Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
File: KYXMQ9gGohtjMwIZ62OLsbpJroA.mft (raw, json)
Hash identifier: FdgnROC1p2BrErHoi7sjpyGmXznFiElv6lnM1zQDQ3Q=
Subject key identifier: 00:2B:EB:37:DE:39:05:D7:9D:61:BB:D3:23:CF:82:A6:0A:CD:A8:56
Authority key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
Certificate issuer: /CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Certificate serial: 019358AE11BF320529348D967F157B3A8924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
Manifest number: 015A
Signing time: Sat 23 Nov 2024 11:00:22 +0000
Manifest this update: Sat 23 Nov 2024 11:00:22 +0000
Manifest next update: Sun 24 Nov 2024 11:00:22 +0000
Files and hashes: 1: KYXMQ9gGohtjMwIZ62OLsbpJroA.crl (hash: xUEsqZN1n69SHkSBQb7Y92sZ6SzB9dyDR1jtBOf3Mf8=)
2: LUrdHzgS_l7_WngQRohJ8cfyZLU.roa (hash: YtI+3yX+mtgRv4ToNHxHVZ2z3gKS8ImseWRP9Kb2J/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:ae:11:bf:32:05:29:34:8d:96:7f:15:7b:3a:89:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2985cc43d806a21b63330219eb638bb1ba49ae80
Validity
Not Before: Nov 23 11:00:22 2024 GMT
Not After : Nov 24 11:00:22 2024 GMT
Subject: CN=002beb37de3905d79d61bbd323cf82a60acda856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:55:fb:15:a1:84:0c:9e:fb:d7:1c:8c:a6:
bd:f0:39:94:9b:63:d4:c9:08:a3:fb:e0:4e:d5:12:
78:f4:af:e8:c8:64:78:6c:15:67:5d:3c:64:09:5f:
b0:b1:5f:0a:e6:5f:f4:f7:5a:48:43:86:28:c0:79:
c8:b4:35:36:e1:73:f8:f3:04:d4:7e:f9:03:96:af:
08:04:1a:be:41:08:52:de:f1:0b:71:2c:e2:cd:78:
c1:9a:ff:01:02:25:80:15:9f:f3:42:97:7f:99:fc:
44:62:dc:ee:86:94:a3:ee:d5:0a:59:78:38:48:8d:
41:57:ca:2b:39:39:93:ca:e5:10:42:f8:ff:71:d8:
32:b3:ac:7a:4b:f9:67:92:3e:d4:25:f1:cb:15:5f:
99:e6:91:93:2d:59:36:45:04:bf:1d:53:a3:b6:e1:
5f:e5:94:a2:be:fa:12:02:03:c3:b5:e5:c7:04:02:
b4:d2:ff:fb:4c:d4:9e:f7:04:31:56:9e:1f:c4:7a:
79:52:3c:c9:43:00:6b:f5:2d:ef:42:79:a1:f3:9e:
28:95:20:52:83:18:82:d6:c0:05:41:94:3b:60:be:
f9:ad:b6:33:40:39:9a:9b:ee:67:0a:d6:3d:14:50:
07:35:e2:5d:af:ef:9e:52:6e:0e:7d:bc:79:a4:c0:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:EB:37:DE:39:05:D7:9D:61:BB:D3:23:CF:82:A6:0A:CD:A8:56
X509v3 Authority Key Identifier:
keyid:29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:61:5f:ab:2d:e9:56:57:00:6d:8d:d7:bb:bf:99:54:6c:
f7:a7:9a:e9:ef:8f:18:0b:f9:bf:5c:95:f9:26:89:bd:2d:14:
19:8a:0e:94:35:a1:9e:c9:d2:9c:c4:2d:71:7a:56:19:51:77:
2c:87:c6:04:79:2a:f5:34:2c:59:30:84:e5:2d:07:e7:a7:6a:
34:0a:10:97:fd:fa:b4:7f:d1:41:79:d8:da:d8:60:0a:a0:9c:
1d:af:62:e3:a2:e7:82:40:74:d8:bc:5d:e5:73:8e:5f:8e:d6:
e5:8b:d5:b9:9f:15:aa:5c:e0:28:a2:29:d7:07:0c:81:29:ee:
73:9c:79:ae:c2:11:7a:b1:90:2b:41:9a:91:66:87:c0:d3:61:
7c:b1:01:52:63:1b:70:4d:94:66:37:58:4c:aa:ee:d5:be:4e:
07:47:2a:46:9e:7f:10:e3:17:72:a8:f3:90:b8:7e:34:d2:01:
f2:63:15:19:d9:10:03:af:ca:45:0c:31:63:e6:3c:5d:f8:df:
5e:ea:a0:ae:2f:9b:54:78:1b:9c:1e:00:cc:0c:13:f2:42:ef:
7b:82:e2:64:ad:e9:51:21:cf:2f:29:d0:44:00:65:c1:8a:3c:
c0:da:ca:f5:3a:15:c4:e2:aa:e3:0c:e8:48:1e:03:08:9e:32:
d0:40:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:02:05 2024 by rpki-client on console-fra.rpki-client.org