Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: QNXyBIbEyF7/uZhKdcMr2dOXne50izf7kFTmt7Tpq4w=
Subject key identifier: 62:94:44:82:FA:CE:D3:6A:65:ED:9E:1D:B9:BA:FC:6E:66:65:D2:21
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 019352E2D5223D3FDBA397634F233AE176D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 08:00:17 +0000
Manifest this update: Fri 22 Nov 2024 08:00:17 +0000
Manifest next update: Sat 23 Nov 2024 08:00:17 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 0A67mt2HdZmaE9iCEsTix18L0YsmV4CE997uobwMU6Y=)
2: HFBLlsnJadQAfvcyZ0gmMiY4bN0.roa (hash: iX3/+P5YH/ps7sz738KaRTJdkb9mpsSocIC2j0Qjat8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:d5:22:3d:3f:db:a3:97:63:4f:23:3a:e1:76:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Nov 22 08:00:17 2024 GMT
Not After : Nov 23 08:00:17 2024 GMT
Subject: CN=62944482faced36a65ed9e1db9bafc6e6665d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:0f:b4:20:b4:f7:5d:bd:96:38:8a:9b:ab:
93:f5:c7:5c:09:aa:43:26:6d:ef:6d:98:12:bb:30:
de:68:50:83:a6:48:7b:f8:77:86:f1:e2:03:fb:ad:
ab:1a:89:23:60:60:c3:79:5c:66:ab:24:be:0a:a0:
4c:01:44:94:0d:9c:d9:84:ed:81:ad:4b:10:1e:21:
9d:3a:04:89:fc:43:ea:e0:20:84:e2:cd:26:b5:ad:
db:89:be:1b:66:39:55:6a:26:92:21:74:97:51:87:
58:28:90:7a:62:c4:af:33:1a:f7:9c:10:6b:89:37:
4c:88:d4:af:b1:be:dd:15:6f:0b:fa:ad:97:34:69:
99:01:38:c8:f0:98:05:bb:8e:e3:51:6a:aa:2f:4a:
c4:0b:03:72:a0:5f:bb:14:bc:dc:0e:e5:59:a1:25:
d0:e8:00:a6:e5:66:f5:a7:ab:d8:9d:06:d4:18:9c:
af:06:5b:84:c9:ae:21:e1:a7:18:04:6e:cc:8d:a7:
30:1f:8f:9b:7b:4a:a4:bf:c4:d4:fc:7c:76:9b:d7:
d0:4c:8d:8b:1b:29:24:c3:45:3e:83:4b:96:5b:07:
73:d6:c0:1b:bf:f7:38:90:dd:fa:08:99:75:86:b7:
d2:4e:4b:af:70:28:45:de:4b:ec:91:60:fd:db:c4:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:44:82:FA:CE:D3:6A:65:ED:9E:1D:B9:BA:FC:6E:66:65:D2:21
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a1:a0:ce:91:7a:bb:7b:0b:7b:72:16:69:fa:57:1e:8e:05:
29:80:a7:44:a7:e9:52:5d:ad:29:73:3f:16:2b:1a:a9:a0:cb:
7d:52:66:aa:c4:71:33:86:56:54:cd:b0:c9:8f:82:bb:18:50:
5d:ce:a4:fc:b8:6f:3c:73:8e:88:7d:a3:36:fb:96:95:71:80:
ba:e0:cf:72:2c:f8:da:d6:30:0e:12:41:ba:9f:be:8c:de:98:
e6:78:b1:f9:bb:79:0d:3f:1c:e4:f1:7f:ca:c3:31:fe:78:81:
19:0c:4b:0c:5f:ca:16:d6:8a:a2:62:19:4b:6c:a8:44:95:c5:
73:4a:8a:1e:7c:d6:ca:52:63:fe:2b:10:98:2d:60:b8:be:41:
99:76:85:d5:6f:7a:37:27:62:1e:45:82:63:a6:50:eb:98:d9:
b4:7b:87:6b:2b:af:cc:7f:15:33:8a:85:25:29:6d:48:08:12:
98:9a:6c:a7:10:74:22:e0:20:bb:8b:86:b9:ae:93:a8:e1:44:
24:e3:59:76:db:08:9e:65:d8:4f:25:27:05:e9:ee:10:f0:84:
eb:04:89:cc:21:4e:71:52:3a:1c:4e:e6:f9:5a:14:7b:27:76:
55:d9:19:42:4a:f1:06:f0:2e:18:49:49:23:b5:25:55:7a:6f:
c5:17:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:20 2024 by rpki-client on console-ams.rpki-client.org