Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: 5rfIiirRRX5DnWg9K3WsrKYzg3n5tiS7uDkcZ2W2b3A=
Subject key identifier: 6A:9C:F4:D9:70:4A:74:00:95:58:0D:52:7A:CE:D0:F9:5A:8A:17:81
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01935840313B5064D5C05E5329089891815F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 44
Signing time: Sat 23 Nov 2024 09:00:21 +0000
Manifest this update: Sat 23 Nov 2024 09:00:21 +0000
Manifest next update: Sun 24 Nov 2024 09:00:21 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: hubK8ljTfRm2D7exp7s5YnnkMLdYVavxjLf4KYyMth8=)
2: jGIXM9OvZPg4_H8x9xlj6Xwnc30.roa (hash: 2yPCKngpPBoUCNd6k1xLY7ag2PF6f8QskKD0Sx0ZxGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:31:3b:50:64:d5:c0:5e:53:29:08:98:91:81:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Nov 23 09:00:21 2024 GMT
Not After : Nov 24 09:00:21 2024 GMT
Subject: CN=6a9cf4d9704a740095580d527aced0f95a8a1781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:36:57:11:ca:5e:65:42:82:5a:14:54:03:
8e:06:3c:02:be:1e:e5:e0:d0:05:0b:5e:0d:3d:a1:
ae:2b:bf:05:e5:b1:f0:0a:db:bd:3c:0e:c4:da:05:
cc:46:23:74:bd:0f:d0:ad:da:c4:9d:d9:07:30:15:
e8:46:01:ee:b6:a9:88:d6:ca:1c:80:9e:52:5e:84:
d5:3e:95:76:ab:71:3f:c1:1c:e7:89:bd:d5:48:02:
fc:6d:bd:e4:bd:75:2e:59:d2:b7:63:2f:c4:93:21:
d2:59:80:34:06:26:62:9c:8f:61:9e:6b:f1:53:2a:
02:cd:01:7d:42:c6:2a:9f:76:ea:e9:58:5b:72:57:
ab:c1:0d:ed:8b:48:81:70:e4:13:c9:f8:23:b1:ac:
e9:83:f1:12:c2:13:5f:2f:b0:77:e1:86:7d:31:e1:
9b:ba:9b:46:0d:53:c8:b3:29:21:f5:4a:59:31:42:
67:c9:75:9a:23:65:b9:b9:76:96:d3:ac:0b:04:16:
06:38:11:cd:9f:32:e1:74:95:ef:b2:b6:b5:a5:26:
57:41:d6:bd:d0:ef:7b:53:e8:4a:a9:09:c8:97:6f:
5e:27:91:cf:83:8c:8b:24:e4:7c:d1:32:26:83:10:
7d:69:4f:d9:b7:4f:46:87:29:cf:e1:5f:6a:c9:4b:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:F4:D9:70:4A:74:00:95:58:0D:52:7A:CE:D0:F9:5A:8A:17:81
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c5:74:d9:10:03:c5:90:92:e0:86:a0:92:fd:f9:75:38:11:
e1:50:ab:ce:1a:6a:e1:31:db:f4:e8:9e:ab:17:7f:b6:b1:cd:
24:9c:c9:b9:dc:a9:f0:9d:8e:9e:9e:32:04:85:86:0e:47:f0:
b5:6e:62:43:d2:31:27:17:e0:a0:f6:6e:8e:c7:9e:db:fa:90:
70:e0:1f:80:d0:22:81:d5:7c:fe:46:85:1f:48:df:5e:d5:f1:
50:ea:e6:cc:92:32:83:35:fc:2d:0a:17:3b:f0:5d:dc:48:84:
ee:7d:ec:38:0b:83:1a:d7:58:8b:4f:11:64:11:b7:95:7f:03:
38:d3:67:1f:f2:37:3c:93:f2:15:0c:df:fd:67:d2:a7:58:7b:
c4:d6:6c:0a:c5:6a:d8:27:40:05:52:a1:7e:28:41:a5:55:a4:
33:2b:ae:49:74:0e:d5:e1:d3:cc:f1:0d:6d:b6:17:ef:f3:27:
dd:71:47:e4:f9:c4:32:b0:12:e3:0f:d6:e6:35:bf:64:ed:7a:
70:bb:cf:ae:67:46:d4:6a:2f:78:43:c7:d9:b7:07:07:08:4a:
43:c9:14:d3:3b:71:39:c9:00:7b:94:f5:31:b8:f8:20:0a:99:
8f:29:2b:7b:36:65:57:ec:d0:86:7d:f3:b1:a1:23:6c:90:51:
1e:df:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:22 2024 by rpki-client on console-fra.rpki-client.org