Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: +Y0oOVHYYsO2oYKG5N2PcfjOqn+T+qc7dP9kPonxJiU=
Subject key identifier: D6:B3:3B:98:4C:7A:80:B4:2B:8F:41:BC:13:48:49:7E:76:E4:A0:6A
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019355AD77A9167DED7802ECEA82B10000E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0AE3
Signing time: Fri 22 Nov 2024 21:00:51 +0000
Manifest this update: Fri 22 Nov 2024 21:00:51 +0000
Manifest next update: Sat 23 Nov 2024 21:00:51 +0000
Files and hashes: 1: LU75a58x2MxMc4VlcY11qXXYwBk.roa (hash: yzA4AcOlo6y0KAkXzemdsp4r/60emmzF//IL8EgFNrU=)
2: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: aROvH2ZDEri1pG6sE37AtnZv+1xv1WiKnzR+4wacUkg=)
3: sb7x3fktr2wDwxxOSBgIz5UgQus.roa (hash: cu2qKdWDk5+i7SpkQ9U+cll7ksxkx6v3+MFlFukaWlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:77:a9:16:7d:ed:78:02:ec:ea:82:b1:00:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Nov 22 21:00:51 2024 GMT
Not After : Nov 23 21:00:51 2024 GMT
Subject: CN=d6b33b984c7a80b42b8f41bc1348497e76e4a06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:df:47:8e:aa:5f:b9:35:2d:f3:03:30:ae:
87:d9:70:3a:f4:64:da:95:24:2b:7b:c7:f3:14:b6:
fe:ee:98:fe:00:0c:3f:59:c7:b9:d1:0c:ae:d6:06:
45:8b:7b:2c:85:e8:66:5e:e4:b2:4e:1d:08:3a:47:
6c:77:fb:df:56:b4:24:75:bb:66:0f:d4:db:4e:9e:
fa:aa:bc:d8:ce:0e:e9:c6:48:ea:72:7a:3f:35:31:
24:d7:c7:71:28:f7:c9:f1:40:d6:09:05:be:3b:5c:
55:de:95:40:52:66:4a:93:52:60:dc:46:86:a5:cb:
b3:b2:ed:5b:4e:63:3e:17:50:28:39:76:28:f5:dd:
b5:c8:af:92:cf:61:36:31:5e:fb:22:69:8c:c8:cc:
b1:07:23:e1:39:a0:7e:65:29:82:26:e6:76:61:ee:
09:bd:ff:3c:02:44:84:8b:24:25:e9:24:ac:4f:98:
55:8f:52:48:5c:1d:be:03:f7:db:da:80:a0:37:aa:
ac:28:b2:10:3c:95:03:93:57:7b:95:5f:e9:11:f4:
41:49:75:d8:c3:e4:db:c3:1a:49:22:d3:42:63:01:
3d:24:e7:39:eb:54:a9:64:21:b3:e4:3b:89:45:ba:
11:de:a2:44:0c:18:58:1d:dc:1e:d1:d6:4b:41:84:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:3B:98:4C:7A:80:B4:2B:8F:41:BC:13:48:49:7E:76:E4:A0:6A
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:21:de:0c:55:34:1a:2f:61:83:5a:7e:63:d2:bd:e7:62:
4b:30:c6:82:5f:fd:4d:b3:d6:fb:91:d1:6e:2e:81:c6:b3:03:
c3:5c:63:eb:12:cd:77:4c:62:14:1a:f0:60:2c:3d:12:e5:41:
9e:9f:08:a2:b1:9b:c0:fd:5a:25:11:a3:e5:16:c3:eb:34:9e:
69:64:eb:f5:f2:b2:9d:8b:9a:36:d1:e3:da:4c:43:1f:6a:0f:
61:6d:8e:50:22:ec:b5:cc:5c:c9:cc:3f:54:08:4c:5b:be:d6:
cf:c8:5f:7d:9c:ff:af:ad:b5:70:19:1d:77:07:ae:c3:50:b5:
e9:99:74:8f:a8:5a:ad:d8:55:e7:ff:0a:bb:ae:3f:50:57:22:
65:50:dd:27:99:76:ab:f7:cd:aa:56:90:0a:96:d1:38:c4:ae:
f7:a9:32:d9:9e:ea:63:9b:d2:1e:9d:79:d5:04:f6:75:fe:f5:
66:1d:10:72:f5:0c:06:5d:45:df:a1:3b:17:50:56:ed:d5:1c:
5d:60:dd:a3:fc:ca:16:5c:75:84:6b:ec:05:8a:73:8c:5e:bf:
b6:1f:c3:13:04:90:e7:79:e2:60:50:a0:d0:f8:3d:8e:df:98:
e3:a1:7b:a5:6e:ef:01:db:7d:fe:4f:dd:56:d4:5a:0a:74:49:
0a:31:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:38 2024 by rpki-client on console-ams.rpki-client.org