Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: nmAK96NNfQSfJ2/lTsXxWAHSzeObu7NaMHVusTZ8B7o=
Subject key identifier: 36:E0:34:02:A4:76:36:EA:8A:60:E4:E5:51:7B:DA:03:AC:09:87:27
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019357D2B66381E94DD13C78FAFD7025F5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 07:00:47 +0000
Manifest this update: Sat 23 Nov 2024 07:00:47 +0000
Manifest next update: Sun 24 Nov 2024 07:00:47 +0000
Files and hashes: 1: NhqlXNnUEWOXpgvolT5yHz-Mj7g.roa (hash: 8PKabQ+KxvNCCMJRwVpvRums0/QSKKdNFH0w4OP/lbo=)
2: Rw_EesXyvQZZNO-MCMnSGkNQrYY.roa (hash: GgBl+gsGUkdhCD3DmLc2iKsb4H7C0ljO4ybG7RQj27I=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: Cx1Nt2O2ApHtFuX65VWA1OA/5vc+e8FaBYcQTzW7J1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:b6:63:81:e9:4d:d1:3c:78:fa:fd:70:25:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Nov 23 07:00:47 2024 GMT
Not After : Nov 24 07:00:47 2024 GMT
Subject: CN=36e03402a47636ea8a60e4e5517bda03ac098727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:68:9c:7b:15:77:d3:38:64:c4:81:2d:e7:
c9:24:ad:0f:34:70:5f:4c:f2:13:d1:69:00:36:34:
39:be:fa:0b:f3:97:2c:0a:e9:1f:80:62:20:de:83:
65:6b:ad:0b:6c:8a:0a:d8:28:42:d9:c0:28:3f:52:
f6:94:87:ae:66:05:9e:a1:01:09:b3:0a:a9:be:33:
f6:b5:0a:a8:7c:5a:c2:2a:cc:73:f8:cc:6f:a4:a3:
41:1e:ff:00:c7:2b:4d:47:30:c2:39:93:6f:27:2f:
86:78:a4:51:2d:31:f3:8c:f5:67:d8:62:6e:52:0b:
62:40:df:11:1e:30:f4:45:ef:23:b1:7b:3a:0f:36:
10:5b:51:c4:fd:3f:8a:7e:8d:7d:aa:5a:81:dc:72:
40:b8:6b:97:15:bb:da:8d:42:39:42:9d:ef:ce:a2:
35:a2:54:7e:c3:c9:4c:26:74:bd:e8:c2:30:b3:78:
4b:10:17:b9:76:13:0c:42:1b:2b:17:ce:a1:8c:6b:
39:fe:32:5c:5c:70:a4:1d:5f:fa:d2:3d:58:fb:0e:
f9:14:73:10:2e:81:d3:92:1b:08:03:75:75:71:3c:
3a:5e:27:9a:d6:75:7f:2d:01:ce:f9:cb:53:ed:2a:
81:61:99:c3:5c:ac:36:61:b1:84:5d:a7:1e:ba:fc:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:34:02:A4:76:36:EA:8A:60:E4:E5:51:7B:DA:03:AC:09:87:27
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:1c:1c:23:f6:ec:dd:05:eb:bb:4b:3b:a6:d8:0e:9c:24:
fb:cf:43:e7:5b:24:fc:90:e2:b2:ff:c5:13:25:54:93:a1:4e:
c4:e1:64:39:17:b9:b8:19:10:68:69:02:d7:7e:20:01:37:93:
2b:d5:f8:de:b5:1a:7d:4d:8f:9e:45:bd:53:d3:84:ac:89:fb:
15:27:ae:50:d3:f7:2e:1a:d2:89:38:53:d7:b4:2e:76:03:f5:
e7:d5:23:cc:f1:fb:e5:ba:ed:ae:a7:33:48:67:73:46:94:59:
3a:4d:d4:6c:6b:2c:ec:f3:8f:80:43:9a:20:b0:f1:18:d6:ff:
8f:6e:54:c4:18:8b:fc:dd:b4:66:91:e1:ce:cd:c5:eb:bf:9d:
3c:3a:d1:7c:27:b1:08:bb:60:c0:56:fa:cb:4c:eb:e4:ef:fd:
bc:1f:d8:7a:1a:5d:b1:e2:e4:f9:10:22:2f:47:0f:03:93:29:
ee:de:55:91:e1:41:b0:fa:22:5a:e5:04:1b:00:34:47:08:ec:
e1:27:31:b0:a2:24:ba:de:7b:3c:49:c3:33:56:ae:23:44:99:
57:f7:d9:ba:95:7d:df:b1:d7:ba:8a:04:fc:99:c8:36:af:89:
e1:ec:49:5b:25:fc:b9:68:a5:c1:c2:27:a5:26:39:79:d2:c7:
ec:bd:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:44:59 2024 by rpki-client on console-fra.rpki-client.org