Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: LeaSa4vEl43RM7lnHXkXLjPdkC81Fn7JTzSQZSP27ZA=
Subject key identifier: 97:9A:FC:06:24:50:3E:F4:56:E7:BD:A3:4B:EF:63:D0:60:D4:9A:47
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 01935689107BFE490DD737712D06197410A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0CA9
Signing time: Sat 23 Nov 2024 01:00:42 +0000
Manifest this update: Sat 23 Nov 2024 01:00:42 +0000
Manifest next update: Sun 24 Nov 2024 01:00:42 +0000
Files and hashes: 1: 96WNGF0lo8pxZatzGSt5t9whnU8.roa (hash: WNsbFQ3aeHVtahsRn18uTY8XNG7zmE2Du0+QPgDBHJU=)
2: kwOs2JnZDH6TAqGMyxuGssogJVA.roa (hash: S4FNf1N7n6YX0EGnjOGWfeX2dt5Y9JobD5F35PtX27Q=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: eX2/6mwL8sw2j+0huqsxQcrpmot0kMfw3axZkOBxDIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:10:7b:fe:49:0d:d7:37:71:2d:06:19:74:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Nov 23 01:00:42 2024 GMT
Not After : Nov 24 01:00:42 2024 GMT
Subject: CN=979afc0624503ef456e7bda34bef63d060d49a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:a4:fa:7e:25:e2:bd:64:37:f9:37:9e:4e:
b9:42:3b:78:cf:c8:d5:a4:df:a8:70:09:97:be:6c:
d0:20:0c:10:01:73:c8:1e:1d:f0:3a:7b:5d:ca:ea:
f5:6e:00:9c:74:87:1b:44:b0:f6:c8:dd:c5:25:d8:
63:b6:b7:3d:45:be:12:32:53:4b:aa:fc:ce:6c:36:
60:c3:38:0b:ac:0c:cc:48:c3:19:45:5f:18:4b:4b:
aa:11:87:0f:18:58:e5:d7:f8:99:11:7c:8d:73:2f:
3f:0d:89:48:a7:2b:61:c0:67:59:4e:9a:68:12:22:
82:be:f2:17:e4:b5:2f:6f:33:a2:43:a1:1b:ec:4e:
3b:17:03:29:68:1b:8e:84:ca:95:53:61:de:7f:5a:
37:03:f6:32:d8:f0:35:04:43:dd:6c:40:77:52:ec:
44:77:47:e5:d9:ec:c7:59:ae:ff:c6:74:e7:f0:92:
e3:61:08:af:f1:68:20:e1:08:ae:5c:96:28:01:bd:
f1:67:0b:66:07:2c:ff:49:05:d8:59:8b:56:9a:a7:
5b:05:b6:90:e3:44:3d:c8:1b:5d:29:14:48:68:31:
90:df:ec:ed:18:4e:4e:52:f5:6a:cb:f4:4b:6a:aa:
6b:b9:3b:4a:ef:47:64:b1:77:23:dc:6a:7e:53:97:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:FC:06:24:50:3E:F4:56:E7:BD:A3:4B:EF:63:D0:60:D4:9A:47
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:23:be:b3:f6:2b:88:19:78:39:1f:a7:06:14:7a:18:b0:
27:13:77:c2:ba:62:72:03:2e:5b:b4:bf:58:a2:d7:8b:ef:84:
ab:07:6a:1f:c4:46:8c:7e:45:07:60:fb:66:1a:a4:b6:a7:0a:
2a:31:0e:14:d8:a5:db:d8:4e:eb:23:50:d9:07:58:68:d2:ba:
82:59:2b:92:95:12:1b:48:31:5a:47:89:f9:1a:09:01:da:ad:
56:7b:be:2a:05:44:95:82:2f:ca:64:30:b0:38:90:f5:69:f5:
76:6a:90:b8:30:84:a6:0f:83:8a:ae:9d:1c:b4:d8:75:32:ec:
95:0d:b5:b9:3c:04:a8:63:4c:fc:a6:4d:cc:79:68:1c:af:bb:
b0:29:1f:49:34:fc:00:e8:07:bd:64:59:58:d4:88:56:d8:46:
57:dc:e7:49:80:60:83:88:e6:b9:e9:7a:82:6e:fa:65:61:fc:
5d:7c:c7:92:92:b4:96:e4:f4:59:fb:2a:53:52:d5:cc:79:fe:
0d:1c:c6:20:a4:ba:56:ba:f0:d2:4c:40:d4:4b:04:c3:c2:90:
b1:09:5f:8c:fc:ad:ec:24:a8:80:29:ab:4a:92:4a:3c:c7:18:
98:12:36:74:81:5d:f6:4d:ec:35:d5:97:fb:83:f9:53:ec:af:
07:c8:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:44 2024 by rpki-client on console-fra.rpki-client.org