Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: p7ONB5700pFJO2cAxYqLJAnDJUa56c+wwttJdTZM0IM=
Subject key identifier: 88:81:69:C0:6F:C5:3D:A2:45:4F:FB:D4:DE:80:0D:8D:A2:A8:7C:41
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0193584058FF1C91E995DDD7883174B609CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0690
Signing time: Sat 23 Nov 2024 09:00:32 +0000
Manifest this update: Sat 23 Nov 2024 09:00:32 +0000
Manifest next update: Sun 24 Nov 2024 09:00:32 +0000
Files and hashes: 1: 06jlEgvibq0ceO-SPk5S_lFtcZE.roa (hash: wlcN61uyWTJoXEmuKMOlpsL1kcg7OaCl1sj7jrHVkvg=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: JbtCejNrevKuiV38rpR/9nEw10yjCFmjMJSQxKZvqV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:58:ff:1c:91:e9:95:dd:d7:88:31:74:b6:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Nov 23 09:00:32 2024 GMT
Not After : Nov 24 09:00:32 2024 GMT
Subject: CN=888169c06fc53da2454ffbd4de800d8da2a87c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:09:06:c8:4d:55:3b:1c:f6:13:46:34:2d:
88:6b:ad:a7:0b:d5:78:a5:09:0e:f7:41:49:d8:de:
ba:cf:7e:de:3a:b1:8f:1f:76:4e:ac:87:6f:4d:c9:
d6:3d:34:32:14:76:a9:25:6f:a6:68:2b:df:c0:c2:
45:d0:f4:d1:3b:8c:a3:5f:24:dc:df:cc:80:8b:5a:
93:96:45:66:36:ec:5e:c0:91:d8:de:1d:bb:74:c0:
3c:43:5b:3d:e3:48:c2:43:a1:ec:d1:72:0d:ac:24:
67:8d:c9:e1:f2:e5:97:9f:88:34:ad:d3:ec:6a:a6:
cb:7d:96:b3:23:88:4f:fe:57:7b:bd:30:79:5c:21:
1c:ee:70:a8:93:bc:71:46:1a:2a:5a:d8:8a:c9:28:
ae:71:fe:73:d8:7d:e3:46:51:77:d5:db:23:22:31:
9e:f3:e9:13:e4:83:a8:dd:50:89:e0:7d:91:b7:e8:
8a:ed:2f:4f:c6:3e:35:0c:8a:d1:19:20:6c:99:05:
d0:ac:58:7c:76:76:5b:e1:10:e5:d2:7c:99:4c:69:
15:12:01:d5:cc:7f:9e:d1:d1:07:67:d1:45:70:19:
f1:1d:e8:4f:f2:5e:05:7d:06:b3:f2:08:cb:59:1c:
02:7d:6c:32:be:95:03:a8:88:86:be:dc:d8:56:ab:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:69:C0:6F:C5:3D:A2:45:4F:FB:D4:DE:80:0D:8D:A2:A8:7C:41
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:49:eb:aa:e6:65:87:bd:4d:7c:b8:b0:41:5c:19:bf:9f:41:
b8:8e:d3:0d:cf:7d:36:0c:da:91:8f:30:b9:63:87:f5:17:3f:
91:84:6e:f4:2e:d0:47:e0:ff:17:87:81:4a:b3:d4:56:04:7a:
16:7c:77:f2:47:db:b6:c6:ed:9e:03:76:98:b7:bb:f6:9e:ed:
ae:d5:65:e5:7a:56:4f:00:30:77:82:bf:85:d9:da:30:c9:5c:
f7:d1:ff:1f:59:a8:3a:8d:96:f8:c8:19:45:03:c5:25:d6:53:
9e:b6:98:5c:9b:7f:48:44:60:c2:94:ad:76:3e:46:af:a4:24:
be:c8:b1:48:20:4e:87:3a:71:35:56:0f:38:a2:cc:8b:a0:c7:
da:40:90:9b:c5:83:44:23:09:db:f4:30:6d:0c:d2:26:27:d1:
e0:32:0c:a2:37:8d:29:f8:b7:a7:18:bd:f0:ad:b5:41:d6:18:
00:77:be:9c:d1:23:e9:4c:3f:3a:ef:43:03:7a:2d:93:2a:32:
69:25:e9:ac:8c:a1:9c:f7:1c:63:67:fd:20:ac:61:16:e2:06:
5f:31:f5:a7:ee:e1:c2:27:6f:30:09:f7:96:a9:c9:7a:66:ca:
0c:b6:1f:04:fb:d6:2a:88:3b:40:da:0f:f8:f8:15:f7:d1:ae:
a0:92:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:37 2024 by rpki-client on console-ams.rpki-client.org