Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: Zy39tMVYxrIAAP6quJG9IKhNWzrrDP/8rFKDNFghg5A=
Subject key identifier: 02:B5:1F:5B:3C:93:29:92:75:1A:AB:8D:92:5F:E9:04:48:3C:1B:49
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019369D8D4630DD005AD3E17DF8E668C3F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 19:00:37 +0000
Manifest this update: Tue 26 Nov 2024 19:00:37 +0000
Manifest next update: Wed 27 Nov 2024 19:00:37 +0000
Files and hashes: 1: KIGZ9IfxocWm-0h0xo1FYKgUj3k.roa (hash: Jz2Vzn5SmBA3xSCW5L7Dzt9trl1Q8S4SNw0x6jF6jS8=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: RtCXs2XezLTIaeLRRq+Bam8dZcc7/tiWvJnVQ2HXFb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:d4:63:0d:d0:05:ad:3e:17:df:8e:66:8c:3f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Nov 26 19:00:37 2024 GMT
Not After : Nov 27 19:00:37 2024 GMT
Subject: CN=02b51f5b3c932992751aab8d925fe904483c1b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:5b:2c:08:8c:ed:1f:f1:3e:86:be:ab:d2:
7f:3b:0b:9e:79:77:e4:0c:ae:d3:ee:e2:ee:da:48:
dd:97:51:65:28:11:0a:26:c5:49:29:65:9b:95:84:
9a:05:99:37:24:75:52:fc:d2:a3:43:16:77:4a:88:
ea:bc:33:5e:ac:0b:5e:05:58:49:b9:25:c9:20:f1:
2b:12:e3:b9:9f:7c:ab:37:59:1a:e8:4d:2c:53:f3:
73:3b:71:20:78:ea:8a:a4:c5:22:75:e5:10:ed:01:
fd:b9:fb:56:18:e3:b3:f8:d4:c9:82:9c:7e:33:02:
4a:bb:35:fd:30:19:45:e5:02:fa:4f:20:26:85:d7:
7a:de:b3:fe:f5:d1:de:0c:82:83:d5:78:27:55:0b:
a2:a3:76:bf:89:11:9a:33:73:ba:0b:8a:89:97:de:
85:5b:bd:7b:46:6a:c6:67:6e:48:2c:bb:32:6a:c4:
3e:29:3b:76:9f:1f:56:bd:de:dc:97:fc:d9:96:9d:
9f:c9:96:2a:ed:36:05:a5:5a:c8:9a:3e:95:ab:cb:
f0:4b:24:cf:23:17:58:7b:e2:3e:b0:d6:65:9b:6e:
65:ce:3d:c4:fb:3c:8c:99:c6:5a:5f:47:f9:20:81:
0e:bd:58:1f:b9:b0:eb:9b:b0:2e:9d:66:16:b5:39:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:1F:5B:3C:93:29:92:75:1A:AB:8D:92:5F:E9:04:48:3C:1B:49
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:19:87:ce:9f:3a:12:d7:ff:10:26:65:2f:1d:2a:2e:5c:42:
32:d9:cc:dc:f6:8b:9c:62:8d:5b:a1:0c:5d:8f:39:5b:5b:30:
58:fe:97:cd:3a:23:88:35:24:33:49:35:26:70:3e:c1:ca:e8:
fc:78:cc:c6:1d:30:07:8c:6d:44:47:71:f9:f4:9b:31:8b:d6:
09:6c:de:67:6c:49:2a:16:95:1b:76:79:1e:71:28:06:e3:b2:
a1:48:a3:0b:d1:17:96:b6:32:5e:88:19:ae:86:75:1f:95:40:
e5:cc:e8:6e:83:c8:aa:d0:bf:4f:cc:04:bd:7b:dd:c6:d2:5d:
d9:e3:44:56:63:99:4a:62:b6:f8:46:fd:73:42:2a:09:eb:d2:
9f:21:9c:dc:fc:5f:94:89:da:3b:04:15:e7:d6:e8:7f:a7:f6:
3b:cd:29:2d:69:0c:f4:aa:4f:ea:f0:c1:47:0c:e0:13:84:cc:
eb:03:bd:78:f7:6d:f5:9c:28:e7:4a:9a:47:70:d9:1b:8e:e9:
68:cf:89:0b:e4:f0:bd:78:1e:1b:92:70:49:bf:b6:22:1f:e5:
9e:68:98:c1:52:3e:29:d9:b7:3d:3d:2e:93:de:ab:bb:74:94:
51:3b:b0:44:86:c6:e9:80:74:8a:b0:ea:be:6f:44:1b:dd:f6:
36:9e:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:58 2024 by rpki-client on console-ams.rpki-client.org