Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: CRT+cWPFhmoAVl1UfsJyLklnGo9EOZsT7tkwzK2/t+8=
Subject key identifier: FC:94:D0:11:11:ED:F5:44:FD:13:49:E7:16:11:DB:F8:FB:1B:E6:D6
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0193568A711DCBCD10C2C58C61B1B63009ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:13 +0000
Manifest this update: Sat 23 Nov 2024 01:02:13 +0000
Manifest next update: Sun 24 Nov 2024 01:02:13 +0000
Files and hashes: 1: OGpP3k91_eu6jYBUtWCfDi2agdw.roa (hash: OSOYBXtCeUH4m2ECX3/5vlyuEwBOEOvx9SAdixJz4Ck=)
2: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: gzKnN3tmjRc04DwdasTO4mnJT5uKvinavdFn6J25Iis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:71:1d:cb:cd:10:c2:c5:8c:61:b1:b6:30:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Nov 23 01:02:13 2024 GMT
Not After : Nov 24 01:02:13 2024 GMT
Subject: CN=fc94d01111edf544fd1349e71611dbf8fb1be6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:58:43:0b:d2:eb:0c:9e:2c:5c:52:89:e4:
09:1c:18:e6:77:93:df:3f:31:48:cd:93:d7:4e:31:
e1:7d:50:d8:ad:b8:a6:41:d6:2c:99:51:f4:ce:f3:
e1:69:c2:7f:1d:54:88:d7:a3:2d:39:d2:24:26:d9:
3f:7f:09:96:6b:31:0a:18:0b:8d:53:20:ad:7d:b1:
52:dc:35:c2:23:b5:2f:88:cf:36:a8:62:cf:00:1f:
5f:ca:8e:5e:28:cd:fe:eb:12:d2:e6:af:67:89:ff:
16:6d:f7:71:1a:9d:4c:2d:ec:72:48:4e:c9:b8:07:
d6:cf:57:ea:9a:db:32:aa:d1:83:62:5c:65:2a:21:
8d:1a:c6:83:0f:f7:49:2c:4c:47:de:a3:e5:ce:a8:
6f:58:03:ee:cd:50:c0:9a:92:94:cf:c4:9b:f1:6f:
0a:76:ed:69:2e:78:20:d1:4b:37:c4:28:b9:47:f5:
34:b6:3f:f1:48:46:73:0f:0a:5e:c7:0c:fa:3e:1d:
25:c1:6d:19:ff:30:72:b8:4f:5a:0e:1c:77:d4:76:
65:32:88:1c:ce:09:21:43:b9:70:98:95:8e:97:d1:
3e:12:dd:74:7a:73:e1:45:d4:74:e1:b0:0e:40:51:
14:21:fc:9b:7a:1f:62:63:fd:37:43:c7:35:9f:6e:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:D0:11:11:ED:F5:44:FD:13:49:E7:16:11:DB:F8:FB:1B:E6:D6
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:eb:4e:b5:cb:13:0c:ea:de:8d:ed:0a:d2:19:28:58:c6:1e:
9c:07:32:a2:79:a2:37:8d:de:91:e9:88:d8:7a:87:1c:ed:57:
d5:96:fc:07:53:4d:d0:79:5f:f2:3a:16:63:30:7d:eb:6e:df:
ad:6d:61:92:1d:3d:91:45:40:b7:bf:c8:8e:bb:0a:72:22:45:
3f:e9:01:47:e9:cf:8b:48:ff:07:74:00:38:1c:f4:60:fd:11:
ad:d4:0b:11:5a:10:a0:39:65:d2:ab:b6:d3:37:0a:c1:62:9f:
e1:7f:90:df:8c:e2:aa:de:27:3c:c7:62:eb:c6:0d:eb:0a:5b:
dc:7b:b8:37:a3:43:11:36:a3:c2:0e:58:8e:49:96:0f:ec:b9:
a5:99:89:f5:10:e6:d2:f3:bb:fa:86:f3:f0:77:e3:78:38:d4:
87:32:23:93:32:01:4e:90:c9:c6:6b:ac:a9:34:24:2d:23:fe:
e3:91:b3:a0:31:71:e5:33:c5:4b:c0:d8:1b:20:f4:d0:8e:70:
97:92:8d:9f:01:c3:1c:0f:5c:96:48:b6:60:12:41:f2:82:45:
70:4d:2e:d8:74:80:84:b7:73:5c:4f:97:81:31:c4:60:e0:cf:
ad:74:38:7e:14:40:6d:c2:e4:be:f2:1d:26:11:d7:24:5e:7b:
8b:28:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:39 2024 by rpki-client on console-fra.rpki-client.org