Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: ++PFQrAH5NDEU5+tXY5+n5qOW/ltyLpmujUzdVzkD0k=
Subject key identifier: 42:B2:BA:19:33:A5:E7:89:19:22:F2:33:2E:9B:FF:E9:07:31:95:23
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0193579B74C3DAE8570EA92ED4964FA62946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 06:00:25 +0000
Manifest this update: Sat 23 Nov 2024 06:00:25 +0000
Manifest next update: Sun 24 Nov 2024 06:00:25 +0000
Files and hashes: 1: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: 9GLGsCHi216F6lMf6fkVm00FyO0MEEFF6S5n1E+GHsY=)
2: vBeJnbNsHe37C2uiq6Nl1zh7Tdk.roa (hash: z8OEk2N6HSbr68ARrECroyTOJ1JEYw0YZyP3m7sgrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:74:c3:da:e8:57:0e:a9:2e:d4:96:4f:a6:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Nov 23 06:00:25 2024 GMT
Not After : Nov 24 06:00:25 2024 GMT
Subject: CN=42b2ba1933a5e7891922f2332e9bffe907319523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:9d:01:2e:93:81:d2:29:45:d5:43:f2:98:
f7:f6:a1:12:5d:49:a3:8a:50:76:ba:8b:de:81:f0:
5f:fe:a5:a7:7a:73:e0:fe:df:56:14:8b:07:20:7b:
d0:11:37:57:b0:35:77:d9:64:ab:d6:93:b1:86:10:
19:2d:33:b1:1d:f8:6d:97:95:b0:b5:cc:4b:f1:62:
8d:0f:e3:e8:55:81:d0:5e:d7:8b:b6:19:48:d1:aa:
9e:42:75:35:7a:14:d9:a9:5b:97:eb:de:c3:22:b8:
e5:ca:bc:3a:bc:55:d3:eb:a0:0b:38:5a:97:b1:83:
b0:98:94:ab:55:6d:a4:95:60:79:b9:2a:99:cf:c1:
a7:a8:79:6a:c3:10:84:1a:a6:fa:e3:a0:c0:f0:ca:
94:0b:b4:2c:9e:f6:66:b4:e7:e9:15:5f:ba:65:bb:
4b:9c:d1:74:2c:2f:39:e4:93:00:2a:b7:2a:ef:2c:
ff:c2:d0:fb:54:8f:4b:f4:65:cb:c3:3d:8f:e0:50:
16:05:ec:8d:9a:08:fb:61:83:67:3f:bb:c9:bf:de:
c0:b1:09:fb:34:0f:ce:c1:74:b7:43:f6:38:db:8d:
69:d9:0f:c2:a9:c7:0b:d5:ff:85:1f:86:03:87:f9:
21:1d:e8:5c:77:30:a0:9c:fe:58:1a:18:97:5e:b9:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:BA:19:33:A5:E7:89:19:22:F2:33:2E:9B:FF:E9:07:31:95:23
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9c:fc:0a:fb:31:d4:eb:e0:34:b0:c7:af:da:b3:97:15:72:
95:93:0f:f7:f5:19:55:86:a9:e8:4b:94:8b:32:1c:eb:ce:0d:
14:dd:70:2e:5d:ce:9d:21:2a:78:68:94:c0:d4:ac:6e:0a:5f:
6b:5d:4d:90:6d:e9:b0:45:0b:0c:a0:3f:fd:9d:e8:9a:94:01:
fd:a5:a6:56:6e:fc:e8:c6:93:53:33:df:b0:35:b1:83:5e:21:
56:5f:34:ce:72:44:e7:73:f3:60:75:4f:95:b4:54:54:bf:96:
fa:f4:2c:b1:3f:ea:82:6a:81:6b:4b:3a:88:49:81:f3:aa:3b:
5f:c9:72:49:30:78:38:f0:b2:59:6a:c5:bd:4b:9b:4e:d4:70:
09:64:f2:04:4b:d2:a3:58:bd:df:59:92:b6:3c:1a:c0:c2:3c:
87:18:55:90:4a:4c:ac:2c:d3:98:a4:d5:76:1a:33:94:a0:ae:
8f:39:a5:3a:0e:b2:d2:8f:11:02:47:3c:5b:fb:ff:69:09:6c:
11:03:b5:df:bd:e6:db:a9:8f:c4:fc:c8:3f:60:39:b2:e0:03:
41:b3:c8:27:34:60:64:ba:bb:68:09:b7:f0:57:65:54:bf:33:
d6:15:5d:9d:39:b2:bf:d0:b6:5d:6e:fb:df:62:76:52:2e:e7:
b1:7e:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:09 2024 by rpki-client on console-fra.rpki-client.org