Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: IeTyhVjCpnj/PUWkRGUB2sAc3sctjQxPBpB1qLgFUb4=
Subject key identifier: DD:07:80:E5:77:D8:F8:9A:83:00:3A:45:B4:04:20:A6:B4:CD:5A:82
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019369D9D7F2B99F36EB7CBF52CEC07C4A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 19:01:44 +0000
Manifest this update: Tue 26 Nov 2024 19:01:44 +0000
Manifest next update: Wed 27 Nov 2024 19:01:44 +0000
Files and hashes: 1: kQNbmNCEYYZrGMQvqPG_OMPM5CE.roa (hash: GTO+ElfIjyKxLG4gbyLRWrVTJF095xTuk8Y/uNCb/JI=)
2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: Tcha/zqbpEsCKn6Bop91ERPhRF4fFygOxSiPNNn7X6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:d7:f2:b9:9f:36:eb:7c:bf:52:ce:c0:7c:4a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Nov 26 19:01:44 2024 GMT
Not After : Nov 27 19:01:44 2024 GMT
Subject: CN=dd0780e577d8f89a83003a45b40420a6b4cd5a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:03:98:d7:b6:65:6e:ef:2f:35:e3:88:c0:
08:e0:8e:cc:e9:ae:2d:e2:83:93:41:2c:ab:e6:1d:
3e:f1:a9:78:47:ae:82:e1:68:36:f1:91:68:79:30:
9a:50:fd:b7:e1:9e:1f:4e:34:e0:96:03:74:d3:7c:
1e:f1:28:54:45:db:83:c7:a3:61:ae:04:95:6d:67:
1b:d5:e2:9c:6b:68:e2:a5:5f:c1:c1:68:17:aa:59:
df:49:bf:96:a9:5f:e3:3f:f9:55:86:a2:60:8c:bb:
58:f9:47:f3:87:c0:00:b7:86:87:49:51:a5:70:2f:
30:99:26:0c:a0:08:97:f2:42:91:b6:2f:24:cd:ba:
75:bd:fc:5e:c4:55:46:18:37:bc:b5:49:f9:cb:fb:
47:48:cc:7c:37:5d:ce:47:12:7c:40:af:18:b8:9a:
1b:41:35:02:d5:88:13:49:4c:eb:98:1d:2a:13:30:
4a:5b:37:22:81:d4:09:47:26:f2:4f:0f:74:b2:2c:
af:54:ea:52:1b:84:4e:e5:ce:fa:b1:68:c6:c8:77:
e7:8f:d2:94:1f:8d:90:45:65:ac:74:6e:3b:ae:97:
62:09:c4:39:b5:50:ce:fa:dd:99:a2:98:cc:35:e4:
72:75:a9:42:3f:a8:6c:bf:49:8d:76:c2:26:18:29:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:80:E5:77:D8:F8:9A:83:00:3A:45:B4:04:20:A6:B4:CD:5A:82
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:37:6b:a7:3a:24:1b:4f:a2:d4:e6:05:4c:ea:7d:a5:79:a3:
0d:67:1d:88:38:d0:c2:7a:f4:11:30:32:de:e4:6e:65:d1:a1:
7a:d8:4c:4a:88:63:8d:98:69:23:6b:ed:42:4a:b6:27:83:d3:
38:71:d3:ec:70:14:b1:39:66:1f:03:8e:d9:a5:81:79:13:87:
fc:5d:cc:48:ed:32:d2:8e:58:d5:29:f0:7f:91:ca:aa:cf:e0:
29:07:13:2e:39:9f:a7:e1:bb:6d:cf:1b:21:04:ee:5a:14:36:
c4:a2:37:c6:0a:83:4b:10:0e:e6:65:3c:51:4a:c7:30:be:86:
90:7d:2c:1d:ba:5b:cb:5c:ff:e0:cb:bf:fa:80:bb:5d:c1:ba:
79:89:58:08:1c:ad:97:8f:87:f2:ab:1c:e8:f9:36:fb:63:ca:
7f:c6:9a:79:5c:1a:02:67:a9:67:80:67:d5:a1:25:2e:92:34:
c3:5e:cc:d1:d4:69:12:ec:ad:1e:9f:2a:aa:13:c1:c1:65:78:
5f:d6:88:63:c3:60:b5:ed:92:00:3b:4e:ac:58:af:7f:5a:47:
94:c4:7a:7c:96:3f:d1:bd:1c:3f:fc:84:76:94:98:8f:9a:af:
74:2f:e0:a2:47:58:bb:da:7e:84:a1:fb:8e:41:33:e5:d6:84:
c9:7b:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:41 2024 by rpki-client on console-fra.rpki-client.org