Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: o41+0K12VnCkJK327Z2SzGEfv69FOpcPfffnxTQxbfg=
Subject key identifier: 3B:18:ED:6D:42:98:9C:92:25:31:1B:74:5A:25:AE:75:2E:21:36:BF
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0193568AC47E9CB73304F6A2762A261862A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0892
Signing time: Sat 23 Nov 2024 01:02:34 +0000
Manifest this update: Sat 23 Nov 2024 01:02:34 +0000
Manifest next update: Sun 24 Nov 2024 01:02:34 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: P+9wKmixeOfGvtcQrWm7/9Wa/20Sq9dYkrIHUlFHlEs=)
2: dyne9Sx2gtO_5CKucfL9pG0knkA.roa (hash: qUlp33TWV6qvVNboKZPBhYQrQYy3BM2MXLvanrwWGlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:c4:7e:9c:b7:33:04:f6:a2:76:2a:26:18:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Nov 23 01:02:34 2024 GMT
Not After : Nov 24 01:02:34 2024 GMT
Subject: CN=3b18ed6d42989c9225311b745a25ae752e2136bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:6b:9c:01:d1:3c:1d:c6:71:06:d1:d4:4d:
5d:70:0e:f9:9f:fe:6f:69:33:ac:20:f1:bb:54:f1:
25:fc:0e:49:f0:32:b3:3c:23:cd:47:af:8b:70:e8:
4f:71:e6:b4:71:75:74:28:82:d8:31:91:01:ed:da:
d0:59:b4:a6:75:90:d1:28:88:fd:d8:99:29:4c:b3:
40:bc:14:5c:a8:ed:e4:c0:66:b2:ea:e2:f4:0e:09:
d2:29:d3:16:17:d5:c8:3e:b2:b4:e1:cb:28:7d:3d:
59:fb:de:93:31:8c:0c:22:e7:ea:b9:97:c5:5a:ae:
fa:d4:ae:eb:c0:30:b8:0f:04:47:b6:10:9a:ad:ca:
92:ea:cb:41:e4:a3:f1:81:bd:31:b2:a4:18:18:9f:
c6:97:83:dc:ee:c3:1a:eb:59:d3:e7:f7:54:1b:cd:
9e:63:5b:2e:41:96:4c:56:d2:4f:8a:82:0b:92:37:
c7:29:20:b3:9f:9e:f5:d1:44:82:98:28:12:dc:68:
9b:5d:de:fa:3e:ba:d2:c1:97:42:b7:6c:ca:06:a8:
fb:95:b3:a0:01:e4:21:48:9d:94:08:9f:87:01:67:
10:b9:2c:10:f8:4b:76:05:dd:39:c0:fc:08:49:8b:
c6:b3:5c:b0:53:61:c8:95:80:e3:81:5e:1a:7e:37:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:ED:6D:42:98:9C:92:25:31:1B:74:5A:25:AE:75:2E:21:36:BF
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:62:7a:41:96:ce:ca:85:39:ea:1e:77:8a:ce:ad:e5:a3:78:
e1:48:87:c6:49:38:15:16:1b:f5:ed:fb:2d:b6:2e:e2:1f:68:
5c:c8:f4:de:53:62:93:e4:71:80:3c:b7:99:aa:73:1b:64:ee:
54:a0:6a:8b:11:5e:d0:13:ae:03:20:29:a1:aa:94:9a:b8:16:
b1:0c:bb:da:2d:42:df:b3:ca:67:48:34:1f:4c:09:f1:1f:d4:
2d:4e:32:51:9c:7a:bb:93:11:3a:3a:10:eb:96:39:3a:31:43:
43:98:30:1a:bc:a0:81:b9:2c:1a:b8:46:3d:07:18:48:cf:96:
42:93:6a:5d:2d:a9:b8:6a:82:04:84:c2:c6:e6:db:bd:d3:21:
f7:46:08:20:3d:6e:fd:b6:c7:ac:ee:ec:4a:4c:ea:bf:9c:19:
3f:0d:1a:c5:08:9e:be:14:93:59:f9:ca:5f:e1:9a:f3:bd:e4:
9f:c8:a4:05:de:f0:aa:da:c3:ad:37:f1:e1:eb:c5:ba:33:27:
bf:f9:f5:23:39:95:cc:25:20:bf:6d:08:c5:c7:52:58:6d:31:
db:34:d3:f7:05:de:a2:95:fb:57:6b:3b:53:8c:29:de:e8:43:
e1:35:f1:d8:26:81:dc:c1:04:59:9c:63:11:72:93:01:06:27:
d7:3f:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:28 2024 by rpki-client on console-fra.rpki-client.org