Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: 4W9kv1uvmZzFtjnIl7HIvHHxCAjc3B6MrCMPt1ne8O8=
Subject key identifier: AE:AF:D3:6C:1F:09:2C:79:63:FB:78:56:59:C2:3D:F4:CD:33:2B:09
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 0193572E17C88D5BD10744310AFC257670AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 04:00:58 +0000
Manifest this update: Sat 23 Nov 2024 04:00:58 +0000
Manifest next update: Sun 24 Nov 2024 04:00:58 +0000
Files and hashes: 1: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: /+JhOSYZ9TYDj5BR69ZirDQ6y7NBX+gFeOvJ10mffQk=)
2: wQFez0LKDAPjRwxrRSaqWHtD46w.roa (hash: +D4ARYHn/X0pnb62Az8hThbCDhOfR0lfConDL4zFW/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:17:c8:8d:5b:d1:07:44:31:0a:fc:25:76:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Nov 23 04:00:58 2024 GMT
Not After : Nov 24 04:00:58 2024 GMT
Subject: CN=aeafd36c1f092c7963fb785659c23df4cd332b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:14:10:66:ed:ce:1a:7f:79:8b:b4:13:96:
07:88:92:ba:4a:d4:51:2f:79:ee:cc:58:3f:a5:b7:
d1:24:96:a0:7e:c6:62:a4:c3:3e:32:c7:0d:56:bf:
a0:1b:6f:3e:0b:b4:b5:96:9d:3c:b0:ec:e6:6d:b6:
98:79:2d:3e:7f:a1:1f:7f:0a:d1:9b:8a:08:a7:29:
8d:ff:b1:34:44:56:c7:16:7a:c5:0f:8a:86:c9:22:
72:f4:a8:b2:bc:ca:82:94:d9:18:ee:14:f6:38:6f:
71:02:d6:b9:db:a2:83:9f:90:5a:65:52:d1:5c:a9:
3a:b4:2c:71:9b:1a:da:d1:e7:ca:1a:be:78:bb:d3:
59:7b:ca:af:52:a7:e8:80:a6:4a:24:4f:25:25:c8:
06:b9:ec:e3:e7:78:93:e8:b3:c1:e4:0f:5d:aa:8e:
5d:3a:ae:39:1a:d3:ac:3a:83:24:fe:99:d6:5b:cf:
29:99:be:70:4b:7f:b8:3c:3c:b5:9d:eb:1f:95:f9:
09:6c:96:26:fb:9e:a4:49:69:8c:25:92:f2:8d:9e:
92:ef:84:4e:dd:02:10:2f:81:96:88:57:18:9a:b4:
b0:5b:bc:4a:e9:31:b7:c4:09:41:e3:fa:6c:3e:58:
6b:88:2f:56:2b:92:f9:9a:12:77:ed:af:e1:98:8c:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:D3:6C:1F:09:2C:79:63:FB:78:56:59:C2:3D:F4:CD:33:2B:09
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:5f:db:0b:18:20:7c:53:6a:49:46:12:c4:2a:87:15:6e:
a8:94:07:2b:bf:ca:ab:1d:b9:b4:43:f3:4f:4f:72:29:01:a9:
2c:b8:9a:01:cd:49:82:ce:84:bb:fa:13:b2:67:08:89:67:a2:
59:c4:3e:e9:94:7c:df:37:ef:f2:57:ec:16:d2:66:b9:d5:e0:
1f:4e:34:68:13:c5:d4:c4:81:36:c9:e7:93:39:72:f5:8c:21:
1e:db:8d:e6:17:8e:df:c3:df:ba:ba:91:64:cb:21:bf:e3:ef:
f7:7d:52:ee:04:57:e4:28:72:d2:ba:62:60:9c:17:30:cd:0e:
17:14:c2:d2:d7:3b:73:38:50:a8:06:23:8f:7a:30:f8:89:f2:
65:f6:6c:60:d2:83:a5:75:f1:2f:6d:7c:79:18:35:d7:78:bd:
12:8c:4a:c7:6b:24:1f:6c:8e:af:78:9d:d1:8f:5e:b2:a6:ce:
72:72:ca:3d:0a:98:4c:7f:11:50:46:2f:c6:b7:d4:92:ea:68:
22:82:4e:25:48:9b:6e:8a:be:7b:f2:dd:a9:f7:f6:df:f6:51:
71:76:d5:b4:5d:a2:ad:c3:ed:15:f8:a2:bc:c6:c0:e0:17:30:
f9:95:c2:1f:01:44:05:98:33:df:d0:77:86:ce:48:c6:ca:d6:
00:84:2d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:55 2024 by rpki-client on console-ams.rpki-client.org