Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: QETk+kui8IpMHohemWcwXLShvEqK3K+sbK9YGpPXOyE=
Subject key identifier: BC:80:23:63:9A:F0:64:1E:FE:C7:23:A2:87:91:BB:E9:D8:05:98:CC
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 01935688B6F39E282AC144A9910658450523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 0418
Signing time: Sat 23 Nov 2024 01:00:20 +0000
Manifest this update: Sat 23 Nov 2024 01:00:20 +0000
Manifest next update: Sun 24 Nov 2024 01:00:20 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: tXuV1SxR2I3vGDYuOLM++3y6qGKhXMg1StN0T44Fc+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:b6:f3:9e:28:2a:c1:44:a9:91:06:58:45:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Nov 23 01:00:20 2024 GMT
Not After : Nov 24 01:00:20 2024 GMT
Subject: CN=bc8023639af0641efec723a28791bbe9d80598cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:56:5e:97:19:da:36:13:30:93:7a:a2:5c:
9a:1d:e8:99:ab:d8:51:9a:9d:9a:87:cb:5a:f9:08:
e9:07:29:57:18:3b:cd:a1:52:75:37:dd:b7:09:98:
81:cc:e6:2d:11:68:e4:c1:f5:af:ed:82:fb:c2:ac:
19:24:8e:19:cb:40:7b:3e:79:c9:da:f0:ab:64:4d:
98:a6:b6:87:59:c5:be:f2:00:32:cf:cb:b2:f7:f8:
c8:65:42:9f:b0:55:57:57:9c:6c:fb:ba:92:53:a6:
5d:58:e6:e0:2a:d9:34:90:31:be:4f:c1:eb:ae:c5:
cc:75:f7:ec:0d:0e:52:1b:1d:94:3a:95:e5:75:62:
cb:e4:86:0c:e7:94:bf:4f:03:5c:fa:a1:45:ed:cd:
83:bd:3f:10:f4:72:42:81:0b:c8:85:f9:43:36:c0:
b2:24:fd:23:db:24:6b:8d:15:17:95:7d:04:f1:e1:
eb:49:87:39:2b:d0:c3:c6:0e:81:41:53:4a:75:39:
10:ef:73:52:08:fd:03:64:e6:6d:b4:8d:8d:48:97:
7e:cc:16:18:b7:18:e4:55:fa:d3:1e:5a:36:14:8a:
12:84:a7:b6:70:8b:f2:9b:7e:15:78:97:15:44:75:
e6:65:5c:dc:57:88:40:fe:0a:4f:37:74:8e:49:a0:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:23:63:9A:F0:64:1E:FE:C7:23:A2:87:91:BB:E9:D8:05:98:CC
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:7a:47:4e:3f:94:ed:04:3a:f2:41:b5:0e:f2:cb:aa:f4:
2e:77:04:52:1d:64:83:70:bc:85:63:43:55:bc:00:4d:80:02:
7e:32:1e:d4:f9:d0:c0:e2:70:a9:96:9d:c7:ab:88:ec:ad:b6:
11:c6:e8:7f:9f:d4:ab:17:9e:ba:80:92:15:5a:1b:cb:ac:b0:
d8:82:85:5f:93:01:2c:d0:51:09:36:50:10:3e:e7:cf:9b:1d:
a7:e6:c8:37:7b:00:75:05:16:e9:2a:db:a7:ec:89:4b:4b:b0:
a5:80:a2:93:16:05:5b:48:d9:1d:cd:9c:e6:0f:fe:63:ee:c9:
87:58:7d:6b:1e:f0:72:3a:b4:05:b1:5d:05:e1:84:64:3c:4e:
da:3b:75:35:52:93:ca:74:bd:75:56:ae:6b:99:03:19:c1:c5:
46:7f:d3:a2:8e:9a:e6:92:89:a2:ca:5b:e1:35:98:0a:3c:69:
ec:07:c7:5a:bc:15:3f:6c:ee:19:fd:3a:68:92:14:9d:24:c5:
73:49:b2:77:2b:99:19:78:ec:61:5e:64:3b:a3:d4:ac:df:5c:
bc:bf:32:ce:16:05:28:62:5a:93:ce:b5:79:24:81:4f:16:de:
3d:ca:75:3a:09:ab:f8:83:be:06:da:d8:ff:97:0f:a8:67:68:
7d:cb:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:58 2024 by rpki-client on console-fra.rpki-client.org