Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: 2vKp/b63dD/isUqsQvQDuZqnxNLJ2ubHLEu1mpfB9ZA=
Subject key identifier: 68:FA:19:D9:6E:33:E5:D9:89:11:B2:85:1C:EE:B6:A2:05:7C:E2:83
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 019357D2481D9D4A1AD78EE5B15A48AE1A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:18 +0000
Manifest this update: Sat 23 Nov 2024 07:00:18 +0000
Manifest next update: Sun 24 Nov 2024 07:00:18 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: ca5/6KUgnnr1Gm1Iwzs4z/favU5+dj/zeLPMr0WgMaE=)
2: n9evG8EQgqx8aSuNwNInfGBRG7g.roa (hash: ur7qpjl24Ji66X5mV71cnQcDIRvirlweFHKvsCKn1Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:48:1d:9d:4a:1a:d7:8e:e5:b1:5a:48:ae:1a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Nov 23 07:00:18 2024 GMT
Not After : Nov 24 07:00:18 2024 GMT
Subject: CN=68fa19d96e33e5d98911b2851ceeb6a2057ce283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:22:97:ea:b6:a2:e9:af:83:53:84:8e:d5:
e4:00:ad:f5:0e:52:4b:0e:9a:be:c2:7e:2a:e8:e1:
2a:6c:0d:eb:d9:6b:75:f9:cb:dd:f4:25:8a:ec:a3:
9b:86:bc:99:f5:6e:da:de:85:07:6a:6d:5e:d5:ba:
9e:6b:e7:55:67:bd:a9:47:2e:de:68:be:c6:e9:7c:
e2:0d:b2:f8:e0:d5:89:bc:b7:00:38:2a:86:3c:66:
f7:e8:c4:a8:ab:45:f3:ef:76:dc:1b:7f:2b:2d:42:
4a:64:e2:af:f2:0d:41:ed:01:70:aa:ed:f8:fc:20:
b9:fc:31:8f:c0:72:ba:7a:fe:65:8c:9e:97:77:44:
f7:e5:47:ea:4f:8c:a8:9f:c4:bf:30:61:78:d9:86:
ec:6d:00:a8:e4:5a:da:ab:f9:66:75:ab:9a:ae:ea:
8c:a9:6b:b2:7d:a9:21:0a:d8:58:1f:1f:e4:05:9b:
88:e5:c2:b9:06:88:8a:cd:1c:c3:5a:0c:e0:0b:0f:
61:b7:6b:fa:37:84:bd:68:9b:b8:a5:13:ce:40:47:
60:2b:98:47:d4:9b:f0:fe:fc:28:ba:8c:f5:5b:4f:
b0:34:82:6e:c7:cb:67:44:1f:ba:8b:d4:7d:5d:68:
d6:7b:a7:48:6c:9e:dc:b9:e0:5d:50:8b:7a:ac:2d:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FA:19:D9:6E:33:E5:D9:89:11:B2:85:1C:EE:B6:A2:05:7C:E2:83
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:29:e0:99:98:07:a1:3d:4b:f3:b3:8e:c8:23:eb:98:84:22:
a4:41:23:ce:b5:4c:1f:39:83:7d:a1:03:89:71:ef:8b:be:8a:
e5:43:19:1e:23:19:05:1f:a8:06:71:87:95:a8:0f:f5:95:ba:
3b:2b:7c:61:13:4a:69:66:a6:76:e8:fa:8f:c9:13:4a:f2:d4:
f0:aa:79:d1:43:41:35:bc:d2:ab:f1:d2:f5:d4:5c:27:27:d4:
be:c5:8e:5d:4e:aa:a1:e9:39:46:dc:25:d4:b4:e5:2e:ba:84:
de:cb:90:94:ba:0f:b1:95:c0:eb:f1:78:8d:04:a2:4a:93:00:
a1:29:cc:0c:d1:f5:34:b4:d1:0d:fc:c8:7d:1f:66:6c:36:ad:
43:33:4e:06:18:2b:d6:bd:80:9c:f9:52:9e:45:ed:93:ad:46:
b8:53:12:8a:16:4a:87:5e:a4:8b:e3:77:1c:89:b0:ba:b5:a4:
74:5c:bb:59:45:48:4f:7d:40:d0:52:a2:ad:18:75:eb:88:e0:
31:1f:98:d1:e9:1d:1d:17:31:e4:97:b8:d2:c2:4f:53:3c:c4:
4f:82:62:d0:93:92:e2:48:45:a9:9f:65:d1:de:1f:73:b1:fe:
8b:74:76:b1:7a:29:f0:49:00:15:36:0f:14:b1:b7:c4:f5:6c:
77:9b:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:39 2024 by rpki-client on console-ams.rpki-client.org