Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: 3BVo++3q3E5j8eKeaEKueORx37xMfbSk/I77lkJYQ/c=
Subject key identifier: A4:F8:23:E7:0C:97:D2:31:1A:00:91:C4:18:2F:58:8A:8B:ED:4E:0B
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 01936AB4AFC9AA2770C632356A0F379F0BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 0460
Signing time: Tue 26 Nov 2024 23:00:46 +0000
Manifest this update: Tue 26 Nov 2024 23:00:46 +0000
Manifest next update: Wed 27 Nov 2024 23:00:46 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: TtHqEpD94sX50EF6HmDtv43hocEI8QVSVJG+17moX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:af:c9:aa:27:70:c6:32:35:6a:0f:37:9f:0b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Nov 26 23:00:46 2024 GMT
Not After : Nov 27 23:00:46 2024 GMT
Subject: CN=a4f823e70c97d2311a0091c4182f588a8bed4e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:a8:4d:4a:e9:e0:42:7d:f2:82:53:62:27:
b9:76:e6:a3:e5:fd:0d:68:98:0f:8c:93:d4:a8:b9:
cf:6f:1d:84:65:31:19:de:1a:f0:92:8b:cc:03:c1:
a6:a4:92:28:a3:6b:18:b5:f9:30:9b:8a:9c:62:87:
5d:20:29:55:80:03:3b:6e:d0:31:43:3a:66:15:54:
06:77:45:d5:25:02:d3:94:57:f3:c7:0a:4f:09:2f:
f2:4e:ac:c6:ab:52:e7:f1:f5:7f:e8:59:59:94:01:
bd:8f:0f:db:a5:c2:70:ab:09:2d:60:d5:fe:7b:96:
00:e7:09:03:29:6c:c2:1a:d3:0b:c2:af:a4:1b:b9:
c3:99:9b:4f:7b:86:80:ca:c2:69:ce:5e:48:b8:6b:
a7:91:fc:99:7e:98:03:c7:1d:06:e9:93:19:7a:26:
2f:87:c9:a8:a5:67:7f:69:cb:4e:37:2b:e1:ec:78:
8e:37:0f:58:cb:b5:dc:55:00:11:b3:87:31:7b:ea:
31:92:93:2a:30:b1:f2:d5:47:c2:0b:63:8d:be:dc:
05:92:c8:fe:a8:ae:3c:5b:e0:93:48:b1:f2:9d:20:
4d:ec:84:3b:3b:2f:6a:c7:7e:70:63:2b:ad:e4:d4:
b8:cd:ca:d0:52:0a:41:87:37:ef:99:e6:ff:44:ed:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:23:E7:0C:97:D2:31:1A:00:91:C4:18:2F:58:8A:8B:ED:4E:0B
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0d:a4:f9:d6:ee:11:27:7d:96:23:e6:0c:f4:80:56:69:bb:
69:06:2e:6e:27:d6:96:63:24:d4:1f:da:a8:1b:04:66:a1:6b:
bc:cd:f3:7f:7d:89:66:88:98:4c:45:c1:50:a4:68:77:11:6e:
9a:eb:5e:2a:bb:7e:b9:61:60:69:91:68:63:4a:67:5e:c0:64:
38:da:71:25:84:70:f0:5c:c8:18:b8:a6:f4:91:0e:ef:99:91:
a4:7d:ef:4a:2d:50:52:9a:d8:ee:71:dd:d9:ec:86:6b:89:0b:
33:b3:c2:9e:39:b1:9c:6e:3e:20:cd:d3:44:ff:24:27:99:47:
2f:84:35:62:51:51:de:00:bd:61:b4:c0:d9:83:c5:0b:b5:9b:
fa:f7:17:61:11:81:be:9d:ed:36:35:9e:2a:68:6d:8e:60:dd:
a0:91:35:0a:f7:0d:bc:29:ef:ad:6e:b8:c8:cc:36:76:e4:9a:
0d:51:87:66:38:32:83:b7:58:8a:5c:2e:d5:44:42:7a:64:3d:
9d:78:09:32:5d:f9:cf:ce:8d:e4:16:eb:6c:72:fb:d6:5b:7e:
4f:04:ea:74:7a:2d:ab:06:69:42:04:e4:0f:50:6a:3d:8d:c6:
a4:a6:4c:07:7f:89:5c:7d:bc:a1:00:53:ee:03:cf:2b:6f:42:
30:bd:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:17 2024 by rpki-client on console-fra.rpki-client.org