Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: r0R3YpguhfoJDhp3mwgafa1Ub0+3yfzPJ0QpjVtTa5Y=
Subject key identifier: B1:16:A2:CF:20:22:4D:86:B7:B5:88:62:B2:B0:2D:E7:7B:15:0E:75
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0193568901794E1119FC8809F9D41AC46076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 01:00:39 +0000
Manifest this update: Sat 23 Nov 2024 01:00:39 +0000
Manifest next update: Sun 24 Nov 2024 01:00:39 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: HWnz/vXzwNrtNMr5/YGL7jR4PN07I950Xq2tuHzLErE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:01:79:4e:11:19:fc:88:09:f9:d4:1a:c4:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Nov 23 01:00:39 2024 GMT
Not After : Nov 24 01:00:39 2024 GMT
Subject: CN=b116a2cf20224d86b7b58862b2b02de77b150e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:2d:c4:1a:22:34:49:00:10:fe:e3:e5:14:
9f:67:95:d7:34:21:3c:3b:c2:52:f1:c0:55:ad:af:
a6:09:86:6b:ff:37:b3:c3:bc:2e:cc:8b:31:7c:78:
8b:85:be:36:3b:5f:53:bc:eb:42:48:eb:12:81:18:
eb:01:7f:e7:93:84:8c:23:28:c0:a4:5f:04:24:9d:
b5:bd:71:62:d8:2e:ba:17:12:6d:c8:32:27:03:54:
e6:b0:f5:6e:43:81:c8:59:44:17:25:02:f3:e9:0e:
aa:34:ad:0c:a0:a6:29:c6:dc:39:8e:d1:f9:65:17:
4b:10:50:8b:b5:cb:6c:10:a0:e7:b6:a8:31:bf:92:
f8:4b:d7:cd:27:b6:c6:4f:9a:c3:97:75:be:fd:3c:
a1:af:20:74:35:37:a6:59:92:67:dd:91:48:b0:05:
b4:a7:12:05:b9:c8:34:36:1e:2e:76:ac:29:11:6b:
05:5d:b6:91:67:63:1b:d0:a8:2a:f1:dc:61:20:27:
d7:c3:4f:0d:46:65:16:ef:16:3e:1e:3f:9e:28:c1:
42:da:84:1f:63:08:88:93:bd:c1:2b:c4:11:57:81:
08:fb:0c:b8:73:1f:5b:35:47:b3:85:4c:8c:cf:8b:
97:c0:64:b1:0c:61:40:49:69:4e:4d:8b:b8:21:0f:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:A2:CF:20:22:4D:86:B7:B5:88:62:B2:B0:2D:E7:7B:15:0E:75
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:91:f1:23:dd:4b:a1:e0:80:9b:4b:ca:83:5c:80:30:97:a0:
59:3d:0f:5b:3d:ee:eb:13:cb:6b:23:fe:bf:fd:71:d6:c5:80:
07:40:f6:43:ae:03:f0:d9:16:40:bb:f7:00:c9:f8:43:22:f7:
07:f2:d4:f7:6b:eb:be:b0:a4:2c:6d:b3:bb:f3:6e:06:35:ac:
39:c0:79:ef:cc:cc:69:c7:db:3d:fb:83:60:b2:59:48:1c:27:
3c:35:d3:67:7d:38:9b:99:74:e7:bc:53:ee:13:3c:6c:d3:2d:
98:67:c0:1d:75:62:32:ab:69:17:13:45:8d:76:23:c4:88:69:
d9:4e:b0:83:7d:21:f2:06:43:94:d5:05:9c:93:18:03:89:cf:
a0:e3:fc:a6:64:e7:c6:6e:d3:4f:5f:a0:52:c3:2a:b8:98:6d:
1b:07:f5:0f:4c:5c:fb:45:7a:8d:79:1d:33:ca:e4:71:53:56:
14:8e:08:d4:a3:15:07:49:c9:db:67:67:52:26:6a:30:62:40:
0a:8a:f5:b0:09:14:d9:8d:17:88:81:b7:3c:19:22:a9:37:00:
3a:f1:fb:9d:5c:08:8d:91:cf:89:e5:eb:96:d7:bd:f9:1d:1e:
b6:7a:59:b6:d8:29:91:0a:2c:2e:6d:fc:94:58:ed:5e:5c:02:
55:18:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:40 2024 by rpki-client on console-ams.rpki-client.org