Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: rczqtWGyyeOTd7WXDoDwuBXKzFYmn99sMlcYtUc7RJI=
Subject key identifier: CB:19:07:16:B9:42:25:4D:2D:14:25:51:40:6D:4D:75:35:74:36:B6
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0193568A62DD3A9E7E356A1F21AB43298552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0D13
Signing time: Sat 23 Nov 2024 01:02:10 +0000
Manifest this update: Sat 23 Nov 2024 01:02:10 +0000
Manifest next update: Sun 24 Nov 2024 01:02:10 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: e9gdWrC43o4oqx35aoDTwf7M977EyRBjFbqE7Xv8j5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:62:dd:3a:9e:7e:35:6a:1f:21:ab:43:29:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Nov 23 01:02:10 2024 GMT
Not After : Nov 24 01:02:10 2024 GMT
Subject: CN=cb190716b942254d2d142551406d4d75357436b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:3f:37:2c:f8:60:69:3a:7a:8c:cb:e1:a5:
59:4e:96:97:8c:d0:c9:8f:c1:5d:4f:97:76:a8:c5:
9e:6c:76:bd:bd:2e:6f:cf:da:97:76:02:01:dc:6f:
89:cf:a7:ab:82:62:74:9c:90:6f:ab:f6:2e:37:38:
19:7a:1b:cb:dd:ac:34:88:1d:06:81:32:a7:86:25:
14:d4:72:da:71:53:56:9f:58:4f:98:e2:78:59:1c:
2f:0e:72:7c:b5:ca:f8:e9:0a:d3:bf:1f:86:98:ca:
d4:7a:49:e9:bf:88:9a:8b:0e:1d:8a:fc:e1:f6:51:
cb:5d:34:63:a0:f4:df:41:0c:bf:18:22:63:ce:01:
89:54:9f:f9:59:8d:ec:78:8f:af:6c:1e:98:3f:88:
59:5a:53:84:ca:fd:c3:8c:f1:94:ff:32:a1:3a:ec:
55:45:65:f6:f2:90:f5:ec:b2:66:0b:92:08:41:d6:
f7:5c:98:29:d4:c4:90:1b:70:ef:30:e8:bc:15:41:
2f:42:86:d6:5d:a0:5f:db:5d:3c:3e:82:5d:a7:d5:
b6:7f:58:90:7f:d9:cc:84:88:d3:4e:80:3e:7a:fa:
76:34:0b:1f:8a:d3:83:25:5e:0c:5a:64:6c:3c:50:
f5:9c:a5:4f:54:43:18:0e:de:a5:07:e8:1d:ac:11:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:19:07:16:B9:42:25:4D:2D:14:25:51:40:6D:4D:75:35:74:36:B6
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:e6:cd:63:f7:ba:11:c2:cb:3d:a5:8b:09:3c:17:59:7e:
bf:9b:26:b6:8f:33:b1:09:9a:9f:1f:48:37:9a:7c:73:cb:12:
69:56:a5:f8:28:b9:9a:a4:43:ee:65:b9:62:2d:bd:d7:1e:0e:
05:eb:25:27:cf:9e:7a:37:83:c5:6c:80:21:f6:86:f0:ec:c2:
b1:65:48:4d:ae:f1:7c:59:be:21:1e:27:23:44:a9:1d:e6:bb:
bd:2c:87:09:60:53:43:9a:7e:ff:67:7a:78:00:ef:7c:4e:71:
62:ef:d6:a6:4c:4d:bb:4b:c5:61:8b:10:b6:cd:46:ef:3a:67:
46:1f:03:46:c3:87:c0:a3:65:69:83:06:4b:1f:01:37:d6:fe:
21:ce:15:e4:28:fc:62:76:24:ae:c4:a1:96:bd:5f:f0:9b:36:
89:d5:48:2f:45:ed:5b:38:e1:4c:96:47:ea:ec:a0:62:fa:25:
1c:87:88:3d:bf:46:55:ea:fb:e6:87:41:fc:a5:b0:08:74:2f:
ad:ee:3d:74:45:57:20:f1:38:eb:63:8e:de:f2:b7:05:21:35:
78:10:e0:8c:47:dc:b7:1c:82:ba:fa:13:1b:54:79:a1:65:15:
e0:e7:6f:51:d9:78:5a:1b:93:30:ba:99:7e:bd:c1:75:a8:27:
ef:fc:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:33 2024 by rpki-client on console-fra.rpki-client.org