Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: hYaEMB/vGry3lZNgc5EbL5B4+2kSbFETOsuxZqED49Y=
Subject key identifier: 8D:FA:01:36:71:43:99:19:DA:8C:FC:7E:98:F0:76:4B:83:01:95:3F
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 0193568992C4A7F09E3FFD7E8AD00D2139D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:16 +0000
Manifest this update: Sat 23 Nov 2024 01:01:16 +0000
Manifest next update: Sun 24 Nov 2024 01:01:16 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: LNvhlZhaEfc9LRt9+4uyxwD8w8ifLRB6Zk9IZy73WMw=)
2: gTGnB5qauXN3QlNCwXMaFMUN2Cg.roa (hash: j4AZQFtmuxCEjS2LMY2xOvVzxsMyGlYBh8A+XSf/hNA=)
3: jR-ow2gjQwcqidQRee3qcfCqni0.roa (hash: Nt8ngAmZ8eTBLQvUKj85hfmg3868A4cy2IE+7n/ng9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:92:c4:a7:f0:9e:3f:fd:7e:8a:d0:0d:21:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Nov 23 01:01:16 2024 GMT
Not After : Nov 24 01:01:16 2024 GMT
Subject: CN=8dfa013671439919da8cfc7e98f0764b8301953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:6f:e6:61:87:0e:02:81:15:9a:dc:77:82:
7c:19:f2:31:af:ff:21:46:f2:d5:6d:de:fe:e5:a8:
8c:18:98:c2:5c:92:2a:ec:49:10:c1:b3:61:25:c9:
b4:0f:7d:09:ba:e7:86:9e:8d:19:e7:11:84:3a:72:
04:14:e1:15:56:32:39:5a:d5:70:fd:6b:9d:72:3b:
ab:80:0c:14:da:65:06:a5:8a:82:eb:2d:f4:fb:06:
a0:97:86:61:c5:2b:d0:ea:ee:82:51:7b:70:6d:d6:
6c:f1:86:19:ca:6a:e9:37:b0:39:57:0f:fe:63:51:
87:06:40:76:f1:c3:38:68:10:a4:00:54:a2:5f:61:
b2:19:78:7d:0d:1a:e1:9a:81:5a:85:ee:56:1e:57:
a5:bb:c3:46:a3:5b:c4:21:9c:ce:ca:b8:fa:13:01:
69:59:90:98:04:ff:8f:8b:5a:f1:e6:6f:6d:38:58:
ef:1b:01:26:2c:b0:fc:37:bc:61:a8:26:ed:47:0d:
7e:8c:18:8d:7b:08:17:03:87:3d:22:40:50:d5:86:
48:a7:3d:d2:f2:85:47:94:14:6d:ea:c6:43:5e:13:
2a:42:f7:b8:64:92:78:0b:3e:ad:91:52:dc:97:1e:
36:ac:bb:f1:6f:04:80:7c:d6:a7:80:a7:f2:32:5f:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:01:36:71:43:99:19:DA:8C:FC:7E:98:F0:76:4B:83:01:95:3F
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:00:4a:63:fe:63:80:0b:d5:93:9c:f8:a0:9b:88:62:fe:
65:13:40:ac:c6:65:e4:75:9b:6b:c2:94:34:7e:f1:e0:d1:c0:
06:5d:bc:7c:1f:76:af:55:ee:6d:2f:dd:46:54:63:cc:ff:35:
2f:85:41:5f:66:4a:02:e1:df:0e:95:9a:f2:c6:5a:d1:e4:d9:
c9:36:6d:bb:92:c8:9d:ae:42:72:41:a2:cb:12:6c:a1:cb:3f:
25:3e:4f:47:bf:22:81:fc:83:4f:9f:d1:64:41:cd:34:28:73:
d8:97:10:18:ca:85:af:17:b3:b6:06:45:99:eb:f8:4b:0e:21:
dc:f3:c8:1f:9b:cc:2e:84:3b:b0:d4:e6:6f:0f:3d:d9:21:30:
17:39:e7:f8:16:eb:7b:61:16:06:3f:c6:79:7a:2f:dc:7b:48:
f7:64:4e:ef:f3:2f:2e:f3:f0:31:73:19:96:fc:93:9a:1c:09:
d8:88:38:78:dc:a0:57:1e:5f:9a:2b:93:d8:e8:72:b2:91:ca:
9a:e8:65:eb:e4:2e:b8:e0:bf:3f:43:45:71:69:2b:13:ba:57:
08:ff:51:5e:af:6d:74:21:8f:66:ec:d1:e7:ce:f1:98:21:b4:
70:7a:b8:19:f1:cd:e4:de:9d:87:cb:c7:90:29:3b:b2:ae:62:
b2:96:50:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiZLEp/CeP/1+itANITnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjQxMTIzMDEwMTE2WhcNMjQxMTI0MDEwMTE2WjAzMTEwLwYDVQQD
Eyg4ZGZhMDEzNjcxNDM5OTE5ZGE4Y2ZjN2U5OGYwNzY0YjgzMDE5NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdBv5mGHDgKBFZrcd4J8GfIxr/8h
RvLVbd7+5aiMGJjCXJIq7EkQwbNhJcm0D30JuueGno0Z5xGEOnIEFOEVVjI5WtVw
/WudcjurgAwU2mUGpYqC6y30+wagl4ZhxSvQ6u6CUXtwbdZs8YYZymrpN7A5Vw/+
Y1GHBkB28cM4aBCkAFSiX2GyGXh9DRrhmoFahe5WHlelu8NGo1vEIZzOyrj6EwFp
WZCYBP+Pi1rx5m9tOFjvGwEmLLD8N7xhqCbtRw1+jBiNewgXA4c9IkBQ1YZIpz3S
8oVHlBRt6sZDXhMqQve4ZJJ4Cz6tkVLclx42rLvxbwSAfNangKfyMl9GlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI36ATZxQ5kZ2oz8fpjwdkuDAZU/MB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcesASmP+
Y4AL1ZOc+KCbiGL+ZRNArMZl5HWba8KUNH7x4NHABl28fB92r1XubS/dRlRjzP81
L4VBX2ZKAuHfDpWa8sZa0eTZyTZtu5LIna5CckGiyxJsocs/JT5PR78igfyDT5/R
ZEHNNChz2JcQGMqFrxeztgZFmev4Sw4h3PPIH5vMLoQ7sNTmbw892SEwFznn+Bbr
e2EWBj/GeXov3HtI92RO7/MvLvPwMXMZlvyTmhwJ2Ig4eNygVx5fmiuT2OhyspHK
muhl6+QuuOC/P0NFcWkrE7pXCP9RXq9tdCGPZuzR587xmCG0cHq4GfHN5N6dh8vH
kCk7sq5ispZQag==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:32 2024 by rpki-client on console-ams.rpki-client.org