Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: 0L31g/YD9tUS8m5lDAQVKuU6NUBbtfCH4Kp4I8Wjlbo=
Subject key identifier: 7D:BB:21:D0:27:16:F5:49:F4:0E:FA:9F:CB:83:90:BF:F0:8F:AD:19
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019369DADA2D1E8BC4C663D2A6FDA6433F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0C4E
Signing time: Tue 26 Nov 2024 19:02:50 +0000
Manifest this update: Tue 26 Nov 2024 19:02:50 +0000
Manifest next update: Wed 27 Nov 2024 19:02:50 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: PmH7R40Psc+EY0YwLwjTotoH1/SnBRyVWRb9iVFWd2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:da:2d:1e:8b:c4:c6:63:d2:a6:fd:a6:43:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Nov 26 19:02:50 2024 GMT
Not After : Nov 27 19:02:50 2024 GMT
Subject: CN=7dbb21d02716f549f40efa9fcb8390bff08fad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:4c:3d:47:e8:4d:df:b3:a4:67:79:4a:24:
7d:39:df:2a:ae:6b:c1:e4:f9:77:e4:f5:a4:40:fe:
3c:0e:05:e2:a2:04:5f:ba:e2:63:af:47:a4:2f:3d:
63:bc:bc:01:fe:65:d7:b4:94:3b:90:90:3f:c7:b2:
1d:a1:4b:c4:9c:84:ab:16:f1:aa:ea:3a:4f:5f:af:
9c:5d:f9:8c:bb:11:7d:af:72:40:40:36:c1:3b:2d:
e1:eb:94:90:51:fc:48:a0:eb:4a:1c:ff:99:6a:3a:
14:fd:c2:e9:94:e7:6e:62:1d:88:3b:bd:94:87:ae:
c0:54:aa:52:ea:91:79:96:55:e6:d2:06:3b:a4:ff:
58:7e:f6:7c:62:bd:f8:f6:d3:76:5e:f5:97:c7:4e:
6f:3b:41:54:9e:59:cd:c5:4e:5f:7b:e1:e8:53:47:
b3:0f:02:c3:3b:30:96:52:74:08:e5:1d:10:55:cf:
2b:a6:42:30:79:09:41:62:c7:87:ce:c6:98:78:57:
10:b1:28:b2:e9:f9:3e:36:38:00:43:54:f4:cc:56:
ff:77:6e:91:27:15:81:c8:26:b4:c2:9c:fa:48:9a:
37:e3:ed:78:6c:80:d5:d8:b5:d8:c3:50:b6:2e:bc:
2c:2d:30:37:e4:2c:b6:84:75:6e:dd:4d:91:93:6e:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:21:D0:27:16:F5:49:F4:0E:FA:9F:CB:83:90:BF:F0:8F:AD:19
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:2d:25:3a:3f:e3:80:b9:2b:55:f3:e3:3f:91:47:26:05:
d5:d1:cf:0b:ea:86:76:8f:24:91:ca:1f:e0:56:cc:41:c3:0c:
89:ec:18:17:17:b2:69:3c:74:5b:f1:8b:ae:40:58:1a:e1:07:
57:d9:eb:ca:bd:87:85:87:7b:81:01:af:fb:9c:8b:eb:40:e1:
e4:c6:eb:8d:66:92:22:03:c6:26:35:95:d6:5b:c1:43:ad:60:
2e:ab:d2:07:b4:ee:d1:a4:73:7a:fe:f2:a3:69:f9:b4:d9:17:
50:f7:51:d6:93:7a:8d:75:ae:91:7d:59:56:3d:6f:30:f6:03:
ac:bb:a0:8b:d6:b9:84:1c:bf:7a:aa:a8:99:8a:80:f8:89:f2:
11:0b:44:44:b5:ad:78:41:f6:62:16:10:ce:c3:dc:e4:9a:40:
f1:10:8b:f8:7f:32:67:83:19:00:6e:55:50:82:98:7d:8d:9f:
1c:fc:d2:32:67:03:3e:8d:9c:ea:48:85:21:08:ee:d7:6d:1a:
e0:8c:72:56:84:95:16:b9:f1:c3:3e:54:bd:7b:00:db:fe:16:
bc:7b:4f:72:3b:e6:75:18:1e:db:cb:2e:0a:c9:85:24:ba:9f:
c6:11:53:77:46:d0:59:86:12:80:d2:f7:4e:85:f7:22:5f:a6:
6d:c3:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:42 2024 by rpki-client on console-ams.rpki-client.org