Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File: BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier: sp8D3iglXHZoo321leIli/mqilXZpMY9Q2zwY1q7POQ=
Subject key identifier: 5B:B1:6E:7B:12:E0:35:1F:A7:71:9E:EF:F2:BB:01:20:A5:8B:DE:05
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019357D2AFB3EA3DF85FB9189B16E0D65D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number: 42
Signing time: Sat 23 Nov 2024 07:00:45 +0000
Manifest this update: Sat 23 Nov 2024 07:00:45 +0000
Manifest next update: Sun 24 Nov 2024 07:00:45 +0000
Files and hashes: 1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: KeYJXsBbaHKYpaha+x2+ThuQ4HSK6i8azBptlghtA+c=)
2: N53sAUI9wztEoaLe_kClnEAcTQw.roa (hash: 7pbMBuqA1utjGBdSQXU4dThUicW2KWSJxwyRX5yKVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:af:b3:ea:3d:f8:5f:b9:18:9b:16:e0:d6:5d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Nov 23 07:00:45 2024 GMT
Not After : Nov 24 07:00:45 2024 GMT
Subject: CN=5bb16e7b12e0351fa7719eeff2bb0120a58bde05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:e7:c8:97:ec:f9:d7:27:6f:5e:ea:a2:08:
76:76:2c:4c:b4:00:90:87:d0:49:1b:9b:a3:c1:cd:
c8:4a:26:47:10:1a:5c:85:f0:07:da:0f:39:78:fd:
68:80:ee:d9:92:ba:43:ca:58:7a:fd:96:8f:8c:3f:
3b:75:2a:bf:6e:60:ea:24:80:56:29:e9:96:db:cb:
64:66:c3:74:c8:9b:e1:f3:cb:e0:c0:eb:b2:a9:73:
b4:2e:81:19:e3:e3:20:0b:84:83:82:76:f6:ba:ee:
e2:50:2d:d7:ab:bc:51:33:d9:ec:e4:47:45:6e:a8:
09:9d:27:1e:11:34:ca:48:75:ee:60:fd:fe:1f:fa:
31:7a:22:62:85:bb:e5:c1:62:b6:22:3b:2a:30:65:
ff:48:d5:73:6b:a6:16:83:70:eb:cc:52:2d:75:e9:
a4:67:ec:00:37:5e:79:87:08:9c:d4:be:5f:b5:56:
60:55:2a:2e:5a:74:a2:d4:08:d7:f5:1c:aa:b5:cf:
6b:b5:16:d2:07:ec:82:df:c4:30:d9:8d:95:bf:2f:
d2:d1:e2:c0:ab:d1:9a:88:68:69:dd:b1:df:91:55:
61:40:00:28:cf:bd:6c:3a:e2:91:bf:0f:cc:f7:d2:
cb:2f:4c:22:06:26:be:bb:40:97:24:89:62:36:a7:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:6E:7B:12:E0:35:1F:A7:71:9E:EF:F2:BB:01:20:A5:8B:DE:05
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:6f:f3:9f:63:01:a0:12:e6:20:71:33:2a:5b:1d:fa:68:
b2:54:b8:a9:0e:79:59:8e:bc:a9:f1:6b:10:30:39:f8:7a:b4:
a5:37:56:fb:6b:57:70:08:6b:66:76:d4:9e:9e:6a:49:a9:23:
89:20:6d:87:35:7c:c3:10:ef:55:73:44:bd:86:0d:81:2e:82:
36:5f:6c:23:04:89:90:b3:85:38:47:2c:cc:fb:2e:61:68:dc:
cb:0a:6e:d1:f3:b5:bb:26:c4:d7:f1:27:53:fc:b4:f7:2e:9c:
bd:f0:6d:07:4e:b1:e2:75:6c:60:24:79:d0:62:e6:e5:66:b0:
7d:ad:32:53:7e:5f:ec:ec:37:a8:80:b8:4d:e4:18:e3:32:53:
44:d4:c9:f5:ce:32:29:dd:b2:1b:c9:dc:2d:be:3a:db:e3:6c:
6f:c7:30:93:6d:00:ca:6a:df:e1:18:c0:25:4c:13:4b:48:f6:
4d:63:8a:eb:76:62:e5:3a:9b:cb:6a:0e:a8:c9:59:a8:67:5c:
27:51:48:f4:d6:f0:64:5b:4d:46:db:16:4d:36:21:ed:9d:d3:
4c:b4:a0:ce:d2:98:b6:f9:2f:0d:db:ca:6c:37:d5:83:34:9c:
80:17:68:84:a8:ce:0a:d1:91:ca:49:a8:28:27:ce:41:18:3a:
44:a7:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:15 2024 by rpki-client on console-ams.rpki-client.org