Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: YIp301+V7rkJMq8ZPJ0Eqbir7WY9TWk8ZhrDMLuVwcE=
Subject key identifier: 9F:35:AB:FE:1C:8B:3F:7A:FD:F0:4C:1F:63:84:76:31:1D:19:3A:F6
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 0193549CC4C674B7F75FDEE27B7CAA199004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 16:03:00 +0000
Manifest this update: Fri 22 Nov 2024 16:03:00 +0000
Manifest next update: Sat 23 Nov 2024 16:03:00 +0000
Files and hashes: 1: hasa0coTrJTulX3r78a2jLaNCXY.roa (hash: w7HShToJQZygUOFy2xUiPHLj0oWPGKKUt1xWhnZx8wE=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: uKcM5jGhYKCoJtU/x9rQS/pUMyoIZm7S4c9DHp1QpUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:c4:c6:74:b7:f7:5f:de:e2:7b:7c:aa:19:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Nov 22 16:03:00 2024 GMT
Not After : Nov 23 16:03:00 2024 GMT
Subject: CN=9f35abfe1c8b3f7afdf04c1f638476311d193af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:d0:c0:b2:ce:d9:08:7a:3a:a3:6d:50:41:
3e:01:8b:82:2e:8e:90:91:5f:5f:ee:2f:4e:77:6a:
b1:a3:0f:00:80:8f:c0:c2:47:d5:fb:c8:48:3f:28:
e8:d6:d8:c0:30:61:c0:23:32:c5:04:7e:b6:cf:a4:
a3:41:5a:82:3c:29:90:7b:86:0e:c8:f1:9d:b8:77:
bf:6f:2f:61:73:b9:9d:08:48:71:ea:c5:65:d5:92:
0b:61:d2:2e:3d:fd:42:53:48:2b:b2:0d:b8:59:cc:
34:39:aa:83:df:69:06:27:ee:3d:43:27:00:8d:34:
8e:83:71:c1:7b:58:b6:f2:fa:ed:e0:c1:e5:49:3c:
42:76:f0:23:a9:91:dd:fa:d1:a8:10:68:a7:03:10:
d5:b6:26:5d:e0:95:7d:14:b9:1d:ac:66:61:b7:4f:
57:be:35:e2:b7:10:03:8f:3f:a8:53:60:36:b1:16:
8c:ae:04:f9:67:ba:4b:b8:9a:5e:a7:40:b7:82:a4:
c8:04:63:9f:5c:ae:aa:b3:a1:fb:17:a9:3d:9d:3c:
e8:8d:4d:ca:e6:ca:53:eb:0a:d1:6c:ef:72:62:ff:
1b:10:2b:57:8d:5f:e6:77:e4:ea:a9:24:89:4e:ca:
60:53:fa:2c:95:9f:f2:a8:75:59:68:41:1b:ab:52:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:AB:FE:1C:8B:3F:7A:FD:F0:4C:1F:63:84:76:31:1D:19:3A:F6
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ca:2e:d3:52:63:03:60:41:16:f7:22:f4:fe:e8:cf:b7:1d:
69:3d:c2:12:41:29:81:ae:d7:98:03:df:01:34:ef:51:6e:dc:
f2:05:71:75:64:78:9a:f4:26:bc:86:fc:b8:dc:49:40:b8:45:
3b:fc:f1:e3:5d:82:f8:3c:6d:c3:72:13:43:b9:86:68:cf:6f:
18:d9:74:b1:29:bb:9f:02:5f:28:ef:45:f0:bc:4d:6d:ed:c1:
40:61:e7:04:17:c7:02:38:ca:1e:f5:3a:14:aa:2e:68:9f:95:
57:84:ea:88:39:5b:57:47:43:98:76:b0:3e:89:bb:9b:41:cb:
08:0e:72:c5:69:2c:dd:00:81:2b:dd:6a:99:28:80:69:9e:27:
da:fa:c3:b6:d4:77:c3:e6:e9:7a:41:9c:f0:e4:76:db:94:6d:
10:84:ad:2f:b8:a1:50:b6:b7:4c:47:d8:e1:00:93:67:ce:43:
2e:d1:cb:84:0a:79:eb:a4:86:63:39:22:73:31:f7:28:b2:82:
52:28:10:05:5e:39:9a:63:6f:ff:b9:a6:6e:a7:62:5c:90:a5:
b7:ae:d4:5d:cd:46:48:1f:50:88:3b:e4:e0:17:51:0e:0b:ec:
eb:c5:7a:2a:91:e7:42:4c:62:9e:6a:bc:7b:e7:ea:a6:cf:bd:
9c:cf:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:03:58 2024 by rpki-client on console-ams.rpki-client.org