Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: IV1RtiVtdXge1pKCus8Z/6gheOxQjv+pxf+JdC/Cgg0=
Subject key identifier: 11:C0:E0:F9:EC:8A:D7:F6:CA:E7:CA:BC:87:CD:FB:A4:95:97:C1:62
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01935877CB5FD093A862EF5EBB06D1795EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 10:01:06 +0000
Manifest this update: Sat 23 Nov 2024 10:01:06 +0000
Manifest next update: Sun 24 Nov 2024 10:01:06 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: Ogf0Fv4HKIxzxLl3bmf+KZSNSn8cxJJOyrNDeNYEqa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:cb:5f:d0:93:a8:62:ef:5e:bb:06:d1:79:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Nov 23 10:01:06 2024 GMT
Not After : Nov 24 10:01:06 2024 GMT
Subject: CN=11c0e0f9ec8ad7f6cae7cabc87cdfba49597c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:47:98:1c:56:40:22:54:5d:be:b6:98:f4:
d5:77:a7:4d:1f:07:64:b7:e3:35:ea:9c:2a:cc:a0:
22:4b:2d:9e:8e:86:10:29:fc:4e:96:9c:7e:34:72:
9e:98:28:e0:12:a8:71:3f:33:c8:31:45:75:39:34:
02:72:b6:eb:47:79:0e:b2:a7:ad:47:44:39:49:54:
d9:28:bb:54:83:45:2d:09:7e:f0:86:41:de:6e:8a:
56:5c:0a:11:dd:1c:dd:48:b4:ab:13:a0:af:41:db:
6a:6f:24:fa:9c:5b:0a:18:83:41:71:25:43:ff:d9:
ee:7b:81:db:ea:6b:c8:bc:06:eb:38:dc:f4:c6:6d:
fd:5e:ab:94:69:74:3c:e3:fa:d4:b4:46:9a:de:7c:
ff:04:46:df:78:b3:32:79:3e:23:8a:a2:8f:fd:ac:
e5:dd:49:33:f2:87:f2:ef:bf:90:82:62:72:80:44:
38:50:80:0a:ed:4d:73:49:53:fc:cb:0d:19:d2:81:
40:64:e0:61:96:08:80:d4:1b:b0:58:c1:c4:71:90:
ea:59:4e:30:71:96:cc:d3:61:0d:a6:a2:e8:43:3e:
ee:29:cc:20:57:7e:9e:55:30:72:94:0f:48:78:fc:
42:1c:7d:3c:e7:35:a9:7d:8c:3c:9d:d7:a4:06:b3:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:E0:F9:EC:8A:D7:F6:CA:E7:CA:BC:87:CD:FB:A4:95:97:C1:62
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:3a:9c:fe:ce:e7:ae:b7:1c:6c:6e:48:00:14:24:2a:c7:
88:71:f2:d9:4e:00:33:c2:2a:af:ac:b2:8e:1d:00:8b:f7:d4:
6c:a4:94:ba:88:7f:95:df:9a:78:c5:dd:40:55:8b:81:ff:84:
c0:07:b8:f1:88:ae:49:cf:db:9b:b3:bf:46:29:e4:39:15:1e:
65:db:41:d3:9c:2a:82:57:ec:5e:b3:a5:60:c1:4f:ac:23:b0:
39:8c:a3:0d:5f:0f:24:30:93:51:61:47:dd:45:45:e7:eb:83:
c2:dc:af:bf:55:76:61:40:7f:45:1b:0a:f2:81:11:32:2e:21:
dd:1f:57:23:e8:06:11:ef:a6:96:61:b9:fb:4a:b6:64:16:76:
77:68:ea:98:a7:28:9a:b5:29:58:77:43:3e:66:aa:a2:d2:2e:
52:2a:3d:38:84:09:fa:53:68:b2:6b:b5:af:22:c1:29:97:0e:
6c:1f:7d:9e:cf:05:51:b1:39:86:29:41:b3:e5:4a:01:ec:cf:
39:e1:2d:8d:8e:e2:00:93:7b:2b:eb:91:0c:3f:b8:45:8d:c7:
78:44:0e:3c:f7:a4:e9:ff:61:71:ab:73:b3:8e:60:4a:32:1b:
ae:cb:ac:47:07:62:fa:22:85:73:84:9d:1e:08:5b:ab:89:5f:
99:89:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:56 2024 by rpki-client on console-fra.rpki-client.org