Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: EYFanXwtol17g3DFjV70d8bo78tgk2gfInA4gquybW8=
Subject key identifier: 40:5F:41:AE:87:1B:2C:AE:EF:E6:BC:20:8A:BE:A6:50:39:6D:64:A7
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0193647BA5F68195CD09AAC2F2153C54BC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0A8A
Signing time: Mon 25 Nov 2024 18:00:45 +0000
Manifest this update: Mon 25 Nov 2024 18:00:45 +0000
Manifest next update: Tue 26 Nov 2024 18:00:45 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: PQqOJn9mFjt+FhToO+Kwx+pir1V3S5MgWbYJ3ie0+Mo=)
2: bwMGzkgP5h6HEDlUJ7iJPoMkmXc.roa (hash: 6JMgAapqM6gtpKsbnSwQQ13D4dvXQ9YZCNiAPusPxAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:7b:a5:f6:81:95:cd:09:aa:c2:f2:15:3c:54:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Nov 25 18:00:45 2024 GMT
Not After : Nov 26 18:00:45 2024 GMT
Subject: CN=405f41ae871b2caeefe6bc208abea650396d64a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:a2:48:48:25:92:1f:dc:56:82:e0:64:81:
2b:02:19:33:79:0f:ef:dd:42:db:45:29:3f:3f:f5:
1b:09:ea:f4:eb:87:67:b8:41:48:e4:a1:ee:0a:d1:
b0:e1:d0:ff:25:f5:7e:6d:4e:99:dc:5d:bd:29:ef:
7f:bc:17:73:b1:ee:9e:14:91:9d:e2:87:4a:a4:f3:
25:f8:7a:ad:c5:83:fb:19:c4:67:61:0b:80:e3:50:
4b:3c:f6:41:42:a5:35:e0:98:17:04:c7:d7:77:28:
09:5d:e5:52:2e:79:9f:ff:00:7d:c4:d1:93:42:f2:
8b:cc:01:5e:c1:37:51:9d:2b:96:14:27:dc:86:17:
24:9f:67:62:99:05:9f:a7:8a:7f:5b:e9:df:09:58:
43:d7:3c:d8:1a:11:2c:d2:fa:03:23:81:9a:45:df:
60:f2:2a:33:a0:e7:46:39:dd:61:68:96:2f:29:14:
32:5e:c5:2c:ee:91:46:70:88:ad:7e:a6:53:43:de:
eb:f7:f9:94:5a:fe:9c:e5:c2:27:61:6f:5b:ee:ad:
cc:3e:4e:fa:6b:9c:62:99:e4:79:08:73:a9:17:af:
a3:20:c1:35:8a:19:ec:6f:8b:12:6e:16:d0:5a:ac:
5a:40:ed:1b:ef:60:52:90:27:bd:a3:29:f7:b4:a9:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:41:AE:87:1B:2C:AE:EF:E6:BC:20:8A:BE:A6:50:39:6D:64:A7
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:04:b9:4a:a5:b6:14:a1:cf:be:37:64:5e:96:ee:73:35:9f:
63:91:56:e1:32:43:1d:a4:6c:11:f3:61:7b:68:3f:5f:4e:ed:
e8:c2:92:8b:43:9d:90:c6:ef:e3:76:67:a9:17:47:9c:6b:dd:
b0:10:0f:9b:58:67:8a:d3:5b:99:0a:0c:9f:e4:22:a6:e3:be:
b7:56:c5:cd:3a:79:fa:f0:72:66:43:3d:e1:a0:d3:f1:fc:87:
d1:82:59:f6:7e:dc:ae:8c:cb:0b:92:fc:34:04:07:ef:18:81:
5c:5a:49:10:6c:5b:40:8d:48:e7:3a:e3:45:f3:71:03:ee:42:
a2:37:6a:5f:43:11:f9:1f:35:01:f3:02:fd:42:df:cc:55:a1:
fd:d6:6c:6e:9d:e7:0f:d6:58:b5:01:6b:9a:a7:30:e0:22:1b:
e8:1e:5f:ce:fe:61:f6:32:88:39:9b:14:8c:6d:dd:0a:06:c2:
3a:6c:69:30:3f:00:4d:5a:30:0d:f5:34:92:58:f4:eb:49:21:
f3:c0:8b:5e:40:25:4d:47:70:9a:ca:52:09:81:b8:51:39:0b:
be:17:e8:26:ca:a6:55:50:54:30:4d:4b:62:40:eb:a5:cb:46:
8d:fe:a2:2f:af:95:37:bc:37:d2:cd:92:79:fd:47:7d:65:08:
dc:c4:60:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNke6X2gZXNCarC8hU8VLw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw
MGRkZjUwHhcNMjQxMTI1MTgwMDQ1WhcNMjQxMTI2MTgwMDQ1WjAzMTEwLwYDVQQD
Eyg0MDVmNDFhZTg3MWIyY2FlZWZlNmJjMjA4YWJlYTY1MDM5NmQ2NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAyiSEglkh/cVoLgZIErAhkzeQ/v
3ULbRSk/P/UbCer064dnuEFI5KHuCtGw4dD/JfV+bU6Z3F29Ke9/vBdzse6eFJGd
4odKpPMl+HqtxYP7GcRnYQuA41BLPPZBQqU14JgXBMfXdygJXeVSLnmf/wB9xNGT
QvKLzAFewTdRnSuWFCfchhckn2dimQWfp4p/W+nfCVhD1zzYGhEs0voDI4GaRd9g
8iozoOdGOd1haJYvKRQyXsUs7pFGcIitfqZTQ97r9/mUWv6c5cInYW9b7q3MPk76
a5ximeR5CHOpF6+jIME1ihnsb4sSbhbQWqxaQO0b72BSkCe9oyn3tKnx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBfQa6HGyyu7+a8IIq+plA5bWSnMB8GA1UdIwQY
MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt
NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw
LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAS5SqW2
FKHPvjdkXpbuczWfY5FW4TJDHaRsEfNhe2g/X07t6MKSi0OdkMbv43ZnqRdHnGvd
sBAPm1hnitNbmQoMn+QipuO+t1bFzTp5+vByZkM94aDT8fyH0YJZ9n7crozLC5L8
NAQH7xiBXFpJEGxbQI1I5zrjRfNxA+5CojdqX0MR+R81AfMC/ULfzFWh/dZsbp3n
D9ZYtQFrmqcw4CIb6B5fzv5h9jKIOZsUjG3dCgbCOmxpMD8ATVowDfU0klj060kh
88CLXkAlTUdwmspSCYG4UTkLvhfoJsqmVVBUME1LYkDrpctGjf6iL6+VN7w30s2S
ef1HfWUI3MRgNQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:26:35 2024 by rpki-client on console-fra.rpki-client.org