Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: fvrv0qQXCyD2kpyacY9xCXPIARExfnUv2ST8ytwCF4Q=
Subject key identifier: 17:D1:30:72:FC:69:FA:E3:30:33:A4:38:9D:63:4C:95:B6:64:4C:CC
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019357D283397EDC1BD4E05EDAF079A32575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:34 +0000
Manifest this update: Sat 23 Nov 2024 07:00:34 +0000
Manifest next update: Sun 24 Nov 2024 07:00:34 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: UMGcix2cX8YQz229ocBsZyTasBN7gq3wZldMru8v4uQ=)
2: o3CAiHqkxblGSjh1BVEVzv_v_a4.roa (hash: +s4a+hnlewZpyL1xj5Rm5KrSCCQ35j3jj1mK9odqtw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:83:39:7e:dc:1b:d4:e0:5e:da:f0:79:a3:25:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Nov 23 07:00:34 2024 GMT
Not After : Nov 24 07:00:34 2024 GMT
Subject: CN=17d13072fc69fae33033a4389d634c95b6644ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:81:79:95:d9:59:91:7a:2c:85:d4:96:d0:
b8:1c:2e:e9:f0:09:c9:e2:a8:80:2c:d4:2b:ed:49:
f2:5b:b3:04:c8:47:50:9f:a9:b1:f3:14:9d:c6:74:
b9:e9:95:07:e2:5f:e2:ed:3b:69:15:7f:b8:fd:dc:
01:3a:3e:6c:ea:86:df:7d:41:87:34:bb:22:c9:76:
c7:98:55:61:a7:04:ab:8c:fa:c8:0c:ae:38:ba:fc:
78:32:fb:2c:7a:f8:98:86:af:30:d9:8a:d4:32:b9:
34:f5:55:b0:4b:f5:78:2d:2a:0a:5e:2a:c6:07:f8:
85:ec:be:7a:5d:0c:66:f7:f9:95:61:ab:56:7e:f0:
d7:0c:ac:7e:46:8f:40:58:e3:90:83:b1:68:fd:6a:
51:a7:8a:9a:e0:10:a6:2a:03:ec:93:f7:ef:fa:1d:
51:0c:5c:f4:2e:27:88:40:fc:c2:74:aa:4f:36:bf:
84:e0:eb:e8:b2:84:22:a9:cb:b5:61:55:f3:77:bb:
59:c1:1c:99:22:d7:6a:79:2a:b3:a3:ee:2f:db:56:
1b:d8:bd:a2:22:06:32:6a:92:b0:bb:2a:95:d0:89:
ea:e9:2d:45:e9:d1:fb:a4:74:a4:11:06:b9:1d:c1:
5c:43:5d:0a:5f:dd:37:1b:ef:df:f5:08:3b:56:49:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:30:72:FC:69:FA:E3:30:33:A4:38:9D:63:4C:95:B6:64:4C:CC
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:86:71:9f:f5:8e:b4:ce:f9:32:5a:f4:73:27:84:18:26:c5:
11:da:2d:30:11:97:6a:2a:cd:60:fe:78:3e:51:89:83:83:0c:
9d:4f:1e:b5:da:68:18:f1:bf:a8:bc:05:b0:13:a1:34:a2:59:
5a:41:97:b5:3a:0e:19:cb:20:85:d3:62:cb:db:46:b6:59:66:
8c:ac:38:e7:53:51:11:7c:72:62:2c:a0:4f:ff:77:88:0f:69:
d8:36:1c:7a:34:59:16:05:04:7c:34:86:e9:72:3d:10:55:71:
95:05:0a:50:29:63:7b:74:08:31:e6:02:ed:dc:89:0b:fa:7f:
d3:8c:94:ff:cc:e8:bd:53:f6:12:9d:14:07:1a:6f:73:be:45:
1f:3a:df:19:33:0b:94:63:3a:e8:81:d4:b2:ce:c0:a3:ca:2b:
75:b6:d1:19:05:40:3e:f1:a8:ec:3a:20:be:b2:78:fa:ee:29:
11:b7:63:c2:e3:9e:cb:74:1d:d0:b5:0a:37:d9:41:f0:8f:11:
41:57:51:3d:2c:b2:17:1c:b3:6b:99:56:0b:60:d2:72:fb:b1:
da:6d:f3:34:23:b5:15:67:31:c3:f3:51:5f:e2:69:92:da:25:
e1:c0:9e:ab:06:d0:42:e2:08:ff:af:a5:2a:6b:eb:12:a3:42:
5e:75:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:36 2024 by rpki-client on console-ams.rpki-client.org