Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: pGYg3IvFRdCJ7DCpBCwGZi2CkaldabV8j6uhL5+P2so=
Subject key identifier: DC:13:CC:50:9A:86:23:28:4B:09:A4:27:64:D2:72:0F:E8:1D:BF:49
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0193549C4B6C9FEF44C4CABAD81B9B19D93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0AFD
Signing time: Fri 22 Nov 2024 16:02:29 +0000
Manifest this update: Fri 22 Nov 2024 16:02:29 +0000
Manifest next update: Sat 23 Nov 2024 16:02:29 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: NhWGJDX3il56iBpupNjL+VTv20tLsgD9GsVrfha8f/Y=)
2: ADo_m02J4Gfy_rnnxJ2NHA8bIRE.roa (hash: how2yhFJpjXCmzptpQTWZ2Z5/M0haB7TtctSeF+JsNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:4b:6c:9f:ef:44:c4:ca:ba:d8:1b:9b:19:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Nov 22 16:02:29 2024 GMT
Not After : Nov 23 16:02:29 2024 GMT
Subject: CN=dc13cc509a8623284b09a42764d2720fe81dbf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:e3:f3:a3:ed:34:7e:90:be:c4:bc:3d:b3:
70:19:da:24:5f:4d:d4:3c:d5:bc:0e:2f:dd:30:ec:
11:06:3e:04:17:81:81:ea:cd:52:c1:4e:a7:fa:4d:
c9:5f:8f:17:4b:aa:3d:30:7a:46:8b:7d:a8:df:09:
ff:b7:b6:2e:36:ab:b9:1d:55:c1:93:9f:f8:2a:74:
01:a1:ef:c1:74:7d:9e:93:5a:64:67:fb:4d:04:cb:
2f:4e:0d:45:2f:70:0e:bf:b8:23:b5:36:02:d5:78:
6a:d8:14:89:97:05:2d:12:07:92:a1:35:9d:37:64:
e4:20:df:9d:12:c0:2c:bf:b6:bc:c1:ef:7d:b3:95:
c8:7a:cc:c6:9f:19:71:8c:44:ea:bf:b3:8c:d7:da:
29:ba:dd:ce:e4:1f:10:e6:e4:9a:e0:37:3a:b6:a8:
ad:d9:42:94:26:89:21:bd:11:ac:97:19:5b:6a:2f:
af:3f:4d:0d:aa:26:e0:f0:33:9a:b6:4e:db:d0:d1:
46:bf:6d:d1:c6:8d:99:50:8b:fb:3b:fb:07:c9:30:
fb:ca:84:32:98:e2:7f:92:6e:36:3a:9e:a6:f7:ab:
cb:6f:a5:39:74:f3:42:b9:d6:8f:63:ef:c5:74:65:
0e:d5:ec:e6:16:7f:74:2c:cc:60:01:85:31:e1:c1:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:13:CC:50:9A:86:23:28:4B:09:A4:27:64:D2:72:0F:E8:1D:BF:49
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:80:8c:89:17:c7:85:d2:0b:67:6e:0b:bc:2b:6c:72:f7:
4b:74:4a:e9:c4:8b:0b:66:ae:b3:93:c7:29:a6:3e:03:8e:83:
60:58:c6:df:3c:0e:39:fe:6b:1c:7b:f9:ad:49:6d:02:3c:2e:
84:17:b8:bb:ee:e6:2c:9b:4b:1d:0b:30:a5:6f:1a:c5:9a:01:
b9:94:ab:ca:49:c2:bb:9c:8c:b8:6b:dc:24:4e:44:d5:a4:45:
f5:ee:c3:c2:c0:70:d7:ae:b3:34:2b:61:16:cb:ba:b9:a0:23:
ab:d5:c5:10:b2:05:97:5d:8f:ea:11:0c:9a:25:66:6b:92:82:
72:72:09:d7:82:6c:42:ae:bc:2f:0a:ed:bd:63:d0:2d:4c:62:
22:21:3b:dc:b6:76:ae:ef:a2:6f:39:3a:8f:8d:8d:1f:27:eb:
50:7d:12:3e:f4:d2:29:76:ed:b6:2f:e8:a6:62:3c:a8:8f:0a:
a2:93:89:5c:b4:64:57:3c:d8:0e:25:06:3e:16:7d:5d:dd:4b:
ef:bd:b5:7f:87:a1:a3:08:d6:6c:8d:91:8a:8f:6d:01:71:f4:
1e:89:7f:53:be:73:2e:bd:ca:0b:85:61:f9:d1:ad:66:cb:f8:
f9:a0:f5:58:30:16:12:67:1b:ca:5d:66:c1:7d:cf:fc:48:eb:
17:b0:68:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnEtsn+9ExMq62BubGdk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjQxMTIyMTYwMjI5WhcNMjQxMTIzMTYwMjI5WjAzMTEwLwYDVQQD
EyhkYzEzY2M1MDlhODYyMzI4NGIwOWE0Mjc2NGQyNzIwZmU4MWRiZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6/j86PtNH6QvsS8PbNwGdokX03U
PNW8Di/dMOwRBj4EF4GB6s1SwU6n+k3JX48XS6o9MHpGi32o3wn/t7YuNqu5HVXB
k5/4KnQBoe/BdH2ek1pkZ/tNBMsvTg1FL3AOv7gjtTYC1Xhq2BSJlwUtEgeSoTWd
N2TkIN+dEsAsv7a8we99s5XIeszGnxlxjETqv7OM19oput3O5B8Q5uSa4Dc6tqit
2UKUJokhvRGslxlbai+vP00Nqibg8DOatk7b0NFGv23Rxo2ZUIv7O/sHyTD7yoQy
mOJ/km42Op6m96vLb6U5dPNCudaPY+/FdGUO1ezmFn90LMxgAYUx4cFzmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwTzFCahiMoSwmkJ2TScg/oHb9JMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcaAjIkX
x4XSC2duC7wrbHL3S3RK6cSLC2aus5PHKaY+A46DYFjG3zwOOf5rHHv5rUltAjwu
hBe4u+7mLJtLHQswpW8axZoBuZSryknCu5yMuGvcJE5E1aRF9e7DwsBw166zNCth
Fsu6uaAjq9XFELIFl12P6hEMmiVma5KCcnIJ14JsQq68LwrtvWPQLUxiIiE73LZ2
ru+ibzk6j42NHyfrUH0SPvTSKXbtti/opmI8qI8KopOJXLRkVzzYDiUGPhZ9Xd1L
7721f4ehowjWbI2Rio9tAXH0Hol/U75zLr3KC4Vh+dGtZsv4+aD1WDAWEmcbyl1m
wX3P/EjrF7Bohw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:33 2024 by rpki-client on console-ams.rpki-client.org