Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: 4Fg8csk3mEz7RGp8mjzLSBH2iKfLHXRX/WCFhnA+dCk=
Subject key identifier: ED:7F:AE:A6:39:77:CA:9B:71:28:0A:4E:F8:45:F8:69:24:8B:5A:07
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 019357D2498B2BE87395ECF8745093746E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 07:00:19 +0000
Manifest this update: Sat 23 Nov 2024 07:00:19 +0000
Manifest next update: Sun 24 Nov 2024 07:00:19 +0000
Files and hashes: 1: 7eVWLI0hP-_4atu02u2qiEpApuA.roa (hash: 5B7SoV1YODYJqUQYYhII4g5xFIT0RMR71kDKBASdU3Y=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: bdac+in8bqGMiBiSTmKUJBPQSOALGuTttE09jRL35L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:49:8b:2b:e8:73:95:ec:f8:74:50:93:74:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Nov 23 07:00:19 2024 GMT
Not After : Nov 24 07:00:19 2024 GMT
Subject: CN=ed7faea63977ca9b71280a4ef845f869248b5a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:e7:f4:95:c4:c9:ea:9f:8a:2e:e4:1a:1e:
1f:c9:c2:cb:3f:dc:88:c6:6a:c4:9f:07:19:c5:e9:
de:de:5a:e5:ef:2f:b6:23:af:db:bc:67:b2:9e:4a:
48:f5:76:38:9d:61:22:b5:26:9d:13:85:73:16:14:
6b:37:59:8e:46:83:81:88:b7:ff:a0:75:8f:4a:5a:
22:ef:87:77:29:15:ee:ed:26:2a:02:a9:a4:73:26:
d4:9b:0b:ef:b2:98:d7:43:9a:c6:5e:b8:13:e6:05:
d6:6e:7f:a2:80:f0:c5:c4:b7:33:09:d7:07:15:c4:
01:c9:57:9e:82:24:0b:57:9c:9a:b5:c1:54:66:00:
63:d3:60:4d:42:ec:f2:8a:4d:92:c9:c5:3a:ea:1b:
94:b4:8a:da:9a:93:ca:ff:34:e8:66:9d:cb:17:27:
c1:76:91:05:4d:99:22:66:f4:8f:9b:72:2f:22:db:
69:e5:28:15:d6:90:7b:7f:f5:e3:6d:2f:d5:3a:bb:
35:a5:28:56:be:fd:05:7b:74:1c:1d:1e:29:83:35:
53:40:46:77:98:fc:15:48:11:d7:db:42:c9:57:68:
0a:d9:58:fc:30:ed:24:6d:2b:b6:30:97:41:66:a7:
c1:d1:0e:73:0b:5d:3e:98:19:5c:20:62:f5:c4:7f:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:AE:A6:39:77:CA:9B:71:28:0A:4E:F8:45:F8:69:24:8B:5A:07
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f9:5a:86:47:d4:99:e2:a7:09:6a:03:45:ec:30:d9:0a:8d:
7b:89:79:d4:e5:90:df:43:a6:a6:2b:04:31:1c:04:65:dd:75:
1b:55:e1:5a:54:34:0c:e4:58:10:72:55:cc:65:fd:9a:ce:a8:
4b:0e:a6:20:6f:71:7f:9d:8d:e9:d9:ea:02:28:3e:4c:94:59:
3e:a7:7a:ae:fe:e2:40:64:4f:79:fe:fb:8e:9c:b6:5c:29:02:
48:b0:89:0c:f7:ab:06:1f:b3:9d:b9:e8:ed:32:91:b4:5d:7f:
74:f9:ac:2a:c6:e7:eb:a7:34:1f:cd:c3:29:46:e6:d5:50:2a:
4c:97:d9:a9:bc:09:63:fb:4f:07:28:0b:64:00:f3:66:bb:d5:
1f:ed:68:23:09:89:70:8f:56:58:c0:42:e7:e5:57:c5:8d:a8:
07:3e:00:3d:23:59:0a:3e:d6:35:57:a8:3a:65:92:25:52:7b:
a5:b1:66:d0:27:c9:ed:b7:de:f3:90:20:7e:dd:7b:3a:9f:e0:
9c:f6:93:b3:eb:2f:94:66:d0:b0:e5:a1:22:4e:b2:dd:31:a2:
18:67:59:5b:df:37:e9:bc:82:9e:41:78:b9:fc:b2:a6:cc:6e:
95:ee:a3:4e:6b:00:86:19:c8:3f:23:a5:ca:fa:0d:d7:32:36:
9e:0d:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:53 2024 by rpki-client on console-fra.rpki-client.org