Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: El8TCTCw0P2F3tsJww+mvF635rZrAD9mp3rfDaCIQzg=
Subject key identifier: CA:32:2B:F9:2E:A7:20:35:64:80:C5:F4:7C:06:AD:58:D1:94:A3:F3
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 0193553F1C50FDD374072A6DF28BD63AFC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 19:00:19 +0000
Manifest this update: Fri 22 Nov 2024 19:00:19 +0000
Manifest next update: Sat 23 Nov 2024 19:00:19 +0000
Files and hashes: 1: 1-mLdgHivLO7VeKn3KgzP_Q35Lzc.roa (hash: k/9VsZX8Uk0Jq6vYSIxCJXowC3Un/jJKVrOZPjXOCqA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: JMnbuKpDYImU/YrPsyi/BIzVcyoqX7Pgk+qkwP4iEzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:1c:50:fd:d3:74:07:2a:6d:f2:8b:d6:3a:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Nov 22 19:00:19 2024 GMT
Not After : Nov 23 19:00:19 2024 GMT
Subject: CN=ca322bf92ea720356480c5f47c06ad58d194a3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:85:32:2a:01:8e:56:f4:b2:d7:e1:82:2a:
42:38:26:35:67:ba:cd:58:ff:4b:eb:01:14:35:ef:
1b:ea:3c:96:ce:d5:6a:46:7e:9a:f2:56:8c:25:3a:
a6:43:db:aa:03:86:2d:29:71:f3:61:2b:46:ae:86:
fc:bc:bd:b1:9e:e0:bd:35:0a:ff:44:c0:af:33:a1:
be:ba:28:7f:90:26:d6:f6:69:26:ed:c3:04:df:d8:
9e:20:b3:9d:3d:f8:70:b7:f2:f7:60:0c:42:ac:e0:
de:f0:09:ea:d4:d2:36:d8:c6:0d:ed:a5:c6:eb:10:
70:fa:6d:69:b4:03:26:cf:a9:90:b9:7c:c9:77:1f:
5e:fd:ab:fd:53:66:8d:c8:17:31:a3:f2:b9:31:28:
13:43:d1:58:77:a3:50:ec:48:4b:4e:d0:b0:97:53:
97:02:81:c6:c3:6c:33:0c:2f:c7:02:a9:c5:dc:55:
60:20:88:78:f8:c6:49:21:75:1c:d8:a0:d7:92:26:
5d:33:8a:61:65:ce:00:8f:a8:d0:f4:aa:71:80:b6:
57:53:0d:40:18:b1:2f:91:47:01:c2:17:10:58:8b:
aa:14:e2:7a:df:75:9a:bb:9a:ec:17:82:6b:5c:3f:
f4:37:26:5c:8e:c6:fa:66:b0:5f:db:26:f3:2f:ba:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:2B:F9:2E:A7:20:35:64:80:C5:F4:7C:06:AD:58:D1:94:A3:F3
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bc:c8:c3:bc:46:47:4d:fa:33:56:7f:4c:58:38:ec:8b:ad:
62:33:f7:ac:94:0d:c7:e2:dd:b1:85:10:3a:81:cc:9e:36:01:
ee:c2:88:07:71:29:0a:b3:0f:d7:8d:e2:e4:52:9e:95:b9:66:
94:e1:7d:b5:f9:9a:f2:b2:44:78:7b:70:1d:14:58:9d:12:9a:
55:43:af:f5:dc:e0:10:96:d1:55:11:e6:44:c4:3f:77:73:7a:
b0:1a:a0:4c:cf:34:38:fc:e5:de:73:0f:46:6d:85:0d:71:b6:
0c:0b:ee:74:70:60:63:1c:2f:66:a8:9a:b5:55:02:af:f3:0e:
80:29:f6:4a:af:48:ed:dc:d8:7a:d1:1d:c4:97:e2:d2:87:8a:
42:9d:00:a3:39:7d:ac:ac:f9:ee:74:45:dd:19:50:94:cf:4b:
9d:79:28:e5:dc:af:72:b4:74:8f:b9:63:0f:8d:2a:65:30:3e:
b9:69:59:75:cd:74:3b:4f:4a:7b:26:82:1d:74:47:89:d1:26:
3a:b5:f3:78:e0:50:cc:54:2f:b5:64:14:57:f6:9b:c9:28:67:
cb:96:c7:35:45:c1:34:79:39:bc:44:17:ee:99:6f:9e:58:bc:
3f:d1:8d:ad:e8:9b:b0:27:a7:ae:09:6a:ec:c3:a4:9a:95:80:
a5:e6:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:34 2024 by rpki-client on console-fra.rpki-client.org