Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: nIIJeWdgKbVljvZyeIo3HgMdkUYzMrQ0W8xGAZcBBKE=
Subject key identifier: 60:80:6A:36:6A:2A:21:65:CC:4A:D6:10:2C:C5:06:D4:81:BC:E5:83
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 0193568B21537271937EAC192D14E101E469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:02:58 +0000
Manifest this update: Sat 23 Nov 2024 01:02:58 +0000
Manifest next update: Sun 24 Nov 2024 01:02:58 +0000
Files and hashes: 1: EljBY25fzRaukO_GAd3ezV3sn2Q.roa (hash: 9rTSTTg9jfkHCRG+ceKr9nRXkZwPPts4igHALHj3+Jc=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: lj2va7vEeyj/9Mgpx6Bm1P/gC+gdLrXZ2yVDHlShrsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:21:53:72:71:93:7e:ac:19:2d:14:e1:01:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Nov 23 01:02:58 2024 GMT
Not After : Nov 24 01:02:58 2024 GMT
Subject: CN=60806a366a2a2165cc4ad6102cc506d481bce583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:0e:bf:e7:f1:de:26:66:9c:61:45:22:c8:
fd:e4:ee:35:3f:c7:09:b8:41:0d:80:6a:0a:1d:10:
f4:df:c9:11:78:18:d4:d6:bd:17:80:72:80:f9:d7:
ac:af:7b:b2:1a:d2:ad:2d:ef:c3:8e:ef:da:07:77:
f7:2d:90:40:b1:38:1c:f6:d2:83:d5:76:a5:e0:60:
35:4d:a2:69:8a:b3:b5:51:06:09:ca:5d:cf:c5:ed:
3b:8f:eb:f3:31:08:c2:7b:e2:61:a2:13:ad:61:69:
5c:0d:03:b8:bb:59:fa:fb:b0:08:64:6f:71:9e:bc:
8b:4e:21:3d:7b:a4:e5:05:e9:f2:be:62:d5:6e:ef:
ae:d4:56:5a:9b:ea:99:0c:16:03:de:c0:75:29:81:
43:6b:72:69:c0:1a:12:28:06:d8:52:41:eb:9b:99:
7e:06:5c:5a:99:f7:f3:8a:03:f3:ed:0c:46:52:93:
af:96:61:78:53:47:aa:80:df:a1:da:39:9e:bb:bf:
90:9c:97:76:83:30:02:3b:35:a3:34:7f:b1:b7:1e:
30:29:e3:2d:53:3b:7d:5b:9f:f2:9c:ed:a4:1f:aa:
fa:48:4f:e6:39:78:07:08:c5:9d:8f:54:f9:18:5b:
f8:7b:60:b6:71:96:b5:2a:64:13:1a:f6:c2:7c:83:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:6A:36:6A:2A:21:65:CC:4A:D6:10:2C:C5:06:D4:81:BC:E5:83
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:89:b3:79:74:60:1b:f0:cd:86:d0:40:97:f9:b7:04:ce:
10:23:28:e1:39:dc:39:aa:12:09:e3:74:24:07:ba:d5:64:a3:
ac:42:54:93:54:39:ab:15:e4:69:dc:f2:d0:3c:1f:62:3f:78:
8d:f7:c3:01:50:73:ef:7c:77:e2:44:d5:12:48:26:b8:d7:80:
f3:b9:06:21:f2:63:0e:3e:ce:0c:9c:c2:50:2c:33:ca:dd:9d:
22:65:0f:22:80:cf:1b:ea:5c:cf:fd:0a:80:ea:7a:1f:36:9a:
8e:dc:37:d1:7d:e6:b6:c1:67:0f:d2:9b:78:54:44:b1:b7:5f:
11:61:9d:74:67:02:78:c5:4a:d0:ae:ba:35:32:c3:c4:9a:46:
a2:61:34:d3:25:93:79:d0:93:38:2e:6d:4d:b6:d7:bf:d3:ac:
a0:ff:bd:8f:a0:79:22:bb:61:2e:bc:26:9b:3b:d7:98:4b:a5:
81:42:34:5f:23:6e:96:18:51:e8:4e:ec:73:ca:5f:9f:e4:c5:
a2:8c:32:4e:df:d6:6c:ac:2e:29:83:95:cd:ba:3e:50:09:73:
19:3a:e6:be:cf:9a:8e:1a:07:90:eb:66:b9:0c:8e:93:f9:c3:
31:ab:7f:4c:af:34:a1:bf:de:78:2e:10:d6:52:be:26:59:29:
bb:ff:c6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiyFTcnGTfqwZLRThAeRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2
Nzg1ZWIwHhcNMjQxMTIzMDEwMjU4WhcNMjQxMTI0MDEwMjU4WjAzMTEwLwYDVQQD
Eyg2MDgwNmEzNjZhMmEyMTY1Y2M0YWQ2MTAyY2M1MDZkNDgxYmNlNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskIOv+fx3iZmnGFFIsj95O41P8cJ
uEENgGoKHRD038kReBjU1r0XgHKA+desr3uyGtKtLe/Dju/aB3f3LZBAsTgc9tKD
1Xal4GA1TaJpirO1UQYJyl3Pxe07j+vzMQjCe+JhohOtYWlcDQO4u1n6+7AIZG9x
nryLTiE9e6TlBenyvmLVbu+u1FZam+qZDBYD3sB1KYFDa3JpwBoSKAbYUkHrm5l+
BlxamffzigPz7QxGUpOvlmF4U0eqgN+h2jmeu7+QnJd2gzACOzWjNH+xtx4wKeMt
Uzt9W5/ynO2kH6r6SE/mOXgHCMWdj1T5GFv4e2C2cZa1KmQTGvbCfINGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCAajZqKiFlzErWECzFBtSBvOWDMB8GA1UdIwQY
MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct
NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0
LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc+Js3l0
YBvwzYbQQJf5twTOECMo4TncOaoSCeN0JAe61WSjrEJUk1Q5qxXkadzy0DwfYj94
jffDAVBz73x34kTVEkgmuNeA87kGIfJjDj7ODJzCUCwzyt2dImUPIoDPG+pcz/0K
gOp6Hzaajtw30X3mtsFnD9KbeFREsbdfEWGddGcCeMVK0K66NTLDxJpGomE00yWT
edCTOC5tTbbXv9OsoP+9j6B5IrthLrwmmzvXmEulgUI0XyNulhhR6E7sc8pfn+TF
oowyTt/WbKwuKYOVzbo+UAlzGTrmvs+ajhoHkOtmuQyOk/nDMat/TK80ob/eeC4Q
1lK+Jlkpu//GBQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:14 2024 by rpki-client on console-ams.rpki-client.org