Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: YkPlWSjZHpBy750pRs0yePns3cOeS8sW5eFdeMEeT8k=
Subject key identifier: 0B:27:24:AC:E2:05:F1:7E:7D:4C:3A:7B:4E:88:77:BF:C2:37:67:AD
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 01935199DA481F5FDD92BF79A086D46ECA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 02:00:57 +0000
Manifest this update: Fri 22 Nov 2024 02:00:57 +0000
Manifest next update: Sat 23 Nov 2024 02:00:57 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: LCQCxQnBlMcd3Idpy0k4phSO9llaebKlQCVLxf1ry+k=)
2: QAQ5_RGz1X5KZrlialFNFcggi1Q.roa (hash: kT9laftQXMcFk99lX+Cy5bgXGCm8Q0VZPR1ILjg33bk=)
3: aY0cs2rDsOLqJyRgMXQYDEbetqM.roa (hash: KOYU0gL7zq95XDwWIA7Z8WV6VyYzmFMUk90etZd/zMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:da:48:1f:5f:dd:92:bf:79:a0:86:d4:6e:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Nov 22 02:00:57 2024 GMT
Not After : Nov 23 02:00:57 2024 GMT
Subject: CN=0b2724ace205f17e7d4c3a7b4e8877bfc23767ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:1d:3a:ba:0d:e5:e3:fb:ca:cd:7f:26:7c:
92:f1:ed:be:d0:ff:5f:aa:38:4f:f6:42:8d:4f:5b:
85:8b:64:8f:71:05:48:0f:46:f9:be:2b:09:87:8e:
98:14:07:9c:10:94:42:3d:bd:cb:57:82:c9:31:2a:
f3:74:cc:0d:ce:b4:7d:3e:6e:ac:a1:7a:bf:a9:7c:
47:d8:9c:92:85:4d:e1:90:84:89:89:71:e1:6c:c3:
e0:80:1b:f9:4a:ba:7b:a8:10:df:45:94:7d:fa:4f:
d2:56:6e:db:a6:77:10:ca:2d:d0:41:63:07:b7:48:
af:6f:69:0e:da:bf:6b:0e:3b:32:1a:08:26:7c:66:
5a:9c:65:bf:3f:6c:88:c6:0b:b7:b6:27:bf:a3:be:
6c:4b:a6:19:1f:88:1b:c9:d1:c3:32:f4:ac:b4:94:
b4:cf:6a:69:75:e6:cf:cd:25:da:88:94:6a:76:41:
be:fd:50:5c:34:ba:25:b5:5c:0f:46:29:af:d0:74:
d1:30:b6:99:fa:64:53:d3:cd:2e:63:69:bd:73:2f:
3e:a7:57:a1:0d:bf:21:0d:0c:0f:bf:68:4e:8e:f1:
de:54:f8:55:be:99:0e:02:99:ea:a9:45:da:bc:c9:
1d:8c:1e:dd:95:de:7a:9b:22:0d:0f:bd:ab:84:e9:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:24:AC:E2:05:F1:7E:7D:4C:3A:7B:4E:88:77:BF:C2:37:67:AD
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:9f:7f:7e:a6:13:9e:bb:6f:b6:e8:f4:4a:b9:f6:e5:64:
70:96:f1:0c:92:f4:5a:d1:3b:b6:79:44:28:1c:f3:52:85:72:
99:6f:f2:81:07:72:77:67:47:68:80:86:d1:23:ad:07:b7:16:
67:64:75:ce:54:6b:f5:a5:a8:08:07:f3:01:8e:9c:83:44:35:
77:ba:df:b0:a1:02:10:78:88:67:a4:ed:45:d1:be:96:b2:d7:
10:e3:bf:1b:08:2b:48:54:f7:2e:1e:4a:20:9e:c5:cc:15:b8:
18:2f:78:a0:da:cf:c0:95:bf:0a:74:82:8d:7f:c0:67:63:b4:
15:f5:9a:a0:78:0a:b9:63:3a:fe:32:b0:fe:53:31:b6:e5:ef:
0d:ef:1c:84:64:e3:63:dc:40:7a:52:79:51:d9:cb:3f:06:f2:
3d:31:8e:e1:86:f6:42:1e:36:39:51:f6:eb:3d:65:b7:18:49:
c7:0a:0a:8b:6c:ec:a3:9c:54:76:30:93:a1:90:65:5d:88:59:
6e:a2:39:26:c6:f9:9d:a5:2a:b2:87:93:75:07:cf:06:ff:03:
1a:90:84:ac:af:39:7b:cc:52:ac:f1:d9:92:b5:49:86:ba:a0:
70:7f:7f:e3:59:75:a7:7a:4f:fa:10:9e:74:b4:99:c8:07:3e:
c5:49:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:20 2024 by rpki-client on console-fra.rpki-client.org