Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
File: 8OlKP3YsIdcztI_yssV0VgXCvjM.mft (raw, json)
Hash identifier: 5DqZaWTNMM5VP3p+DWjhDAjMkLNkDTOk5prler9+co0=
Subject key identifier: 4A:E8:3D:6C:32:F5:E5:83:3A:09:C6:1B:87:F0:48:D4:82:97:9D:C1
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Certificate issuer: /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial: 019369D89826FBF6BD12E3F5A170E580FB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
Manifest number: 0E19
Signing time: Tue 26 Nov 2024 19:00:22 +0000
Manifest this update: Tue 26 Nov 2024 19:00:22 +0000
Manifest next update: Wed 27 Nov 2024 19:00:22 +0000
Files and hashes: 1: 8OlKP3YsIdcztI_yssV0VgXCvjM.crl (hash: XhNwAGYnTCb68+OzgtQaYexAonWtMZksN0SMAdQGELM=)
2: M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa (hash: YJH8XogGAiPVhNfpwNLuVtfRK7287F8OKKxG6tBIoNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:98:26:fb:f6:bd:12:e3:f5:a1:70:e5:80:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Validity
Not Before: Nov 26 19:00:22 2024 GMT
Not After : Nov 27 19:00:22 2024 GMT
Subject: CN=4ae83d6c32f5e5833a09c61b87f048d482979dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:cb:eb:75:37:99:d3:3f:76:9b:3f:a4:3d:
09:82:2e:1f:b5:f9:88:30:29:1b:99:ca:f1:29:28:
56:55:3d:95:38:50:02:b0:04:12:17:00:06:6f:7c:
df:cf:f5:bf:8f:f1:38:70:b1:4b:d1:69:5f:b8:24:
9f:38:fc:85:ae:9b:6a:19:09:1c:27:ed:3b:d5:c1:
ca:d5:ce:ca:39:99:6b:9b:f9:04:ba:20:0a:b9:dd:
09:31:af:20:81:4b:75:18:2a:ec:69:f8:07:1a:55:
a0:32:66:3a:b4:64:ab:19:56:cc:16:eb:cc:72:bf:
13:c7:e9:92:0d:c4:60:35:e3:9a:1f:46:d6:dd:ea:
3e:da:5e:4a:6d:49:ca:a5:9d:69:bf:e0:85:9c:d5:
92:fc:7c:02:40:b5:e1:68:42:c1:ed:29:0d:34:e6:
83:05:d3:f9:4f:2d:70:ad:2e:e0:64:ad:03:f0:6e:
99:d8:b7:8b:73:00:4f:ae:c7:c1:2c:28:8f:41:14:
38:e4:c6:88:12:b9:c9:71:4f:1c:56:13:d9:33:90:
37:be:e9:0c:29:36:24:4b:64:75:e6:67:ac:82:83:
2f:ec:d0:61:30:c2:5e:2f:e3:85:99:75:10:72:0a:
55:74:a6:e5:d6:13:53:ec:30:e3:7b:9a:34:97:36:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:3D:6C:32:F5:E5:83:3A:09:C6:1B:87:F0:48:D4:82:97:9D:C1
X509v3 Authority Key Identifier:
keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:af:34:8c:dd:2f:f5:66:1b:45:84:79:e7:19:10:4c:97:
b0:f1:ce:c0:4b:6d:3f:1f:90:60:31:27:7a:1d:e3:da:03:f2:
02:a5:c6:12:06:d7:b2:2d:de:5a:d5:5c:48:99:c9:83:c9:53:
71:07:e8:9d:99:f2:14:72:25:83:3d:66:6e:38:3d:cb:01:71:
7b:ad:0a:bc:69:a2:e3:7c:c8:85:54:5f:8c:44:34:08:4a:24:
b1:30:e2:ce:c6:bf:0e:fe:d1:ef:43:e0:46:c1:03:70:31:42:
2a:3b:b8:6e:d3:01:87:2f:c3:66:40:c1:e0:7c:32:32:6f:a7:
02:71:d4:f0:cf:21:61:16:d0:ff:06:44:32:cc:10:32:26:22:
e0:2a:37:13:36:f0:6a:94:74:67:ec:35:70:04:e4:61:c0:da:
5e:cb:a3:46:13:b7:58:c3:90:b1:3e:6e:61:17:cf:36:12:65:
8f:7a:9e:57:28:4b:01:9d:6c:99:9c:8a:3a:c2:25:68:33:66:
b9:31:24:68:f7:c3:6a:4e:99:ad:87:ee:f0:71:40:27:d1:01:
b2:07:a9:d7:83:60:90:bf:53:eb:9d:af:4d:2f:1e:fa:a9:cf:
ce:87:93:03:d6:c8:43:13:c8:40:7e:cc:44:b5:a2:60:27:1f:
9d:07:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:25 2024 by rpki-client on console-fra.rpki-client.org