Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: oA8Z3PLH5GR87PPuW1IobCmrF84udd6a0bGfrUXquXw=
Subject key identifier: BC:28:5C:02:23:0C:15:B5:B2:4D:26:5C:9B:48:7C:84:02:AF:12:50
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 0193580920D795026EAF1AEFE1DFA3598DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 02D4
Signing time: Sat 23 Nov 2024 08:00:13 +0000
Manifest this update: Sat 23 Nov 2024 08:00:13 +0000
Manifest next update: Sun 24 Nov 2024 08:00:13 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: hNMZ8X9QJ1BUQPN9vnN0p6R77oljz/bUBmjhvKEVg0s=)
2: SiSWH4dsJFFFCQZZ0Ap90gQIjAg.roa (hash: PA7eoym4jTOyLJlckbr0wbSvG/buGKIffU/+PUSTyR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:20:d7:95:02:6e:af:1a:ef:e1:df:a3:59:8d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Nov 23 08:00:13 2024 GMT
Not After : Nov 24 08:00:13 2024 GMT
Subject: CN=bc285c02230c15b5b24d265c9b487c8402af1250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:93:3a:7e:5e:17:da:c4:28:96:e2:59:b7:
65:7b:f3:52:b7:64:9c:70:1a:93:4d:a3:c1:39:30:
ae:12:32:f7:a9:3c:9e:30:72:74:d6:3e:a9:01:1a:
02:90:49:4b:65:3e:e3:e6:ac:55:14:22:60:39:53:
ad:71:b5:44:00:23:7c:4a:ae:3f:b7:45:03:2e:72:
62:ef:98:b3:79:3f:b5:0d:3b:84:b1:e8:0a:d0:7c:
df:a2:2b:84:27:30:76:34:2c:37:84:33:9d:4e:65:
fb:43:4f:17:cb:e1:4a:0d:23:9f:c9:9d:27:5d:6e:
7d:68:62:38:c9:78:2d:c8:76:dc:e5:85:34:a3:57:
86:29:13:2d:b1:d2:d5:00:52:ac:ad:66:53:f2:a1:
72:80:29:37:a4:07:76:76:5e:02:0a:7a:76:ec:c7:
f3:b0:2d:16:7d:00:7e:1e:a2:b8:96:5b:9a:77:c1:
50:6d:88:e2:c7:91:eb:69:20:b3:bd:78:2f:c1:04:
00:b7:68:47:02:72:12:05:09:5f:0c:d0:91:47:9e:
95:c4:3e:6f:b4:e3:c6:62:21:b5:e1:b1:1a:b7:11:
f7:bf:14:6a:4b:39:0a:ab:61:f9:7e:da:38:15:dc:
cd:13:8a:9f:d5:1b:68:91:b6:78:91:80:1a:f6:7e:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:5C:02:23:0C:15:B5:B2:4D:26:5C:9B:48:7C:84:02:AF:12:50
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0e:45:c4:e8:f4:e2:f7:ca:66:f7:fc:a6:41:32:45:23:c3:
d5:d4:dd:13:70:6a:eb:4d:d4:34:34:0a:ad:f4:62:4e:31:db:
ff:5b:a6:cb:fe:fa:b6:e8:0b:98:a6:b1:c3:13:61:c6:5c:b9:
91:7a:34:74:65:27:46:1b:c3:81:a7:a7:e9:bc:39:76:4f:e9:
ed:2f:1d:e6:ca:2a:78:fc:fb:92:dd:5b:b2:59:68:0b:0d:64:
80:e7:9e:49:4b:54:b6:fb:0b:cd:c5:4a:9f:59:87:59:ce:42:
dc:06:bb:3f:11:1b:05:77:e0:86:48:a6:9f:12:ec:46:66:21:
a3:e4:91:1c:30:6b:49:ed:cc:df:24:92:7e:27:26:08:3c:6f:
91:35:13:f0:c6:2e:9f:1a:ad:2d:3a:d8:5d:00:32:09:b9:84:
43:0f:d0:ab:ca:b7:ee:0b:11:bf:03:ed:d4:06:7d:7a:77:13:
c6:7d:bb:15:45:c5:88:fc:62:aa:8a:a3:6e:75:b6:23:59:8b:
91:58:14:56:88:57:8c:54:f3:0b:c9:cf:05:b4:13:bb:37:a3:
59:fd:2e:fc:10:98:cd:ae:ea:50:c7:0d:e5:7a:ed:c2:65:72:
98:3f:c8:af:5e:a1:07:cf:df:86:4e:6c:c6:e1:1c:0c:b2:d3:
4f:cd:65:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYCSDXlQJurxrv4d+jWY29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjQxMTIzMDgwMDEzWhcNMjQxMTI0MDgwMDEzWjAzMTEwLwYDVQQD
EyhiYzI4NWMwMjIzMGMxNWI1YjI0ZDI2NWM5YjQ4N2M4NDAyYWYxMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCOTOn5eF9rEKJbiWbdle/NSt2Sc
cBqTTaPBOTCuEjL3qTyeMHJ01j6pARoCkElLZT7j5qxVFCJgOVOtcbVEACN8Sq4/
t0UDLnJi75izeT+1DTuEsegK0HzfoiuEJzB2NCw3hDOdTmX7Q08Xy+FKDSOfyZ0n
XW59aGI4yXgtyHbc5YU0o1eGKRMtsdLVAFKsrWZT8qFygCk3pAd2dl4CCnp27Mfz
sC0WfQB+HqK4lluad8FQbYjix5HraSCzvXgvwQQAt2hHAnISBQlfDNCRR56VxD5v
tOPGYiG14bEatxH3vxRqSzkKq2H5fto4FdzNE4qf1RtokbZ4kYAa9n4JlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwoXAIjDBW1sk0mXJtIfIQCrxJQMB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASA5FxOj0
4vfKZvf8pkEyRSPD1dTdE3Bq603UNDQKrfRiTjHb/1umy/76tugLmKaxwxNhxly5
kXo0dGUnRhvDgaen6bw5dk/p7S8d5soqePz7kt1bslloCw1kgOeeSUtUtvsLzcVK
n1mHWc5C3Aa7PxEbBXfghkimnxLsRmYho+SRHDBrSe3M3ySSficmCDxvkTUT8MYu
nxqtLTrYXQAyCbmEQw/Qq8q37gsRvwPt1AZ9encTxn27FUXFiPxiqoqjbnW2I1mL
kVgUVohXjFTzC8nPBbQTuzejWf0u/BCYza7qUMcN5XrtwmVymD/Ir16hB8/fhk5s
xuEcDLLTT81lxw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:35 2024 by rpki-client on console-ams.rpki-client.org