Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: FyVkkbu6Xh1PV8hw76fH1JIvC1GfPQieyKvaHgDMj1w=
Subject key identifier: 9F:BA:22:FA:A5:80:3C:48:96:DD:C7:5F:58:19:57:34:6A:34:7E:B9
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019352E2EFBD6F066B1FC07FFA732416C941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0CEF
Signing time: Fri 22 Nov 2024 08:00:24 +0000
Manifest this update: Fri 22 Nov 2024 08:00:24 +0000
Manifest next update: Sat 23 Nov 2024 08:00:24 +0000
Files and hashes: 1: AiYm7t7CFJCCh-gtJ_95GOBirbA.roa (hash: Pbxhs1RuGkHbbayXjy3dZj6glZTc8vTdbV0TVlS1lJ8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: H6sjL5JXWxy+nsHB8gBsbpba2iyPcrMFBNPTIAJHVeQ=)
3: xlk5WLUKvvnZlr2GcS23fUa28RA.roa (hash: A6ernn7bfEVrPH9aaGZtiGGGFKibV6EMTmoGAMzQgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:ef:bd:6f:06:6b:1f:c0:7f:fa:73:24:16:c9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Nov 22 08:00:24 2024 GMT
Not After : Nov 23 08:00:24 2024 GMT
Subject: CN=9fba22faa5803c4896ddc75f581957346a347eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:b7:5f:40:56:60:49:eb:21:04:5b:03:60:
c2:ec:f5:67:11:c6:69:b6:0f:c3:01:ff:4c:fa:ad:
24:27:fb:29:3f:f6:0e:40:0f:7a:37:1c:40:7a:02:
c7:95:4c:04:e1:66:08:b4:ce:93:61:c9:b6:45:dc:
29:13:22:4c:46:20:d9:00:6b:7b:3f:78:ef:c9:0c:
ae:0f:e3:57:2d:67:54:32:fb:12:5b:32:93:ed:b2:
48:f9:82:20:62:9c:11:68:b4:ce:83:bd:8b:3a:2e:
7a:5e:ea:b9:26:df:ff:9c:b6:12:a2:50:01:ef:9b:
b7:9f:9b:bc:bd:9c:5b:e7:f4:1b:b6:17:f5:59:74:
22:3d:38:d2:37:47:13:66:c1:88:d7:bf:4b:32:a0:
61:0c:c7:27:4b:21:8f:29:14:79:0c:e8:f5:9f:05:
cc:a5:83:42:b9:24:00:5c:59:ec:c1:08:56:78:55:
f5:63:94:6d:d0:6f:48:1f:e8:ef:25:ed:f7:6c:df:
65:1c:35:c6:dd:9f:cb:0e:29:47:ac:0d:b2:18:e6:
11:5f:04:bc:af:64:cb:6f:3c:88:08:dd:b6:80:e6:
a0:de:41:7b:30:72:6d:fa:a0:f8:34:ef:dd:5e:87:
75:69:f4:52:d0:c9:3b:fc:83:df:96:57:06:d8:30:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:22:FA:A5:80:3C:48:96:DD:C7:5F:58:19:57:34:6A:34:7E:B9
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:aa:88:0c:4d:8a:45:6f:f5:e6:22:90:8c:3b:de:df:80:68:
34:5c:66:6b:3f:d4:69:62:e0:4c:07:2b:f8:a0:26:28:12:b7:
2a:d7:c8:f4:17:d6:e5:b0:74:c2:df:1d:cd:f9:1e:12:87:df:
c7:38:0e:e8:e3:82:1b:55:73:1d:36:a1:1f:ad:87:de:cd:95:
5d:03:40:24:dd:2c:55:13:c7:08:04:02:2a:95:3e:31:1c:be:
4c:41:6a:e7:9e:32:5b:7b:85:ff:c1:36:c8:6f:a8:2e:52:18:
5e:b4:2f:07:fa:7d:70:4e:6c:fd:f1:45:0f:f4:12:b6:ca:8b:
ca:0e:40:2f:3b:c8:57:ac:20:94:70:ff:ac:e4:d2:96:78:5c:
bd:cb:e4:b9:73:a7:f4:51:0c:43:9e:15:f1:d8:d1:90:6c:00:
97:c9:03:e1:d5:40:66:47:dd:4e:f5:96:e9:3b:10:41:d0:fd:
e3:d3:e0:73:14:eb:ef:fa:3b:ea:20:fe:60:bb:bf:9f:77:b5:
18:87:15:2d:2c:98:8f:0e:83:22:8b:66:78:22:10:f2:1e:e2:
2d:cb:5c:6c:ea:91:7e:a6:8c:f7:f5:be:d2:85:e7:34:39:0c:
65:d2:65:b7:ba:7b:78:e9:c0:90:43:be:31:92:3b:15:d4:b6:
79:85:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:48 2024 by rpki-client on console-ams.rpki-client.org