Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: vlPbaOuZIx3Qox60B58XVHDfQDdLNr7+vfVGOcyQHWE=
Subject key identifier: 42:31:DF:D6:69:F4:B3:3D:88:BA:FE:04:46:C2:D4:E5:12:3B:44:7F
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0193550848B2F2062CE7F0354F80C268B749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1348
Signing time: Fri 22 Nov 2024 18:00:26 +0000
Manifest this update: Fri 22 Nov 2024 18:00:26 +0000
Manifest next update: Sat 23 Nov 2024 18:00:26 +0000
Files and hashes: 1: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: I75JiLTEObBq3Gram+Pzp7JTHsnSGt/tj3hB1PmvU84=)
2: fFgtbnHctJVUXeCViDihNjaAwbk.roa (hash: jsSCl8nzx07tptfUnKmO2wNC/yu+Cu6KesL4SpUardc=)
3: fyq7C57RYZBzlsjMBAhIwRXOIXE.roa (hash: 2wDNE0IkxGSv5FGJGagl1MR3dP0Xyal4mzFhIXOAwbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:48:b2:f2:06:2c:e7:f0:35:4f:80:c2:68:b7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Nov 22 18:00:26 2024 GMT
Not After : Nov 23 18:00:26 2024 GMT
Subject: CN=4231dfd669f4b33d88bafe0446c2d4e5123b447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:2d:94:df:0e:fb:ff:d6:01:95:8d:f1:70:
e9:49:e2:d6:94:96:9e:b0:fd:1b:b4:f6:ea:54:99:
21:cc:5f:e0:74:e8:20:07:92:8f:c0:02:eb:28:77:
f1:e7:f6:b1:08:d5:11:24:94:66:b6:c1:fa:50:40:
f0:88:4c:aa:c7:4d:e8:3f:98:29:ac:70:30:01:6e:
9f:79:17:db:78:6c:6e:d7:44:85:53:74:1e:39:36:
57:b2:0a:2b:82:29:d9:d0:94:14:0a:cc:70:a4:75:
b5:d0:fe:18:82:5d:b3:4c:f5:0d:89:3c:7f:22:ed:
71:ed:65:4e:72:4d:1b:a6:96:21:d4:ad:29:0e:f1:
3b:a1:b3:20:f5:81:81:b8:54:c8:9c:81:29:b4:56:
78:e2:f5:b2:4c:ed:f6:61:a0:1c:34:04:3a:31:50:
10:2c:ca:87:81:4d:51:79:69:44:04:e5:b6:24:aa:
24:c2:48:ea:21:8f:6f:ce:51:14:ad:b4:20:8c:f1:
56:06:6e:a9:ae:76:29:48:bf:d9:c6:cf:a8:db:d2:
74:a3:ed:0e:a9:95:23:e7:6b:d6:c9:8d:b5:fe:19:
09:2a:b1:e3:8c:8c:79:0a:2f:5b:55:93:07:fb:38:
1d:63:25:1a:91:99:00:38:f7:d6:f8:fc:d7:75:29:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:DF:D6:69:F4:B3:3D:88:BA:FE:04:46:C2:D4:E5:12:3B:44:7F
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:4c:48:59:fa:2c:f7:3b:0a:44:e1:08:25:e2:4d:59:d8:
6f:89:d5:d1:5d:e8:14:3d:e2:15:57:96:77:bb:fc:23:3b:2e:
92:01:57:27:72:32:d6:0a:0a:16:8f:c2:da:0b:d9:ba:d4:db:
89:9f:ed:d6:e2:ed:77:35:f3:84:23:c9:28:67:4d:7d:45:18:
82:1c:3c:d4:9b:a2:cb:cb:76:16:68:27:e9:df:53:20:20:0f:
e6:26:cd:3c:f0:5d:91:bb:0b:1e:ae:67:1b:90:18:8f:49:d3:
f0:82:eb:07:b4:26:60:19:3b:be:ac:26:12:21:92:a0:d1:cc:
ad:48:e2:5d:56:cc:ff:89:ba:73:5e:a8:1b:c6:a8:4a:a0:62:
1e:60:78:74:d2:e2:5f:8f:0b:b3:d5:e5:87:e0:63:3f:e9:c8:
f1:98:33:9f:4f:d6:98:8f:f0:61:65:f2:b1:9e:ac:3e:b3:a1:
d2:de:94:06:63:a5:7d:09:4c:49:30:75:d2:9c:4b:b9:f8:48:
59:97:54:59:3f:42:e9:4c:4c:a1:d7:41:78:f4:36:e6:06:ec:
5f:2d:82:51:f2:17:b8:b4:4e:ca:28:9b:2a:d4:98:13:a6:f9:
3f:35:0c:92:d7:cb:ab:70:10:05:79:3d:99:77:a9:b9:ca:67:
d5:05:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:34 2024 by rpki-client on console-fra.rpki-client.org