Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
File: KY60_lwZ8pLyiSTL8VVaj1do2CY.mft (raw, json)
Hash identifier: k+FrE4SXt3tdKmMDlEdHX0R612/ChK8lLtA8u9NDZLk=
Subject key identifier: 00:C3:87:6B:B1:80:45:69:55:B6:CB:6D:CE:FA:60:45:5C:32:90:10
Authority key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Certificate issuer: /CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Certificate serial: 01935688C7196A6D5A18859A99ED9FF22AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 01:00:24 +0000
Manifest this update: Sat 23 Nov 2024 01:00:24 +0000
Manifest next update: Sun 24 Nov 2024 01:00:24 +0000
Files and hashes: 1: KY60_lwZ8pLyiSTL8VVaj1do2CY.crl (hash: 1fzmUtHwfnvGbcAIPg2FbsJA8mc7Wpzw9TbTbhwt+dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:c7:19:6a:6d:5a:18:85:9a:99:ed:9f:f2:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Validity
Not Before: Nov 23 01:00:24 2024 GMT
Not After : Nov 24 01:00:24 2024 GMT
Subject: CN=00c3876bb180456955b6cb6dcefa60455c329010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:e0:d0:e4:b7:b5:cf:aa:6c:30:70:f3:14:
86:83:72:75:72:bd:53:09:28:f9:74:7c:ee:85:6a:
3a:12:6f:37:ce:5b:ae:fb:6d:d0:e9:8e:7d:92:43:
e7:69:2f:b7:4c:2d:87:8a:25:42:35:c3:ef:e1:75:
31:e5:c8:b8:26:60:44:29:2a:8a:2d:b2:af:23:e1:
9f:ca:48:8c:14:79:ca:a2:75:08:94:91:25:51:32:
53:d6:99:10:3a:5e:c8:2b:35:15:df:7a:c2:8c:df:
47:80:b0:3e:64:ea:77:f3:e8:6d:72:4c:5b:52:41:
b5:ab:ae:dc:80:d2:0f:3c:0b:53:0f:2f:8d:b7:97:
8a:7c:63:3f:ef:54:83:13:ee:6e:f9:da:4e:44:da:
88:2f:b1:67:14:2e:71:1b:6f:f2:72:24:17:8b:79:
26:ec:e7:52:9f:4f:14:15:b2:55:6a:da:9e:2d:29:
17:00:8f:bf:a9:21:b1:22:a3:96:2b:36:4f:97:67:
61:ce:50:f2:69:74:e3:15:0c:a1:ce:56:0b:54:45:
fd:c3:7f:32:21:b3:6e:02:80:96:74:6e:cd:81:89:
e7:0a:ba:de:a2:db:f7:59:6a:82:eb:dc:56:4a:de:
00:91:e6:e6:65:94:b8:0f:26:cd:af:8a:81:6f:81:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:87:6B:B1:80:45:69:55:B6:CB:6D:CE:FA:60:45:5C:32:90:10
X509v3 Authority Key Identifier:
keyid:29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:05:12:ac:34:3e:9d:d5:05:b4:f8:df:f4:66:f8:86:c2:4a:
c7:20:ae:23:24:f6:fd:c5:d8:66:8e:e7:c5:26:ae:22:3b:c2:
3c:9d:c6:15:63:0a:5b:31:62:66:0a:c0:48:41:c5:0f:d4:7c:
d0:b6:6c:41:19:aa:fb:2e:9f:8e:bc:57:bb:7f:96:5f:62:f9:
eb:21:99:df:86:ba:5c:a3:4f:76:96:c0:5d:7a:bd:df:5c:96:
c3:dd:25:8e:c4:28:1d:68:83:3b:9a:b5:ed:5e:0b:42:18:48:
30:b6:fe:71:f1:a8:08:36:79:73:94:64:c0:b5:87:e4:64:dc:
ef:07:b9:60:b8:db:94:c4:ae:ca:36:6d:40:bf:c2:7c:4b:3a:
92:39:1b:ce:c5:b9:d5:ef:a1:8c:97:cc:af:c6:e6:d6:95:2f:
16:d9:1d:20:68:ce:bd:61:f2:26:33:40:c1:f5:5c:5d:0c:c9:
7c:4f:75:2f:e4:10:04:9f:3d:2f:85:1c:4d:09:a8:21:dc:a1:
ec:a4:49:ea:0d:fb:7c:b6:8e:50:39:d7:ad:96:f3:2f:c1:7c:
67:22:46:1e:2d:bd:1b:41:32:94:17:89:79:4c:22:ee:c1:cd:
9e:fb:06:69:10:f7:9d:5e:c5:71:15:46:07:58:c5:3f:54:ef:
28:ef:42:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiMcZam1aGIWame2f8iqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OGViNGZlNWMxOWYyOTJmMjg5MjRjYmYxNTU1YThmNTc2
OGQ4MjYwHhcNMjQxMTIzMDEwMDI0WhcNMjQxMTI0MDEwMDI0WjAzMTEwLwYDVQQD
EygwMGMzODc2YmIxODA0NTY5NTViNmNiNmRjZWZhNjA0NTVjMzI5MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbPg0OS3tc+qbDBw8xSGg3J1cr1T
CSj5dHzuhWo6Em83zluu+23Q6Y59kkPnaS+3TC2HiiVCNcPv4XUx5ci4JmBEKSqK
LbKvI+GfykiMFHnKonUIlJElUTJT1pkQOl7IKzUV33rCjN9HgLA+ZOp38+htckxb
UkG1q67cgNIPPAtTDy+Nt5eKfGM/71SDE+5u+dpORNqIL7FnFC5xG2/yciQXi3km
7OdSn08UFbJVatqeLSkXAI+/qSGxIqOWKzZPl2dhzlDyaXTjFQyhzlYLVEX9w38y
IbNuAoCWdG7NgYnnCrreotv3WWqC69xWSt4AkebmZZS4DybNr4qBb4Gi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADDh2uxgEVpVbbLbc76YEVcMpAQMB8GA1UdIwQY
MBaAFCmOtP5cGfKS8okky/FVWo9XaNgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NzExMWMtMmU2MS00MzU5LTg3NjYt
NmJlZGYyZmJkY2UyLzEvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NzExMWMtMmU2MS00MzU5LTg3NjYtNmJlZGYyZmJkY2Uy
LzEvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQUSrDQ+
ndUFtPjf9Gb4hsJKxyCuIyT2/cXYZo7nxSauIjvCPJ3GFWMKWzFiZgrASEHFD9R8
0LZsQRmq+y6fjrxXu3+WX2L56yGZ34a6XKNPdpbAXXq931yWw90ljsQoHWiDO5q1
7V4LQhhIMLb+cfGoCDZ5c5RkwLWH5GTc7we5YLjblMSuyjZtQL/CfEs6kjkbzsW5
1e+hjJfMr8bm1pUvFtkdIGjOvWHyJjNAwfVcXQzJfE91L+QQBJ89L4UcTQmoIdyh
7KRJ6g37fLaOUDnXrZbzL8F8ZyJGHi29G0EylBeJeUwi7sHNnvsGaRD3nV7FcRVG
B1jFP1TvKO9CVQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:40 2024 by rpki-client on console-fra.rpki-client.org