Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: as3I61zhudbD9RFHH7noGGDX1OJWnfYWxg8xV5AcsgA=
Subject key identifier: B9:FC:00:EF:A0:9F:6B:E4:98:40:A2:83:B6:BE:D6:19:7D:BE:36:C8
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 019356BFB76D211FFB474A875DEB8702A5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 0329
Signing time: Sat 23 Nov 2024 02:00:24 +0000
Manifest this update: Sat 23 Nov 2024 02:00:24 +0000
Manifest next update: Sun 24 Nov 2024 02:00:24 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: tciRbQX+kXheshKtcngolAutfz8jEIsimdgSFhCEx1Y=)
2: hvcqH8YkM67Bj-RkxkXRe199Vdo.roa (hash: 8UuKl5yv1AjmimUfUpsL495/E4e/2SOqnMxaA9aJVas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:b7:6d:21:1f:fb:47:4a:87:5d:eb:87:02:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Nov 23 02:00:24 2024 GMT
Not After : Nov 24 02:00:24 2024 GMT
Subject: CN=b9fc00efa09f6be49840a283b6bed6197dbe36c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:91:c8:12:23:e0:db:d9:6d:11:18:9d:9e:
6a:59:fe:cb:4a:71:29:cf:de:3e:9a:19:08:a5:f6:
0c:f9:75:11:f2:85:66:15:e6:e2:2a:c0:b5:64:2e:
d9:e3:79:43:af:b9:ae:0d:98:9d:6b:c8:93:da:9c:
14:79:e4:de:ec:5d:bc:89:55:d1:f7:78:0f:e3:37:
0d:b5:87:2f:be:c6:72:37:52:33:07:4a:a0:53:38:
76:70:3a:e7:d2:a6:78:1f:88:e6:3e:d6:d8:c5:6c:
13:45:69:27:f3:90:8d:9c:78:f0:b2:3e:ef:00:de:
2c:bc:57:3c:64:48:5b:ff:49:66:f3:5e:e1:b6:35:
81:1f:be:a3:c0:1e:51:46:f8:44:78:f0:78:53:ec:
9a:48:56:2b:ff:a7:fb:16:ca:b5:07:60:5d:fe:88:
32:12:eb:82:a6:2d:bb:c2:9b:f2:1c:31:df:58:c8:
24:a3:9d:80:c6:e0:5d:15:77:db:0b:93:62:f7:bb:
5a:cd:fe:0f:39:57:57:ab:3b:30:ac:fe:fd:e0:87:
4c:a9:c7:ab:ed:a8:b7:97:c7:7d:90:26:5f:2a:96:
73:0b:25:fc:61:95:c3:4f:05:f2:26:29:f1:e4:9e:
e0:a0:3d:c1:d7:dc:a0:f3:e6:e1:5b:15:ab:09:31:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FC:00:EF:A0:9F:6B:E4:98:40:A2:83:B6:BE:D6:19:7D:BE:36:C8
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9e:de:f5:17:35:75:7e:4d:99:7c:9a:2d:27:0e:64:78:35:
8f:14:6b:6b:0a:7e:fc:f4:c1:39:57:df:0c:c7:19:91:e6:39:
7a:02:16:35:19:69:af:cb:ed:b5:64:76:55:42:2e:50:fd:82:
c7:78:22:ad:de:ad:73:a5:2a:f8:a5:99:cb:05:8b:76:da:90:
e6:9e:78:74:97:49:69:6a:70:69:a0:6a:3d:61:54:c5:62:84:
30:43:62:cf:c1:2e:a7:5a:e4:04:53:41:c9:0a:de:ac:11:cd:
0b:1d:23:68:9a:54:4a:28:14:c0:94:12:77:5f:d0:a2:6c:17:
30:35:b8:8e:0f:92:32:98:71:37:23:71:ef:b6:ce:da:69:d4:
db:a8:c1:18:ce:da:dd:20:33:70:fd:9c:52:8a:a7:49:c2:12:
4b:81:cb:d2:e2:1d:77:cd:dc:52:6b:8b:b8:2d:ca:40:8f:b8:
ce:12:12:6a:4e:91:3f:dd:6b:72:96:e7:8f:2a:6b:20:43:f4:
d2:6f:0b:b4:c6:0b:a8:2d:ff:ed:81:fe:b3:1a:ba:a5:6c:95:
56:17:06:a1:e1:9b:1f:85:b6:7e:88:09:a0:a6:2e:a8:12:f1:
a6:8d:de:12:a7:b0:91:36:bc:28:d2:bf:d6:d5:a9:bb:a0:31:
1d:3f:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:09 2024 by rpki-client on console-fra.rpki-client.org