Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: /IExnsRLgGwYZL4Dw4cZbrPryUeyFBQGoxqHQ8BF3vU=
Subject key identifier: DC:75:88:EE:5B:6C:62:F4:BA:C3:4F:C9:2B:36:FD:20:FA:A7:3F:A6
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 0193549C122CEA5C6CA759FD39AF6DA92B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:02:14 +0000
Manifest this update: Fri 22 Nov 2024 16:02:14 +0000
Manifest next update: Sat 23 Nov 2024 16:02:14 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: Vv2x0thipAGLwy/Cy/OPq1dZfVSUm1Fba39LXYsdHMM=)
2: h-agl-nn-RYaXQsR1RlcsPU7MBg.roa (hash: HAXg0eWi0I6Qj/d0VEPEsXLgnx+ATW5qZpnKGGRFZ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:12:2c:ea:5c:6c:a7:59:fd:39:af:6d:a9:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Nov 22 16:02:14 2024 GMT
Not After : Nov 23 16:02:14 2024 GMT
Subject: CN=dc7588ee5b6c62f4bac34fc92b36fd20faa73fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:d7:93:1f:ca:24:99:6b:23:75:39:4a:c2:
0e:50:74:77:60:03:65:e8:85:14:e0:c6:c1:42:ab:
c7:a0:fa:93:65:89:00:e1:a4:1d:72:fd:cd:3a:d3:
74:f1:cb:ad:02:53:d2:3d:d7:26:d2:5c:e7:d2:80:
ce:58:87:1e:a7:35:a1:24:be:df:83:38:99:1d:70:
f0:85:7f:e3:94:82:f7:9d:04:ec:8d:fc:76:fa:52:
3f:f5:b4:10:ed:62:6f:5d:f8:b8:ec:88:e9:14:53:
0c:1a:02:e7:e9:21:d6:b0:16:7c:12:df:c4:ad:b0:
bb:ff:58:20:a7:92:4a:7b:9a:6a:8b:bf:93:67:0c:
a7:df:90:8b:ae:f8:ba:58:6f:af:b8:96:54:89:4c:
9b:be:50:9f:9f:3d:ba:3c:7a:2a:57:9d:91:cf:e3:
f4:84:8e:eb:5a:4c:7d:13:45:c6:a5:ae:97:43:21:
d3:1c:60:8c:74:62:e9:c2:a9:1f:72:28:ab:ed:78:
da:2f:ce:c0:12:45:4b:93:7a:d7:ae:f2:ac:37:b6:
36:9f:e9:3e:88:96:f7:48:c8:2f:eb:94:ad:98:d1:
2f:ca:bc:47:99:2f:c9:7f:16:cc:01:05:95:bd:62:
03:a0:d1:40:3d:97:81:95:71:a6:47:5e:43:19:96:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:88:EE:5B:6C:62:F4:BA:C3:4F:C9:2B:36:FD:20:FA:A7:3F:A6
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:76:1c:70:03:7b:7f:bd:e8:59:ad:d9:9f:9f:4d:53:62:
8b:06:05:7b:ad:a3:60:77:d0:6a:36:ae:5c:c5:cf:cf:c5:4d:
c8:38:35:9a:bc:fa:23:d1:fb:ac:22:8a:46:d0:64:ee:5a:ea:
5a:20:ea:14:dd:cd:4b:da:b5:c1:49:d3:07:1b:42:5f:fe:2d:
a8:ea:46:c9:47:af:a0:46:0e:b2:e0:7a:ad:8b:b2:43:5e:8b:
e8:2a:64:5e:91:80:41:35:b4:ff:75:93:6b:6e:94:57:4e:57:
fa:5b:4c:99:6a:fe:0f:17:f7:e4:4a:65:22:94:ef:de:26:a4:
d1:1d:07:db:8c:73:98:10:9f:40:32:c2:2d:b0:68:65:b6:47:
8b:eb:0e:e2:b3:75:ea:8c:83:8b:47:86:ec:29:ae:e2:dd:d9:
27:a3:d8:e4:c3:93:b8:b9:a8:9e:3a:cf:a3:e2:23:e6:15:d4:
45:99:97:5e:54:24:af:93:18:92:45:95:04:c5:5f:e4:51:32:
9e:ac:e7:3a:3b:37:17:76:26:7f:df:3f:ca:a5:97:ac:9d:3f:
ec:1b:ab:d2:eb:ce:5d:be:4d:3e:5e:37:87:cd:ed:49:01:94:
6b:60:19:31:eb:ec:0e:45:33:3d:99:0c:78:dd:3a:97:a9:3c:
9f:ee:b7:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnBIs6lxsp1n9Oa9tqSs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjQxMTIyMTYwMjE0WhcNMjQxMTIzMTYwMjE0WjAzMTEwLwYDVQQD
EyhkYzc1ODhlZTViNmM2MmY0YmFjMzRmYzkyYjM2ZmQyMGZhYTczZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3rXkx/KJJlrI3U5SsIOUHR3YANl
6IUU4MbBQqvHoPqTZYkA4aQdcv3NOtN08cutAlPSPdcm0lzn0oDOWIcepzWhJL7f
gziZHXDwhX/jlIL3nQTsjfx2+lI/9bQQ7WJvXfi47IjpFFMMGgLn6SHWsBZ8Et/E
rbC7/1ggp5JKe5pqi7+TZwyn35CLrvi6WG+vuJZUiUybvlCfnz26PHoqV52Rz+P0
hI7rWkx9E0XGpa6XQyHTHGCMdGLpwqkfciir7XjaL87AEkVLk3rXrvKsN7Y2n+k+
iJb3SMgv65StmNEvyrxHmS/JfxbMAQWVvWIDoNFAPZeBlXGmR15DGZY7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx1iO5bbGL0usNPySs2/SD6pz+mMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/Z2HHAD
e3+96Fmt2Z+fTVNiiwYFe62jYHfQajauXMXPz8VNyDg1mrz6I9H7rCKKRtBk7lrq
WiDqFN3NS9q1wUnTBxtCX/4tqOpGyUevoEYOsuB6rYuyQ16L6CpkXpGAQTW0/3WT
a26UV05X+ltMmWr+Dxf35EplIpTv3iak0R0H24xzmBCfQDLCLbBoZbZHi+sO4rN1
6oyDi0eG7Cmu4t3ZJ6PY5MOTuLmonjrPo+Ij5hXURZmXXlQkr5MYkkWVBMVf5FEy
nqznOjs3F3Ymf98/yqWXrJ0/7Bur0uvOXb5NPl43h83tSQGUa2AZMevsDkUzPZkM
eN06l6k8n+63sw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:31 2024 by rpki-client on console-ams.rpki-client.org