Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
File: FlazvdJs8CcTOSyn3Vnq9czsEhE.mft (raw, json)
Hash identifier: jmMB9YN+0EKgWnLtPQdY3pwrvSRAlmJyDEyOtaV1l1s=
Subject key identifier: A8:0F:D3:5D:67:70:2E:33:04:C3:49:1E:85:2B:76:7F:DB:D6:A9:47
Authority key identifier: 16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
Certificate issuer: /CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Certificate serial: 01936A7DB619E2599E2E00C8EB1F07C42A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
Manifest number: 0899
Signing time: Tue 26 Nov 2024 22:00:43 +0000
Manifest this update: Tue 26 Nov 2024 22:00:43 +0000
Manifest next update: Wed 27 Nov 2024 22:00:43 +0000
Files and hashes: 1: FlazvdJs8CcTOSyn3Vnq9czsEhE.crl (hash: VjlBsRtHAoIP0u68uxLM1V8+lv3eS1I/B0dkW99CWVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b6:19:e2:59:9e:2e:00:c8:eb:1f:07:c4:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Validity
Not Before: Nov 26 22:00:43 2024 GMT
Not After : Nov 27 22:00:43 2024 GMT
Subject: CN=a80fd35d67702e3304c3491e852b767fdbd6a947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:e9:e1:53:a0:67:d3:2b:76:38:29:a2:2b:
8e:59:1a:ff:36:5c:a7:17:c7:33:f6:f3:32:31:e5:
13:25:7a:52:db:15:9f:57:7c:1f:82:da:33:9f:0e:
83:00:6f:94:85:6f:4a:fe:94:a5:4e:58:c0:ea:90:
f1:c7:26:c2:dd:69:0c:41:99:c7:66:dd:94:15:20:
c5:31:33:7b:f0:5e:a5:9a:45:80:1f:5d:88:fa:9e:
07:70:22:04:9f:97:09:f1:ee:67:0b:6d:f2:7f:21:
9a:17:ac:3b:7e:e7:a7:22:08:64:36:29:c9:95:85:
87:b9:2b:04:20:40:75:c6:a9:0c:12:62:f6:bf:85:
63:97:22:24:a4:de:8a:d7:86:50:8d:30:de:57:94:
a8:ef:44:a8:fe:75:6e:12:db:4e:cb:e2:a0:79:18:
3f:56:7c:e8:05:fc:4d:e9:b8:ed:5f:ad:a7:f5:26:
93:0b:ab:69:eb:85:7a:2e:7c:fd:c4:5b:74:b2:0a:
71:0a:51:c6:19:a6:ba:71:90:8d:51:19:78:ab:66:
fe:af:51:13:83:8a:bf:e6:89:13:f0:ce:8b:cb:3c:
d8:36:a9:2b:42:ce:ad:2a:e4:74:36:c7:91:f4:c0:
7c:0a:0f:b9:d2:33:e4:56:07:16:dc:9a:21:59:a4:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:D3:5D:67:70:2E:33:04:C3:49:1E:85:2B:76:7F:DB:D6:A9:47
X509v3 Authority Key Identifier:
keyid:16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:6a:d2:bd:b5:58:98:1e:f7:b5:7b:0a:b4:5a:ab:54:88:
8c:24:17:00:e4:3d:02:ce:ce:97:2f:c5:bb:c7:69:af:c4:3f:
45:b0:0f:fa:e6:77:4e:36:d5:4f:a5:bd:6f:83:58:bd:79:b0:
78:77:8e:af:b3:2d:99:28:92:77:e0:2c:05:3c:22:ff:79:50:
01:78:f2:52:4d:71:70:a5:0d:aa:d0:c2:ea:af:5f:ce:91:a7:
06:66:a1:92:1b:7a:5f:d9:1e:24:f4:34:b2:33:29:b2:a8:88:
77:0c:4b:24:84:92:f7:6e:4f:ae:11:1a:fe:05:eb:d1:2a:96:
92:91:83:c0:a2:e3:02:ef:71:f8:8d:db:24:a3:c2:6d:1f:04:
57:36:f7:ba:6f:74:da:f3:1b:e7:77:32:f7:8a:8e:50:d8:c2:
41:fa:d8:da:af:da:c2:ea:ae:4c:66:8a:8b:ed:a0:85:6e:cb:
70:3b:2c:42:b0:2c:e3:58:24:c9:13:d5:ce:ad:25:ac:d9:98:
63:07:ef:b9:03:07:f9:bf:b5:d0:f3:2f:05:bf:41:5a:bc:d4:
82:fc:d6:6a:f7:a5:58:93:a3:09:69:ff:7c:53:9d:bf:62:d4:
ed:96:4b:15:73:4b:d3:fd:c2:b7:ad:d6:5d:da:52:83:9f:2d:
b6:05:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:31 2024 by rpki-client on console-ams.rpki-client.org