Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: RjXG8XCIrYZLxo83fS1DWWN+NXHfyj13rEA2UthFras=
Subject key identifier: C8:22:B1:EC:1E:84:AB:D0:57:8B:07:A8:FF:54:E6:E6:3E:87:67:1B
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 01936A470587DC9A53D0D55C62BA1CE0D697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0AAE
Signing time: Tue 26 Nov 2024 21:00:59 +0000
Manifest this update: Tue 26 Nov 2024 21:00:59 +0000
Manifest next update: Wed 27 Nov 2024 21:00:59 +0000
Files and hashes: 1: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: 39Yb9syhdwCQokZuz0XCSDmkNV+jDOCZJmOQdkoFdI0=)
2: l2vT3MoIQ1Laooa8K6w_pNtMBuM.roa (hash: DBMBQE+QFACFrYKBINIocPfEaNn2HCpAfN6Wqmpef/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:47:05:87:dc:9a:53:d0:d5:5c:62:ba:1c:e0:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Nov 26 21:00:59 2024 GMT
Not After : Nov 27 21:00:59 2024 GMT
Subject: CN=c822b1ec1e84abd0578b07a8ff54e6e63e87671b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:ca:2a:03:4b:4a:26:a5:fe:8b:80:44:09:
00:16:3b:44:46:fd:b9:89:8f:d8:31:f5:66:da:9b:
7d:7e:21:49:41:da:70:9d:af:80:8e:ac:c7:11:b7:
f2:90:6f:b1:a1:95:4e:8e:8b:aa:26:ee:87:b8:22:
26:15:41:2b:b2:e2:ce:74:41:be:3b:d0:8f:16:65:
1c:9e:b6:dc:38:8e:9d:32:a1:86:a7:7d:49:e8:63:
6f:69:ae:0d:f1:64:e3:40:ec:f3:cd:e2:5f:63:c3:
fa:4a:a8:65:33:96:ec:56:d8:58:85:78:92:d3:d4:
0b:01:dd:bf:cf:8a:15:62:9e:00:34:44:68:7b:61:
6c:5e:83:b0:b1:45:cb:c5:a6:23:77:81:07:86:57:
6f:46:e9:c8:16:58:c0:a9:12:95:5a:7e:90:9f:37:
04:49:dc:4b:4c:91:13:86:4d:11:ba:18:fd:c2:82:
97:3e:b0:37:dd:1f:bb:5e:3d:5b:b2:69:3b:ef:0f:
f3:bd:f1:8b:5a:f9:4d:26:85:71:fe:a9:13:8e:cc:
b1:9c:38:71:43:16:02:ed:21:ee:d3:bb:73:2e:59:
00:0b:a3:a7:01:09:fa:e8:c7:10:05:10:d3:c8:52:
a2:79:0b:32:68:52:91:04:97:1b:6a:ca:11:17:b0:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:B1:EC:1E:84:AB:D0:57:8B:07:A8:FF:54:E6:E6:3E:87:67:1B
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:aa:c3:1c:7c:f9:1a:15:94:cc:4f:6f:ed:88:83:4e:3a:88:
c1:ff:4a:0c:80:11:62:81:cc:81:28:4d:80:f4:63:31:74:17:
90:ef:ae:04:b6:ba:2f:13:0a:5a:6b:65:2a:8c:c4:a2:22:38:
63:f9:f4:e9:f2:83:ea:8e:bf:47:31:20:78:60:39:c3:6f:14:
df:ba:f0:5d:e5:ed:2b:d1:7c:f9:a0:b9:ca:04:d2:4e:e5:f7:
ef:5b:84:23:af:79:85:70:c8:49:e8:06:63:35:26:bf:dc:84:
c9:1f:8e:71:b1:ad:37:1b:c5:bd:e1:5b:c2:74:7e:c1:58:ab:
b0:f8:b2:91:c4:4e:23:4c:d4:65:28:75:a9:94:61:a9:6d:a3:
a8:06:b7:9a:f4:fe:6e:bb:09:2e:d4:37:68:c0:7a:f4:e9:53:
cd:e6:4a:a8:39:d8:5c:ba:f4:16:16:85:f0:9a:33:fe:8b:b0:
20:bb:cc:c0:af:bb:36:45:6a:0a:6b:56:3f:2d:c3:24:b0:c1:
1a:5c:51:24:88:85:27:66:1a:5c:36:e2:2b:3a:70:c6:ed:0e:
ae:d1:c6:d9:6c:00:88:84:b3:7d:c6:67:1c:ad:e0:49:cc:58:
08:60:8b:f9:69:40:5c:2d:16:7c:f0:fa:b8:87:34:d5:1b:2e:
7f:21:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:06 2024 by rpki-client on console-ams.rpki-client.org