Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: 2lDS7tNXf67O1UBnzCqjLz4mI9gETSb6kRG6VSrxf5o=
Subject key identifier: 13:1D:21:03:5C:88:69:C7:A9:24:1C:A2:52:3C:16:BB:8D:66:90:AC
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 019357D288A82F4A9242C34015CB36A5FC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0A4F
Signing time: Sat 23 Nov 2024 07:00:35 +0000
Manifest this update: Sat 23 Nov 2024 07:00:35 +0000
Manifest next update: Sun 24 Nov 2024 07:00:35 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: EPFGFREbyO6epdtgW1ApjzjA7K4pWqMsDLwp1Ri0Gus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:88:a8:2f:4a:92:42:c3:40:15:cb:36:a5:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Nov 23 07:00:35 2024 GMT
Not After : Nov 24 07:00:35 2024 GMT
Subject: CN=131d21035c8869c7a9241ca2523c16bb8d6690ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:3a:96:93:c8:cc:ff:32:7f:bb:c7:d8:d6:
64:3f:a3:52:e4:78:0a:70:bd:e6:c1:3d:82:ab:b8:
29:ce:2c:dc:7f:13:cf:05:48:e7:df:eb:bd:49:49:
d1:62:82:46:63:e5:4f:6f:9f:e8:56:56:8d:a5:54:
a3:06:f8:da:d3:8d:b7:c8:9d:4e:89:63:5e:ce:0e:
7a:c9:21:bc:70:43:99:39:5e:13:7f:16:8f:02:33:
b4:50:71:39:be:34:6c:38:ba:fe:9c:20:48:a1:71:
2b:14:a6:f8:24:bd:61:30:88:78:d0:b7:50:c1:61:
51:2f:f6:cc:ce:c7:c8:62:13:be:2e:fc:c1:fe:88:
c1:67:88:82:d9:d0:98:9e:72:59:0e:e3:f2:eb:d2:
d9:e2:cf:f7:10:6d:5a:85:1f:ed:82:49:ff:a4:57:
92:ba:a5:c7:90:67:e2:e1:e4:22:ec:75:c5:8f:63:
18:9c:79:93:ce:d4:d4:4b:e3:81:f8:51:b8:28:7f:
a4:53:e9:a9:f3:4e:21:8b:21:3d:73:e9:bd:84:8c:
09:2d:71:0d:c6:53:27:4a:e3:b5:12:bb:fd:fd:ed:
3d:90:aa:8b:a2:7c:62:35:eb:d9:dd:01:34:3f:50:
43:8f:50:c4:d8:3f:3d:36:c6:52:2d:df:c1:3f:dc:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:21:03:5C:88:69:C7:A9:24:1C:A2:52:3C:16:BB:8D:66:90:AC
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:f1:db:45:cb:38:55:f0:ea:a8:16:f9:fe:0c:96:ec:08:
31:02:2f:b2:9f:9a:13:0c:37:7b:d7:bd:30:1b:c1:d6:8c:be:
e3:4a:fb:47:16:5b:fd:81:b1:01:74:a7:38:88:fa:06:a0:db:
51:ba:9c:9a:c4:1f:ff:72:70:b8:5e:bd:bf:9d:de:1b:dd:02:
b4:5b:76:fb:0e:42:7a:b7:e3:58:5d:7c:e4:b3:8d:17:10:25:
ae:1b:e0:50:31:5a:b5:5d:26:e1:cb:3c:a3:f0:55:9c:5a:64:
51:bf:b6:d3:49:55:67:2a:d3:40:8a:30:c3:fc:3d:ca:41:7c:
b8:4e:05:f4:dc:5d:65:1a:9e:9b:06:2c:92:27:dc:7a:1c:5a:
13:91:92:81:5f:22:60:49:50:6e:01:ef:16:7d:eb:92:47:af:
b3:96:4f:a9:f4:88:cc:94:cd:1b:c5:63:24:e7:67:77:03:9c:
94:73:f3:a1:2c:9d:7c:c9:06:d7:86:82:68:c3:57:cc:f4:91:
86:97:bf:b9:5b:7d:fa:a6:8d:f5:86:43:0a:80:78:66:1f:cf:
3c:f7:37:4d:71:85:65:09:e9:30:66:39:59:78:c9:d4:a3:3e:
db:9b:15:3a:25:82:0f:27:7c:f7:19:c2:ac:1f:df:24:2c:96:
a1:f0:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:21 2024 by rpki-client on console-fra.rpki-client.org