Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: XhpnKCvida7sJQyj7h3/n2y9t8UCVYZkgEXfhNcvU3c=
Subject key identifier: 4A:24:CC:C4:BA:9F:B6:77:C1:AE:0E:45:B4:67:3C:3C:AF:E4:DC:D6
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019356889320BE6C36B6B5D081DE838573B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 08C9
Signing time: Sat 23 Nov 2024 01:00:11 +0000
Manifest this update: Sat 23 Nov 2024 01:00:11 +0000
Manifest next update: Sun 24 Nov 2024 01:00:11 +0000
Files and hashes: 1: RwEUyl4dKLG2g1awT9AvPTYtgXg.roa (hash: Gb/QorbafWui7B/27b0gB/ImkxikrZ/R21HTCsGu6pM=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: fiZQBL+/rk7mzQj47PDOiBsmxq8d/SYFnxk7JF9ygV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:93:20:be:6c:36:b6:b5:d0:81:de:83:85:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Nov 23 01:00:11 2024 GMT
Not After : Nov 24 01:00:11 2024 GMT
Subject: CN=4a24ccc4ba9fb677c1ae0e45b4673c3cafe4dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:aa:05:5b:f4:1d:b5:83:8b:e2:39:ad:2e:
e2:fc:1e:d0:3e:2f:ff:54:aa:c7:d3:37:49:fa:24:
8f:52:15:1f:ba:fd:32:4d:9d:6b:7d:7e:a6:22:c2:
c8:aa:ba:83:e9:61:78:22:26:0e:09:ed:65:4e:4b:
f0:ea:eb:1f:da:f5:fa:45:2b:41:be:b0:8b:fd:f7:
80:6d:08:df:47:fc:15:b9:2f:8c:74:82:18:34:6e:
02:15:fa:df:b0:a0:47:01:09:1d:e7:b1:c0:03:b3:
bc:67:32:fe:c6:f7:d4:f2:2d:ee:be:10:f2:df:ed:
f7:b4:81:dd:5a:28:f5:ca:b9:b4:8a:f6:b6:5f:61:
60:d0:55:cd:57:6a:99:3a:1a:ce:67:7b:26:0b:6f:
92:ac:9a:cc:8d:eb:5b:66:bf:6b:ad:31:86:63:7e:
02:d4:dc:eb:86:51:ab:06:9a:b0:2b:0b:bb:99:dc:
87:af:1b:d2:47:09:5b:a4:34:61:04:01:2d:63:84:
da:23:0f:c6:f1:66:59:2d:c9:5f:73:02:b6:ed:fb:
b4:45:cb:34:5e:5e:4b:ad:45:35:46:f1:e4:1e:23:
6a:f7:9d:82:f1:d3:2b:7f:71:43:0d:af:51:86:7d:
b3:1f:64:f0:c7:df:bc:f8:71:40:bc:29:3d:87:09:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:CC:C4:BA:9F:B6:77:C1:AE:0E:45:B4:67:3C:3C:AF:E4:DC:D6
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9b:b6:06:d7:f7:29:05:69:6d:43:f2:76:0d:ce:fa:50:56:
2f:c1:cb:0d:90:57:80:8f:96:d5:85:43:8d:4c:01:62:27:9d:
c5:c6:36:91:f6:fd:38:f2:f3:91:52:db:0e:af:3e:cd:ca:88:
27:1a:44:0f:c1:39:b0:d2:75:97:e6:8e:ea:0e:cf:b0:91:ca:
78:91:d9:27:e7:51:9b:a4:22:5b:b6:00:18:66:22:9c:eb:e1:
f3:fb:c1:7e:de:d1:4c:44:9d:3b:d9:3e:28:4a:b5:98:50:a9:
a6:6d:3c:3f:78:47:d3:bc:ff:f2:fa:8f:14:58:82:4e:77:66:
83:2b:e8:75:16:46:bb:36:62:9e:35:08:c3:79:b1:f9:54:6c:
5b:52:6d:0c:ca:f8:3d:da:75:f9:e7:19:27:68:cd:56:25:bc:
49:0f:eb:50:80:7c:ec:6c:33:a3:5a:2f:ca:8e:c2:ef:78:f2:
5b:84:e2:76:58:b5:19:81:d6:db:04:27:57:d3:9d:16:a2:4e:
98:29:81:49:0e:8d:8b:1c:df:55:49:1e:49:1d:67:20:2f:6b:
de:11:53:24:10:67:a7:8c:c6:12:8e:fd:bb:51:2a:ce:63:ef:
cb:7a:bc:6c:5f:b1:d2:a1:31:2a:99:a9:93:0b:08:1f:ca:ac:
4e:7a:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org