Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier: 6oAvnl8nlrJy/jGsL/mZUO8w0DDVBakMC5TuytOxrsk=
Subject key identifier: 32:57:AF:24:76:EE:BF:96:F7:EE:10:79:2B:2E:51:AF:4A:D3:03:68
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 019369DA330A56B7EFAD42741548A81DB2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number: 133C
Signing time: Tue 26 Nov 2024 19:02:07 +0000
Manifest this update: Tue 26 Nov 2024 19:02:07 +0000
Manifest next update: Wed 27 Nov 2024 19:02:07 +0000
Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: KjXWNRbH8fDBiG2sL8JGP+fCCKJEksTKO7pJr+q3gGc=)
2: i6YnZQMCRaAdUUevKf3lqGfn55I.roa (hash: zhIjzuwm8iRPElryed+eRVX1uUzRx4FO2Yk+WYH6hFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:33:0a:56:b7:ef:ad:42:74:15:48:a8:1d:b2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Nov 26 19:02:07 2024 GMT
Not After : Nov 27 19:02:07 2024 GMT
Subject: CN=3257af2476eebf96f7ee10792b2e51af4ad30368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:fc:d8:45:aa:d9:05:fe:7a:7b:d5:9e:8b:
c1:7b:32:3b:b6:9d:d2:06:f4:ee:9c:0b:c4:21:3a:
fb:16:f4:81:33:59:ef:1f:0c:ac:9e:ab:70:77:da:
66:b2:bb:78:d4:fb:40:c2:21:86:01:90:34:05:94:
a5:e0:ae:3f:76:4c:78:d2:3b:cf:cf:3d:b8:81:84:
20:04:34:91:b9:52:de:63:7e:c2:8b:d9:a4:aa:c6:
c5:4c:12:c9:6e:5f:63:94:b8:70:e4:54:73:d6:61:
7c:83:15:c0:97:e4:63:1d:d8:ef:a9:4a:14:28:92:
a6:12:97:06:37:9b:05:e3:ae:8b:0d:c6:62:25:f6:
6c:24:05:92:60:c7:0b:f0:82:cc:e2:fa:30:b5:e5:
f8:d7:4b:86:40:fe:06:35:7f:3e:6f:26:ce:60:34:
ec:12:04:bf:8f:48:16:e2:3d:e8:0f:bc:d3:8a:5f:
9b:38:72:6d:3f:11:ff:20:2d:9a:62:c3:51:5b:be:
da:7d:ec:17:29:ac:a9:ae:10:15:80:a8:73:41:9a:
6b:61:92:36:fb:c1:4d:af:26:99:0a:3a:cd:19:4c:
49:34:65:e4:ee:05:02:68:39:de:55:1a:c2:63:e7:
b3:54:80:49:a8:e7:4c:cf:23:e0:6d:1a:33:d4:53:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:57:AF:24:76:EE:BF:96:F7:EE:10:79:2B:2E:51:AF:4A:D3:03:68
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6e:f5:cd:14:39:cf:e4:67:e4:f7:ae:6a:13:fb:74:7b:68:
40:93:e6:d0:b5:4c:e4:cd:0d:4a:47:18:49:8d:33:27:13:63:
e8:f2:46:10:dd:52:eb:5c:46:34:8c:12:9a:a2:8e:14:32:8a:
8e:e3:64:cf:00:43:13:e8:cf:e6:f5:6e:35:43:58:69:60:78:
a2:e3:5e:97:b0:cc:62:d0:f6:e2:df:cb:bd:70:25:da:c9:19:
8c:e0:f7:31:52:39:35:c3:15:03:d4:04:b7:7d:4e:9e:f6:26:
8f:50:6e:94:4f:fa:68:ec:8e:82:82:13:49:d3:e7:65:8f:51:
d3:df:86:fe:1d:a1:19:27:7b:58:6d:67:e0:f1:19:0c:4b:3b:
01:09:2e:06:e8:21:76:63:89:1f:30:60:a2:ae:13:db:42:62:
cd:23:a2:fc:2c:f8:24:78:39:90:0d:89:e7:9d:fb:56:8e:62:
0b:45:ca:84:5d:7f:36:4a:b7:1a:df:f1:7b:31:a5:6c:c7:4b:
17:03:96:56:f4:b7:23:b5:c0:62:89:b0:5a:af:f0:ec:36:30:
3a:9d:e3:d4:b4:a7:dc:ea:a7:3a:5c:4a:e1:ae:18:89:72:d8:
3b:f3:29:8e:09:b9:6c:6e:c2:16:70:5e:97:61:82:05:ae:12:
1a:bf:c1:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2jMKVrfvrUJ0FUioHbLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5
MWMxZDEwHhcNMjQxMTI2MTkwMjA3WhcNMjQxMTI3MTkwMjA3WjAzMTEwLwYDVQQD
EygzMjU3YWYyNDc2ZWViZjk2ZjdlZTEwNzkyYjJlNTFhZjRhZDMwMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEn82EWq2QX+envVnovBezI7tp3S
BvTunAvEITr7FvSBM1nvHwysnqtwd9pmsrt41PtAwiGGAZA0BZSl4K4/dkx40jvP
zz24gYQgBDSRuVLeY37Ci9mkqsbFTBLJbl9jlLhw5FRz1mF8gxXAl+RjHdjvqUoU
KJKmEpcGN5sF466LDcZiJfZsJAWSYMcL8ILM4vowteX410uGQP4GNX8+bybOYDTs
EgS/j0gW4j3oD7zTil+bOHJtPxH/IC2aYsNRW77afewXKayprhAVgKhzQZprYZI2
+8FNryaZCjrNGUxJNGXk7gUCaDneVRrCY+ezVIBJqOdMzyPgbRoz1FNpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJXryR27r+W9+4QeSsuUa9K0wNoMB8GA1UdIwQY
MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt
YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1
LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW271zRQ5
z+Rn5PeuahP7dHtoQJPm0LVM5M0NSkcYSY0zJxNj6PJGEN1S61xGNIwSmqKOFDKK
juNkzwBDE+jP5vVuNUNYaWB4ouNel7DMYtD24t/LvXAl2skZjOD3MVI5NcMVA9QE
t31OnvYmj1BulE/6aOyOgoITSdPnZY9R09+G/h2hGSd7WG1n4PEZDEs7AQkuBugh
dmOJHzBgoq4T20JizSOi/Cz4JHg5kA2J5537Vo5iC0XKhF1/Nkq3Gt/xezGlbMdL
FwOWVvS3I7XAYomwWq/w7DYwOp3j1LSn3OqnOlxK4a4YiXLYO/Mpjgm5bG7CFnBe
l2GCBa4SGr/BWw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:34 2024 by rpki-client on console-fra.rpki-client.org