Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: QyOga8j8AKg8dnFumQuAmVTaLsBIVMMTNaZpJe1Y54c=
Subject key identifier: 8A:12:AA:3A:EE:E4:02:BB:E4:0E:10:68:02:82:1B:B6:65:E8:08:AC
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 01935689633378463AD0D7DA0B502F3B24DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 05D1
Signing time: Sat 23 Nov 2024 01:01:04 +0000
Manifest this update: Sat 23 Nov 2024 01:01:04 +0000
Manifest next update: Sun 24 Nov 2024 01:01:04 +0000
Files and hashes: 1: 9maIrwOXceiTm0YJeCALyXkjYHA.roa (hash: L2LhFbRyQjgejqWIpJNG2jDOaGAasCF4P0jFmqZg05s=)
2: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: H2z+DEZpYQc82HMNhAT5wBsLeBwc2LRdtzXbPaRTn2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:63:33:78:46:3a:d0:d7:da:0b:50:2f:3b:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Nov 23 01:01:04 2024 GMT
Not After : Nov 24 01:01:04 2024 GMT
Subject: CN=8a12aa3aeee402bbe40e106802821bb665e808ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:a5:da:ca:82:c7:68:d0:63:ee:81:d7:d3:
0c:5f:97:b3:f6:7c:b9:36:e2:b5:14:d1:f9:b9:93:
b1:5c:c3:7a:cc:61:6e:7d:b6:66:e6:6a:8d:a0:c1:
d6:70:6e:89:20:3f:ec:a3:74:80:62:06:43:16:c2:
30:39:8b:a5:66:fc:51:cd:2b:e1:f8:a3:6b:1c:1c:
97:e1:26:85:e2:fd:15:61:66:8b:58:8f:e3:38:24:
b1:7e:82:44:4b:92:9d:8b:1f:82:8c:fb:da:48:c7:
ac:c4:75:db:f5:7f:e7:76:6f:b4:1c:6e:8b:99:15:
ff:c0:ec:c8:94:ed:80:5a:c0:0f:28:58:7c:dc:9b:
df:db:df:b2:f5:05:8f:88:3e:38:87:03:ee:90:9b:
3d:1f:5e:26:b7:69:a7:57:91:7c:27:86:d7:85:2f:
4a:73:98:a6:09:84:15:1e:37:57:83:c7:cf:57:78:
97:d9:7a:04:cb:6b:9a:10:b1:ad:02:a2:07:65:88:
55:7c:f9:56:59:8d:41:53:7e:14:cb:44:d9:62:34:
4f:d7:64:48:d4:df:fd:47:f5:f8:6a:68:b6:40:58:
ad:1e:41:53:c0:57:2d:f4:c6:15:53:81:30:e2:fb:
5b:90:f9:f8:5d:97:a2:a4:29:b9:16:4c:0f:7d:ed:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:AA:3A:EE:E4:02:BB:E4:0E:10:68:02:82:1B:B6:65:E8:08:AC
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fd:a8:1e:7f:b1:ac:1a:2a:23:4d:5a:6a:15:24:ff:f2:f1:
de:13:f5:98:48:ab:69:05:39:7e:3c:6d:50:7a:ca:a8:31:78:
c1:e6:b8:5f:ba:be:f2:77:75:71:71:48:d3:3f:8b:69:94:19:
e8:41:4b:09:f2:d2:5a:f8:ce:6d:ea:0e:58:e2:19:34:1e:21:
eb:8d:ac:f1:4c:29:41:99:39:ec:0d:9b:dd:8c:1b:4d:35:1c:
5b:80:2c:31:c0:21:75:71:23:e5:e4:4b:76:bc:91:51:71:91:
82:35:e3:9a:f4:7d:a1:1f:22:05:55:cc:c0:81:ac:6b:2e:71:
e7:7c:d0:f3:5b:b1:d5:f7:fe:49:c9:12:14:a1:74:e4:5f:6d:
04:c3:5c:82:ca:c7:66:7d:b3:a9:0c:eb:bf:49:b2:dc:03:cd:
7c:f2:0c:a7:0c:e5:65:26:36:2a:c2:dd:a8:a5:b8:e6:37:13:
e9:d2:1d:e9:e8:6b:0a:7c:78:42:98:37:16:a8:69:74:de:1e:
24:3b:53:d7:13:3a:d9:b5:1a:0b:8d:82:9b:ba:b8:fa:46:7b:
02:1b:b0:74:26:d1:d6:db:a2:38:0d:61:7b:07:00:76:e0:76:
47:88:b9:11:fa:d5:4d:d7:09:60:3b:c8:b2:c7:99:51:88:b8:
33:46:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:09 2024 by rpki-client on console-ams.rpki-client.org