Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: VPO0GRiDwC4ZO54RoMdXjNULPCPwsVDM311f6/WBo1M=
Subject key identifier: B5:C2:D1:05:C3:D7:C0:86:55:28:8C:46:7A:48:C8:BB:3D:7E:A3:50
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 01936A7D5FA1C277D5A0EEB731CF812EDC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0A6F
Signing time: Tue 26 Nov 2024 22:00:21 +0000
Manifest this update: Tue 26 Nov 2024 22:00:21 +0000
Manifest next update: Wed 27 Nov 2024 22:00:21 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: sxzji3sbO2jLeGDNLXGEpBNm7mJH71xuq2DZ73XGnRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:5f:a1:c2:77:d5:a0:ee:b7:31:cf:81:2e:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Nov 26 22:00:21 2024 GMT
Not After : Nov 27 22:00:21 2024 GMT
Subject: CN=b5c2d105c3d7c08655288c467a48c8bb3d7ea350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:b1:d9:d3:76:00:a8:25:a4:9d:5a:ec:de:
de:a7:9b:62:0a:b8:12:56:bc:d9:95:da:27:93:43:
71:b1:b1:e7:ec:8f:b0:36:d0:42:a0:16:2f:d0:2e:
36:38:a8:53:8f:c6:85:69:48:9a:4a:fa:ab:93:cc:
13:21:02:0a:02:cf:07:f6:9c:ec:79:23:b3:c6:7c:
92:40:e2:fb:04:bd:40:66:43:da:b8:55:05:27:d5:
0b:a6:ae:fe:90:c4:18:39:f4:39:e2:05:d1:30:78:
74:2b:a3:04:94:2f:8d:e1:b9:cf:4d:26:ff:33:09:
53:ea:04:56:71:2a:d3:79:b4:2c:63:d9:8f:8f:a2:
09:0d:88:f6:80:5c:30:28:6c:5e:26:bf:3a:5f:36:
42:d5:f0:8c:87:4a:cc:5b:d3:47:79:4e:77:45:f0:
a6:e7:6a:be:c6:f0:6f:67:0a:f7:63:a0:cf:d2:9b:
38:3e:86:89:cc:62:54:b6:81:b6:17:54:4a:0d:f4:
3e:dc:b2:d3:9c:45:75:95:03:4c:b0:b4:ab:d6:37:
d2:ea:5a:ef:82:95:20:82:60:5b:27:9c:60:4f:31:
4b:db:3d:73:c2:f4:80:41:a7:ac:50:66:80:56:a2:
82:21:41:26:13:94:b9:78:5c:d3:e0:03:6f:5c:2f:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:D1:05:C3:D7:C0:86:55:28:8C:46:7A:48:C8:BB:3D:7E:A3:50
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:65:bc:d6:ef:13:52:3b:9a:dd:28:6c:20:c8:50:99:ed:
3a:f2:21:4b:5d:e1:e0:8b:09:a7:e9:48:aa:72:ef:e7:32:f8:
a2:fd:75:3d:aa:a6:48:c7:5a:bc:e7:71:b7:e2:e2:ad:4a:d6:
9f:06:ed:79:40:7a:f4:fb:9e:b1:6d:af:4b:24:c7:b3:5d:6b:
22:01:36:8f:22:00:59:7a:22:31:80:07:20:c4:5a:ca:fc:fb:
e8:27:4e:e1:05:e2:0c:33:fc:42:72:a6:d8:d2:88:0d:1b:5e:
fc:f1:6b:a1:55:d0:b1:2c:99:f4:b8:0f:e5:5d:3d:c7:50:e0:
5a:50:24:3e:45:ba:79:f6:e5:1d:b3:5f:16:a7:27:60:ad:32:
58:b2:aa:d6:f2:fb:d6:fa:55:4d:67:5b:c3:65:76:af:f6:ed:
c0:60:c2:a0:76:6b:31:a5:30:ec:1a:39:f2:a1:ab:19:d8:bf:
8b:7b:18:a0:ca:bf:35:8d:65:48:55:7a:ad:fe:52:e1:ee:a6:
54:7d:4d:7c:8a:ef:ca:60:65:10:f1:5b:cd:8c:5a:b3:ed:9c:
7e:a9:98:96:cb:ad:cd:96:2e:89:7b:c5:4a:94:fb:a6:8d:90:
40:89:4f:13:bb:a0:f5:61:af:b6:7c:35:67:e9:9b:ec:60:31:
d5:b5:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:12 2024 by rpki-client on console-ams.rpki-client.org