Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: ROcmwLva3s8dgdrE1nKwNIJ7XV7BGEey+qWeRlQfgZ4=
Subject key identifier: AA:6E:EE:DF:E5:AF:13:E9:7A:BB:A6:41:00:73:44:CC:66:6E:0E:B1
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019356BFC1F890A425D995586533F1BA4121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0A84
Signing time: Sat 23 Nov 2024 02:00:27 +0000
Manifest this update: Sat 23 Nov 2024 02:00:27 +0000
Manifest next update: Sun 24 Nov 2024 02:00:27 +0000
Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: fuZCeYPcdlWNRQUd2wUhGJvoVYwGue6nu5RXatP+KaQ=)
2: dIQX4HlKBUqhhIvjx7nqLxmLR_w.roa (hash: HkBrmLYB96uniQCUoD9k6bWrk5O8Vub4goPLcN2wu2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:c1:f8:90:a4:25:d9:95:58:65:33:f1:ba:41:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Nov 23 02:00:27 2024 GMT
Not After : Nov 24 02:00:27 2024 GMT
Subject: CN=aa6eeedfe5af13e97abba641007344cc666e0eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:02:64:3e:1e:30:32:cc:70:9d:6a:a7:7b:
a2:1a:5a:4d:64:9f:96:da:5e:e9:7f:72:2e:62:3b:
05:0c:bc:df:c1:64:4d:3a:a6:37:65:52:cd:b0:d9:
a8:e2:4a:b5:3f:4e:1d:c0:c5:0e:0b:4e:c1:fd:cb:
6d:72:36:a7:52:42:76:7b:bb:fe:0c:1b:91:75:d2:
76:bd:c0:d3:c0:b0:62:84:d7:82:97:b6:48:06:d4:
33:c2:f1:39:47:64:35:a4:65:6b:e2:e3:89:74:40:
89:9c:be:11:70:93:fd:dd:b5:7e:d8:78:97:db:18:
bd:03:cf:00:f0:a5:70:f3:08:f5:cd:61:bb:c4:2f:
90:00:f7:bc:77:34:b2:89:f4:0e:66:4b:97:73:5d:
4f:85:c4:24:70:2d:26:8b:91:6a:25:b4:7a:48:64:
6e:9a:35:79:3c:68:b9:74:57:3b:79:54:e6:b3:2f:
86:24:60:1a:b4:66:f9:7a:ad:c7:06:5a:a0:6f:bc:
ef:50:58:78:37:41:0b:e4:21:f3:08:dc:57:99:0f:
66:92:65:e7:a9:ff:55:55:35:ab:73:2a:f4:c8:61:
d4:46:79:22:bf:1a:82:26:5d:8e:cd:3a:d9:21:61:
cd:ce:ef:f2:1d:70:5b:11:2b:03:1c:78:d6:1b:c6:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:EE:DF:E5:AF:13:E9:7A:BB:A6:41:00:73:44:CC:66:6E:0E:B1
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a5:f9:13:13:df:dc:54:77:8f:8a:04:4a:50:96:db:65:a3:
43:81:50:04:5b:81:e3:4c:d9:31:c8:65:5f:2b:52:6c:f9:a3:
e6:55:f0:ae:e2:65:f7:52:b1:e3:f9:4b:6b:69:19:43:a3:64:
a0:50:14:06:f2:7f:9d:d6:8f:79:8b:c2:6f:9d:ef:6c:ad:78:
9a:f2:8d:08:59:b5:91:39:18:83:44:f6:f6:2e:5f:22:c3:29:
b2:2d:1f:9c:64:10:d2:19:fa:f1:72:12:36:6b:2b:73:61:fd:
50:2e:c8:ec:65:31:da:bd:27:06:da:53:04:65:c7:51:40:40:
5b:87:d2:ff:13:20:0a:24:25:ee:09:af:9a:b1:ea:7f:48:2e:
a8:19:36:61:be:f1:60:10:49:4f:f3:12:7e:c3:fa:4c:87:c6:
8d:a2:2d:07:e0:2d:88:3d:a8:0f:da:74:47:f1:e1:60:f3:07:
ec:1b:c7:de:08:ed:6e:0e:2c:9e:cd:61:3b:45:94:78:c7:6d:
1a:c6:71:47:1b:f5:aa:c4:8b:c0:77:f4:fc:97:4b:2e:d5:0a:
2b:01:05:4d:de:51:77:70:73:79:55:70:06:7f:1d:20:95:2c:
66:a4:f4:8b:33:38:6e:80:05:26:3a:a6:2d:77:b6:63:04:e3:
6b:58:bf:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv8H4kKQl2ZVYZTPxukEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4
NGQyZTkwHhcNMjQxMTIzMDIwMDI3WhcNMjQxMTI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhhYTZlZWVkZmU1YWYxM2U5N2FiYmE2NDEwMDczNDRjYzY2NmUwZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4MCZD4eMDLMcJ1qp3uiGlpNZJ+W
2l7pf3IuYjsFDLzfwWRNOqY3ZVLNsNmo4kq1P04dwMUOC07B/cttcjanUkJ2e7v+
DBuRddJ2vcDTwLBihNeCl7ZIBtQzwvE5R2Q1pGVr4uOJdECJnL4RcJP93bV+2HiX
2xi9A88A8KVw8wj1zWG7xC+QAPe8dzSyifQOZkuXc11PhcQkcC0mi5FqJbR6SGRu
mjV5PGi5dFc7eVTmsy+GJGAatGb5eq3HBlqgb7zvUFh4N0EL5CHzCNxXmQ9mkmXn
qf9VVTWrcyr0yGHURnkivxqCJl2OzTrZIWHNzu/yHXBbESsDHHjWG8Z+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpu7t/lrxPperumQQBzRMxmbg6xMB8GA1UdIwQY
MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt
NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm
LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqX5ExPf
3FR3j4oESlCW22WjQ4FQBFuB40zZMchlXytSbPmj5lXwruJl91Kx4/lLa2kZQ6Nk
oFAUBvJ/ndaPeYvCb53vbK14mvKNCFm1kTkYg0T29i5fIsMpsi0fnGQQ0hn68XIS
Nmsrc2H9UC7I7GUx2r0nBtpTBGXHUUBAW4fS/xMgCiQl7gmvmrHqf0guqBk2Yb7x
YBBJT/MSfsP6TIfGjaItB+AtiD2oD9p0R/HhYPMH7BvH3gjtbg4sns1hO0WUeMdt
GsZxRxv1qsSLwHf0/JdLLtUKKwEFTd5Rd3BzeVVwBn8dIJUsZqT0izM4boAFJjqm
LXe2YwTja1i/KA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:35 2024 by rpki-client on console-fra.rpki-client.org