Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: /gS47+uMfLgvZvu6RBRBdXiAEiEPQCVKExT3kowOy6c=
Subject key identifier: F0:18:D7:FC:6E:98:D7:DB:CC:F8:B5:D0:AA:DE:75:FE:6D:29:4C:AD
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01935688D980C3CA109C2C275A0FF9F08D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 05ED
Signing time: Sat 23 Nov 2024 01:00:29 +0000
Manifest this update: Sat 23 Nov 2024 01:00:29 +0000
Manifest next update: Sun 24 Nov 2024 01:00:29 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: fSl571a6/lqfvXFa59m7vKCqLJtvfMCvuoNrv35w1wU=)
2: YstTSWkqT0WTsMcDv5cWZHwW8r8.roa (hash: nOA1ktGJmBjQqAoTvUrR3Ggfmk08eRDjPrgtwRBEP7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:d9:80:c3:ca:10:9c:2c:27:5a:0f:f9:f0:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Nov 23 01:00:29 2024 GMT
Not After : Nov 24 01:00:29 2024 GMT
Subject: CN=f018d7fc6e98d7dbccf8b5d0aade75fe6d294cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:76:24:08:f1:ed:8e:5a:55:44:1e:89:8b:
3c:f5:61:5f:b2:b1:a0:e3:9f:f3:5c:9c:f0:ef:14:
36:66:63:12:e1:d9:23:0c:9e:99:d0:6a:10:21:73:
5d:ad:fa:d9:7e:49:8b:0e:41:5d:f8:81:4c:4d:21:
b8:fc:a8:9d:58:79:23:26:57:fe:80:51:0e:65:b3:
91:cc:24:4e:70:66:ea:4b:d9:b6:94:77:13:f3:53:
c0:6d:c3:25:8e:fa:3f:21:b9:e7:a9:e3:0f:11:85:
8a:aa:82:ae:4b:80:97:64:c7:50:1d:88:65:9a:5e:
97:aa:68:a9:a5:a0:c5:74:8f:5a:85:a2:30:01:49:
ed:68:f8:9a:26:59:ea:8a:25:9f:9d:7c:38:a2:25:
9a:89:13:a7:36:36:fa:40:8a:9b:5b:a0:ac:29:ef:
4b:d2:52:72:68:e7:5b:a6:ea:4c:fe:e7:98:68:a5:
09:e3:bc:d4:74:7f:2b:f5:b7:a8:23:e1:c2:ea:f2:
86:60:e3:9d:99:ee:4a:3d:5b:59:62:72:52:7a:98:
39:d5:cd:44:b8:e9:ba:67:5b:6b:0d:69:1c:e0:f2:
aa:92:62:2a:91:4a:0c:0b:c0:2d:d8:2b:e9:a0:4e:
a1:a1:aa:a2:2b:5a:39:8a:18:97:48:34:48:f3:a0:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:18:D7:FC:6E:98:D7:DB:CC:F8:B5:D0:AA:DE:75:FE:6D:29:4C:AD
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:fc:10:35:cf:d8:92:ad:1b:cf:fb:96:d5:11:ae:d4:88:
eb:ff:75:66:fd:16:55:bf:50:67:a4:45:99:32:11:23:68:6b:
fa:9a:bd:dd:51:85:c6:c1:2d:39:6a:c0:1c:c5:02:6f:21:8f:
7a:bd:b7:44:5a:d4:52:f2:da:ef:60:e8:fc:ef:78:9f:47:3b:
1c:cf:8b:97:e7:89:07:ea:11:b1:63:6c:19:33:da:82:11:ab:
c9:89:9c:c2:c0:c0:e1:fd:17:d6:3d:16:85:f8:59:38:b3:a8:
a4:0b:97:3f:f8:b9:d9:a9:c4:cd:e7:9e:2d:aa:29:4b:78:15:
17:3e:a8:b7:c2:b2:d8:f7:ae:3a:46:66:8a:02:3e:d3:e5:5d:
88:ee:0c:ed:45:f1:1a:fc:35:47:69:8d:70:45:ac:dd:3e:3a:
f7:12:eb:41:1f:29:e7:56:cf:64:52:73:0b:e0:ea:0e:b3:9f:
0c:a4:98:b6:22:72:10:df:ae:40:08:39:be:57:03:dc:d6:03:
69:0a:2a:c1:c3:34:57:33:6a:40:a5:5f:3e:6d:02:c2:0c:11:
fd:15:bd:b9:85:f6:74:0e:3e:76:db:d8:73:cf:61:61:4d:b6:
3e:04:ed:c9:f8:68:f9:c5:f3:90:07:82:37:f2:f4:cb:ef:37:
b1:9c:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:23 2024 by rpki-client on console-fra.rpki-client.org