Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
File: gisw2Jsbz_aZ9kH4gCaULRanK8w.mft (raw, json)
Hash identifier: u4Lrk+92DFG0k1feVYw17trKnYzz+psUDE1DeCgjOUg=
Subject key identifier: C4:1D:0C:8B:E1:B2:CF:BB:A9:0B:27:62:D8:1F:B6:63:1E:57:28:6D
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 0193572DBC71EA301491216E0C4E0AE6D288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 04:00:35 +0000
Manifest this update: Sat 23 Nov 2024 04:00:35 +0000
Manifest next update: Sun 24 Nov 2024 04:00:35 +0000
Files and hashes: 1: cQTXQ_cOwKxzFKxhAM78DgWgZqU.roa (hash: e5qZn8HmgIhFoe11zbOuXC48vmwS9coIvVH/J33da6U=)
2: gisw2Jsbz_aZ9kH4gCaULRanK8w.crl (hash: QMB8dYn3tKsSEG2NZOPpzxNPpUqxGaNmkQhp3AmHtjw=)
3: tsNsIwRlVdII_oba6pbBhmVIOzQ.roa (hash: l4Dl93e1GJ1Jd+HK6PytNy3/QB7O0bTvtohCJLWRa10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:bc:71:ea:30:14:91:21:6e:0c:4e:0a:e6:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Nov 23 04:00:35 2024 GMT
Not After : Nov 24 04:00:35 2024 GMT
Subject: CN=c41d0c8be1b2cfbba90b2762d81fb6631e57286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:78:6d:46:28:6b:b6:32:18:ce:6b:32:1e:
f5:ab:dc:7d:04:b8:c5:10:09:48:f2:2f:22:ae:33:
e0:44:fc:52:cb:4d:7e:da:ac:e0:d9:37:00:c9:f2:
43:d5:e5:a0:ed:fc:73:48:85:d2:40:f8:13:3b:44:
2e:39:b6:4b:a4:28:45:d7:0f:88:86:ba:d2:14:5e:
8b:0c:9d:cd:6b:e5:c4:0e:66:74:d0:50:a5:b0:66:
b5:29:24:59:ca:40:4e:5b:dd:8e:a5:16:d9:75:3b:
b4:c4:88:b1:4a:58:6f:33:be:75:86:58:1c:93:6a:
7b:af:26:f2:da:92:10:31:03:ca:05:bc:77:6b:31:
ca:9c:64:3c:7a:9b:93:56:fd:71:dd:1d:ac:02:35:
9f:74:10:ba:45:ec:60:49:22:f9:86:95:8f:71:74:
8c:bd:e4:00:87:1d:75:32:b5:cb:44:93:01:ac:72:
96:3c:4e:62:54:af:e4:a5:f1:09:73:2b:7b:2b:d4:
d0:d2:51:61:ea:fa:6a:cc:5e:78:3a:17:05:45:21:
d0:ed:9d:1a:50:5b:9f:50:db:ac:a8:60:dd:86:b3:
a1:c7:8d:13:5a:77:de:2b:fb:b7:e2:4e:39:2f:63:
df:87:da:14:9c:5f:b1:48:df:c6:74:de:4f:6f:f1:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:0C:8B:E1:B2:CF:BB:A9:0B:27:62:D8:1F:B6:63:1E:57:28:6D
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:79:f0:5c:88:e4:7b:c4:0d:f7:3d:cd:50:ba:cc:66:aa:
f9:a3:1c:c3:5a:07:53:35:be:b6:c5:31:db:af:98:f8:fd:d4:
70:b7:b3:ff:23:9b:e9:16:5c:82:af:2d:57:e7:18:32:29:36:
e9:80:3e:09:60:4e:a2:b0:4f:a4:21:4d:42:2d:9c:40:b4:2e:
da:75:b9:4f:1e:47:92:7d:94:bc:ad:c2:50:11:f1:98:4a:e9:
f7:24:ee:d9:15:1b:40:66:46:fd:17:c3:41:ae:45:b3:47:25:
d9:2e:41:66:2d:59:4f:54:25:9e:d2:a6:87:61:58:ea:bd:15:
ed:91:65:55:5e:36:47:58:af:65:70:68:b5:b0:14:97:fe:bc:
2a:f7:5b:e5:40:f1:f0:b7:db:57:54:bd:98:bd:8a:24:ec:9f:
6d:81:f6:dd:6b:d4:4e:ae:ba:0b:23:b6:f2:b7:33:ee:7a:6b:
d0:c1:81:ac:ed:e2:a9:68:61:e4:bf:f9:5d:6d:d9:47:ab:a1:
46:c3:92:bc:4b:a0:d3:87:05:be:fa:ab:4a:2f:e8:31:ea:b8:
a4:d9:6a:26:55:8f:47:38:44:22:f5:0e:a7:ea:e5:d2:f3:fc:
34:cf:8a:aa:96:fc:1a:8c:af:66:eb:6a:fa:3a:7e:ac:b6:8f:
f6:89:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:06 2024 by rpki-client on console-fra.rpki-client.org