19:63
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:77:b5:dc:4d:6e:c0:63:67:5e:61:79:89:1f:d6:3f:b9:a6:
a0:d1:6f:ab:42:81:c5:d5:6e:82:e9:3f:48:14:79:ed:1a:a7:
3b:ef:c2:d6:bb:d8:03:cc:33:5d:76:88:53:84:06:ea:98:67:
17:c7:2b:04:4b:57:a1:c1:04:93:b9:08:24:9d:62:8c:9e:18:
76:0f:91:01:7b:ec:85:64:69:6c:a7:c1:3f:23:93:df:4f:78:
bb:5d:e2:56:04:e0:99:a6:6d:9b:9d:50:17:3a:6c:7c:54:d0:
00:2d:e2:78:22:97:ef:6b:80:5d:be:aa:dd:3e:59:e6:82:12:
21:67:35:62:31:43:8d:b0:ce:b1:06:aa:fc:7a:c4:3a:28:4d:
84:e1:18:d2:4b:24:da:e3:1a:e0:e7:e1:94:1a:15:3d:09:5f:
d1:77:46:c0:33:2a:27:0c:05:4b:9d:2d:93:08:84:df:d0:6b:
49:2a:e9:1d:4a:02:6f:5c:05:37:76:a0:e5:18:39:23:a8:bd:
4e:40:00:09:91:c3:76:c6:83:37:d6:23:49:a9:ea:ad:2b:83:
cc:2e:d5:d9:ba:c5:92:aa:19:4c:00:f0:11:3a:45:be:81:7a:
31:40:17:fd:89:b5:0a:38:ec:08:33:cf:71:3a:a0:1c:3d:cf:
74:45:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:54 2024 by rpki-client on console-fra.rpki-client.org