Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File: GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier: uW/pHsrHV6nuJvZbsQmRr9l7P8gZLuu2OUosUMw+JwY=
Subject key identifier: FD:D8:D7:DA:88:4A:E1:A6:29:E0:7A:98:13:4D:EB:5C:B9:12:76:CE
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer: /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial: 0193568A6E5DCE49C507F2F8A8E1AC2DE353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number: 05FA
Signing time: Sat 23 Nov 2024 01:02:12 +0000
Manifest this update: Sat 23 Nov 2024 01:02:12 +0000
Manifest next update: Sun 24 Nov 2024 01:02:12 +0000
Files and hashes: 1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: QUb+V2pbGYboktvHbH9SmxQhW/L4Jxpo9YjOzBHZ+5s=)
2: RSJBjBmO9Kr1UGIe5sqfNcwfS8Q.roa (hash: 6koalnlBDziJat0fB6x1TUMqvsqUAkFYn813uHyi2KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:6e:5d:ce:49:c5:07:f2:f8:a8:e1:ac:2d:e3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
Validity
Not Before: Nov 23 01:02:12 2024 GMT
Not After : Nov 24 01:02:12 2024 GMT
Subject: CN=fdd8d7da884ae1a629e07a98134deb5cb91276ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:08:b6:78:01:ff:52:9b:22:4e:98:6f:89:
d3:5f:cb:8c:32:2e:a0:63:70:94:bd:3f:e7:89:5c:
c2:8e:76:63:9b:e0:ed:b4:dc:28:b5:01:97:48:70:
db:e6:cf:f3:3f:32:c1:d9:bf:cc:fa:1d:3f:82:51:
70:27:c0:13:83:43:88:5d:30:08:3e:f0:60:c3:00:
4b:ca:26:04:d2:c2:0b:e6:b6:3a:23:ff:2f:8a:58:
7b:94:1a:74:eb:20:f0:dc:0e:8b:cb:2e:1f:51:5d:
9e:b3:67:2f:6a:f6:76:0f:73:36:e2:b8:d0:28:2c:
1a:87:54:5b:ca:ee:e1:d8:c4:1c:e1:c4:b1:31:a7:
92:d6:f2:20:3a:2a:b7:ee:c1:74:8e:57:cb:ab:b3:
17:ba:7b:72:c3:cf:23:fa:9a:00:bb:82:5c:e0:03:
0b:0b:15:b3:17:ab:aa:ba:01:fd:54:e2:b9:ea:3f:
60:5c:78:d5:50:f7:13:fc:cb:8e:5e:a5:2c:9f:74:
d0:bf:3a:f4:cb:6d:bf:51:35:99:b4:d5:57:40:03:
56:4f:df:a0:59:a4:e0:8c:c1:f3:d1:1a:0f:f2:b7:
6a:0b:ed:da:9d:91:11:fa:9d:48:a8:4f:95:db:74:
d0:80:e5:bc:19:d0:b3:3a:dc:83:a6:df:5b:d5:15:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:D7:DA:88:4A:E1:A6:29:E0:7A:98:13:4D:EB:5C:B9:12:76:CE
X509v3 Authority Key Identifier:
keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:38:12:d2:5d:92:01:fc:6d:09:07:80:2f:11:99:ad:7d:
6a:44:9a:be:06:71:5c:76:5c:25:08:e9:6d:c6:fe:eb:4e:fa:
c2:66:94:53:37:a4:26:e7:69:b8:86:00:22:0a:23:0e:c5:66:
71:85:01:28:ad:fc:be:6d:bf:08:d2:1e:b1:e1:b4:d8:f5:13:
a4:77:c9:0c:2b:18:9d:8a:5b:40:34:87:cb:8c:5d:08:6e:9c:
94:2f:b9:ad:68:41:d1:60:e7:0b:8c:8a:39:05:92:bc:98:57:
f5:b0:6c:81:b5:b0:48:e7:80:a8:32:ec:4c:a3:66:f2:22:c1:
19:6a:47:9b:64:97:29:57:e8:eb:6d:eb:bf:1d:87:2d:be:41:
68:21:12:22:7e:ec:bd:b7:f6:8f:1b:b9:e7:31:11:b5:cb:37:
40:64:0f:f5:96:3c:2f:57:45:ea:0f:e4:92:62:15:47:75:6f:
19:9d:45:d8:59:a1:9e:61:42:33:43:1c:2d:85:91:1a:07:93:
e3:d6:d3:2c:1d:bd:e9:71:a4:d5:cb:1a:19:21:4f:c3:61:d9:
f4:57:aa:2f:86:ba:42:7b:be:05:9f:ed:56:2e:81:34:21:95:
a0:8b:d3:35:87:96:17:74:84:51:d9:9a:e4:8c:87:3e:bd:6d:
eb:3f:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:18 2024 by rpki-client on console-ams.rpki-client.org