Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: n3CHw+zfxQNvfyvB4bwF6FHbW+e6hoifJU0deC1ys4U=
Subject key identifier: 34:F6:2D:AF:3A:6C:FA:D9:7F:5D:43:61:E8:3D:54:64:12:73:36:F5
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019364B2250166726BDAC3033EEDF3779B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 0EA3
Signing time: Mon 25 Nov 2024 19:00:16 +0000
Manifest this update: Mon 25 Nov 2024 19:00:16 +0000
Manifest next update: Tue 26 Nov 2024 19:00:16 +0000
Files and hashes: 1: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: bO1ekhb9Up5F3Bgx1vKWLZSCme9MRB3ELZ+CceENEtM=)
2: Bv3gSC12WwxU8y-w7tXNQnCENYE.roa (hash: eUYfiqlCD6Yt1UhDa1q8htxWoOgG0aToEcxV1Uu2V3g=)
3: febjGQxMyYhRFClWBw76UpIOKDk.roa (hash: Pru0+2cek1/ZfzN5siC5gQZ6HMICgxerr4wa8SAo64I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:25:01:66:72:6b:da:c3:03:3e:ed:f3:77:9b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Nov 25 19:00:16 2024 GMT
Not After : Nov 26 19:00:16 2024 GMT
Subject: CN=34f62daf3a6cfad97f5d4361e83d5464127336f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:95:f1:2e:36:86:71:70:7a:3a:92:20:41:
b5:85:a4:90:84:c0:41:d5:ad:30:16:26:2f:80:7e:
3b:7b:b2:3d:6e:42:4d:f0:87:f2:0e:a7:67:4a:08:
57:45:8e:d7:6a:d8:fc:ea:6f:9a:5e:2f:8d:42:48:
d3:12:a6:78:70:11:33:24:2a:1c:8e:f2:cf:b6:de:
98:75:99:d6:27:24:72:b4:76:06:b5:f0:11:b9:ce:
6e:5e:66:92:8a:8e:54:22:af:4c:f1:33:aa:c4:35:
38:da:e5:1a:bd:06:4b:67:c5:a0:2b:9c:de:41:08:
80:2f:19:ed:67:72:c6:64:1c:6c:b0:43:d8:da:62:
81:0b:6d:14:a5:6b:86:20:be:7c:8d:33:71:76:ea:
a2:90:eb:3f:d2:e6:38:d5:93:05:d7:59:8a:b5:59:
1d:d2:a3:18:e3:ba:d3:bd:b7:e8:67:9e:54:3e:fb:
3a:6e:a8:3a:fe:4b:79:8d:41:d9:c1:10:5a:1b:f8:
5b:15:a7:35:73:9f:62:71:9b:c7:fc:40:40:9c:fe:
32:4d:b0:9b:86:41:3a:9d:11:2d:b9:e8:28:90:a2:
68:33:f9:8e:a2:4f:8b:d7:3e:a4:ea:90:de:bc:ec:
1e:65:e1:7a:41:00:b2:12:c6:4b:b8:8f:5a:9f:b3:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:2D:AF:3A:6C:FA:D9:7F:5D:43:61:E8:3D:54:64:12:73:36:F5
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:49:12:f0:23:26:f4:3c:99:83:20:94:b3:ae:64:90:05:
51:fe:59:cc:a4:b8:03:e2:db:cb:a5:d8:41:d0:2b:89:e5:9e:
ac:c3:84:34:fd:47:49:4b:6d:f4:e1:78:ae:74:d1:ff:97:e7:
88:d0:1b:f8:8f:1a:ad:1e:29:40:57:43:9e:83:48:f2:00:e4:
99:7c:36:ae:6f:e2:24:f9:cf:2c:9f:60:a6:c6:de:92:d9:43:
93:b1:f7:8d:8f:5c:03:c3:6d:84:b1:d6:f3:38:dd:df:d3:70:
41:38:a3:c3:e9:d0:61:94:ff:20:99:a7:b6:50:f9:64:b5:f8:
5c:a1:b2:1d:82:b3:4c:a7:f0:32:21:14:90:d7:1e:7d:43:26:
c1:87:01:2c:42:40:73:a4:0c:79:2b:2e:4b:fd:13:4e:51:10:
8f:88:bc:f7:1a:01:7b:90:b0:42:91:f9:46:cc:1a:17:74:92:
46:8c:01:99:7d:b7:e3:e1:40:3d:9e:5c:b9:53:25:f2:41:5e:
d1:fd:2d:1d:87:4e:27:b1:c6:43:b2:9f:82:86:58:67:88:be:
75:c6:1e:e0:e1:7a:59:4c:60:4e:2c:4c:5c:fd:41:9c:4b:01:
bb:e1:73:8e:a1:3a:95:3c:97:6e:41:d2:a9:86:2a:79:f8:a2:
00:b5:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:51 2024 by rpki-client on console-ams.rpki-client.org