Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json)
Hash identifier: 5BCGAawxR5+wCokwI3VgNLFCMfyio6Cr+X2DitIOyeg=
Subject key identifier: 0F:A3:85:FE:4B:2E:29:E2:94:8B:6B:EB:56:28:7B:DF:F7:63:D6:56
Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Certificate serial: 019405A12F920607AA472CD3473B0A260300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
Manifest number: 05A4
Signing time: Fri 27 Dec 2024 01:00:36 +0000
Manifest this update: Fri 27 Dec 2024 01:00:36 +0000
Manifest next update: Sat 28 Dec 2024 01:00:36 +0000
Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: Ryhzs8J5gfPOb2dbG3i8zPjwgVjDHbUJmW5sd2tovfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:2f:92:06:07:aa:47:2c:d3:47:3b:0a:26:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b
Validity
Not Before: Dec 27 01:00:36 2024 GMT
Not After : Dec 28 01:00:36 2024 GMT
Subject: CN=0fa385fe4b2e29e2948b6beb56287bdff763d656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:4a:53:57:b0:6b:d8:42:45:e1:37:e1:05:
85:d8:c2:94:38:f5:e6:be:e2:3a:69:aa:ce:ba:40:
05:9e:2c:1c:1f:ae:9d:19:be:4d:f3:9b:b4:9d:7b:
29:57:20:e1:f6:88:93:8a:f2:4a:43:11:40:f3:3e:
60:cd:77:4f:08:4e:3e:3a:b4:b6:ec:b9:b9:b6:2b:
35:c7:cc:5c:d1:b4:e9:c6:74:32:15:6b:57:a5:d8:
4e:58:8f:35:75:b0:bd:c7:e5:b7:93:c4:56:66:f9:
f6:ce:ac:7d:3a:7c:5f:96:6d:6f:6b:c3:5d:0b:14:
1c:19:13:2e:7b:2a:00:3f:61:27:c0:15:9b:97:73:
fa:95:da:ef:e4:1d:ea:47:57:5b:59:30:26:1e:7d:
d7:7a:5b:f5:92:5c:10:d4:8c:bd:0f:bb:eb:14:00:
45:cb:7d:0b:1e:a2:61:ab:6a:52:b9:16:52:ce:86:
b6:d1:c8:9e:50:ca:7c:75:3c:83:9e:b8:b1:6f:a0:
47:82:f7:98:b4:82:0c:c5:e1:d8:98:ec:3c:28:8b:
0d:25:a0:f9:da:c2:16:5f:bc:21:b3:d2:4b:eb:ed:
e9:d5:69:d2:94:6d:6b:1c:5f:89:93:73:36:2e:0e:
1a:62:7d:17:a0:88:e0:63:3e:e7:0e:40:c8:a0:c4:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:85:FE:4B:2E:29:E2:94:8B:6B:EB:56:28:7B:DF:F7:63:D6:56
X509v3 Authority Key Identifier:
keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:02:6f:21:2e:6d:38:ee:db:b8:63:7b:61:e7:e9:7e:d5:
f5:fe:4d:5e:72:49:31:88:25:c9:9f:e0:dc:d2:c3:0a:eb:22:
06:42:4e:5a:2b:35:1a:aa:63:5c:28:7d:37:e2:4a:68:6a:27:
dd:20:73:83:d1:f1:4e:2f:a4:9d:98:a9:1b:42:6a:ca:ec:e7:
f9:72:0c:15:d5:06:94:0c:d3:2b:df:f8:41:25:93:d7:05:1e:
cf:92:9d:c3:b6:27:12:74:57:26:87:76:ee:a4:ef:b3:4e:21:
64:ad:fc:1f:43:64:94:35:cd:50:e5:79:6d:90:c0:1e:94:8e:
c3:90:ec:46:0c:59:6c:84:d2:22:b2:96:f0:6e:b0:f6:e1:c8:
57:97:e0:84:3d:70:af:b8:60:b9:d4:8c:b3:48:b3:c0:c9:06:
0c:f7:42:d3:6f:c6:f0:17:1c:da:ae:9e:8a:05:3a:47:92:0d:
24:5d:7d:db:72:03:51:49:f9:d5:0a:b3:74:df:6f:99:08:ce:
3c:52:c6:8a:39:f7:5a:b6:1d:25:f5:c3:51:42:23:ff:31:63:
09:ef:f2:e9:d0:bc:f0:c9:e6:72:58:9f:c4:22:d2:99:ed:0c:
88:e0:e1:5d:cb:6e:c1:4c:71:40:3f:e9:dc:18:a3:f9:76:73:
49:4e:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:44:52 2024 by rpki-client on console-ams.rpki-client.org