Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: /K0RiiBwk9EGmgfvU163jKOKeCEqLO2sOKfKT+m2l30=
Subject key identifier: B8:E1:88:40:25:97:31:6C:BC:FD:B9:94:99:1B:63:07:72:56:DE:F4
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019357D2BBCED8E4F97D4F9EF2D0282C5B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:48 +0000
Manifest this update: Sat 23 Nov 2024 07:00:48 +0000
Manifest next update: Sun 24 Nov 2024 07:00:48 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: HD3xoAiPuSZOXegrsY6wdPGiHMnvf5o+TIB74yxVQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:bb:ce:d8:e4:f9:7d:4f:9e:f2:d0:28:2c:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Nov 23 07:00:48 2024 GMT
Not After : Nov 24 07:00:48 2024 GMT
Subject: CN=b8e188402597316cbcfdb994991b63077256def4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:a4:74:45:4b:8e:43:d6:5b:21:13:29:6d:
81:b3:dc:d5:5c:65:ee:67:02:b7:ee:ea:ac:99:63:
7e:07:0b:ce:63:f8:0f:a3:87:03:c3:19:2b:cc:ec:
b0:d4:64:37:c4:8e:76:5e:0b:d1:e4:3e:dc:29:c9:
38:b2:a6:39:c2:cd:f3:9d:68:b8:17:38:1c:28:c1:
a2:c9:7d:d7:6d:b4:0c:16:e2:bd:b5:65:8c:74:13:
f1:b6:18:63:f1:9a:bc:e2:15:03:d2:ee:c7:d5:9d:
f7:ad:26:41:1f:b0:05:72:43:71:65:e7:b3:21:35:
ac:83:37:2a:7f:41:be:7a:d8:67:9e:54:5f:20:29:
58:9b:a6:92:4b:0c:6c:9a:aa:7f:13:8b:91:c7:57:
14:8e:15:ed:49:2a:64:b3:00:fb:6a:1f:5e:c4:4c:
51:da:98:26:a3:40:b5:0f:77:3c:be:f7:34:18:02:
dc:d5:32:f9:8f:4c:ef:cf:2d:eb:7a:22:cb:76:a3:
f7:48:2b:de:70:1c:0c:ee:c5:9f:48:ca:22:8b:b1:
e7:64:c8:89:a3:c8:97:0e:d4:e5:33:e2:b9:6f:5c:
7f:26:f0:d2:f6:5c:0a:c8:59:8b:00:c4:c8:d7:b5:
57:08:f0:05:88:a0:e2:da:a4:c8:52:ee:a9:78:44:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E1:88:40:25:97:31:6C:BC:FD:B9:94:99:1B:63:07:72:56:DE:F4
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:68:62:59:c7:d8:0c:41:5f:a8:95:cd:d0:e0:65:52:40:0e:
f5:29:4a:a8:f5:86:85:47:40:6f:72:27:c1:8f:6f:40:ea:7e:
f9:08:b9:94:12:40:e5:94:0b:69:4f:cd:20:13:b3:42:2e:95:
56:66:9e:c1:72:62:98:12:63:01:29:c9:b8:9c:e9:ac:ac:6e:
bf:c3:9c:24:e8:71:82:99:54:b0:33:b2:24:c1:18:e8:d4:15:
cd:31:bd:b0:8b:83:fc:21:15:4b:50:8f:6c:7b:82:8a:a8:3e:
50:bf:c7:b2:9f:c0:fd:12:d4:e8:4d:dc:ee:2b:bd:ae:37:c9:
92:40:50:24:72:07:b6:29:6a:f3:cd:70:2a:64:9e:e1:37:c9:
67:c3:87:80:00:f6:4b:02:6d:b6:df:6d:04:b0:84:b0:58:fa:
cc:bf:78:20:03:51:7f:9d:a6:2f:74:7b:9f:2a:44:c4:06:95:
90:59:d0:a1:8c:c7:58:0e:80:9c:30:a7:3a:93:7a:d3:70:69:
c0:af:01:12:d9:73:e5:57:38:ca:e6:35:e3:67:e4:47:7d:eb:
53:51:89:da:c1:02:bd:5a:11:6a:16:07:a6:7e:b5:0d:62:66:
70:05:3e:4f:33:8f:b6:13:a8:ab:84:56:37:da:e1:c1:11:2d:
1f:a6:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:00 2024 by rpki-client on console-ams.rpki-client.org