Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: 1QklB9oJUaL5vXFx0WhiTAscBtjNNgjEGinU3pfOTAQ=
Subject key identifier: 8F:AB:90:70:51:4C:43:26:0E:F6:5E:1E:92:F6:DD:F4:B7:98:E4:D9
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019369D8C2B96D43D102E075DA8B1839D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 19:00:33 +0000
Manifest this update: Tue 26 Nov 2024 19:00:33 +0000
Manifest next update: Wed 27 Nov 2024 19:00:33 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: uUyWcZ/3px7ax+qCjZnm/u/fhGDgp5ch01vz6oM13b0=)
2: _bL-oqLiNrhk8r5yvrMsAb0xWU0.roa (hash: ndMLqC4uFsLLWIqCPFOfqvZyd/9MM3csvNL1wkBvGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:c2:b9:6d:43:d1:02:e0:75:da:8b:18:39:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Nov 26 19:00:33 2024 GMT
Not After : Nov 27 19:00:33 2024 GMT
Subject: CN=8fab9070514c43260ef65e1e92f6ddf4b798e4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:62:91:73:f5:6c:5b:b4:bf:83:c8:9d:e1:
5a:13:e8:7e:df:18:49:67:61:e9:81:7f:4e:fe:ab:
c9:8b:5b:e1:de:7c:43:60:71:cc:fe:12:0c:91:51:
2c:1e:c4:0e:42:6a:45:ba:c9:4c:8e:0c:8d:99:32:
00:0b:5c:95:01:a4:0b:77:31:9c:97:d5:de:ce:41:
cc:9a:e4:b2:03:ba:0b:e1:d6:28:44:91:e1:46:37:
39:c0:ef:12:d0:6c:70:61:d7:d1:da:45:a0:2e:25:
4d:c0:60:a8:a8:76:c1:5a:9d:84:29:3b:2b:ba:23:
be:54:6c:c9:51:55:81:69:13:65:67:48:91:a6:56:
69:28:a3:76:c6:87:ff:1f:07:33:b4:c9:a6:58:e6:
e2:3b:55:ba:8b:2a:a2:d8:53:13:9f:d1:1c:4d:fd:
de:44:4a:92:50:2b:d4:f2:99:68:1c:ec:6d:39:d8:
8f:eb:f2:6c:7c:e5:5c:fa:33:5b:74:bc:d4:e7:77:
db:12:e7:8e:2a:0c:09:d5:db:dd:f4:18:e4:2f:9d:
ac:a3:c4:82:0e:c0:5a:c9:ea:b5:74:e0:be:c9:81:
06:2e:aa:3b:02:ce:8d:bc:a2:26:08:4c:a9:3e:b3:
84:28:5e:70:e4:12:e6:f1:db:54:4a:35:d7:58:8c:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:90:70:51:4C:43:26:0E:F6:5E:1E:92:F6:DD:F4:B7:98:E4:D9
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6d:e7:f3:21:da:9b:9e:2c:1b:e8:27:ee:2c:f2:a2:b9:c6:
47:0b:ab:61:82:ef:16:d8:6f:e9:4d:28:30:b2:61:d1:11:9f:
f1:e1:45:3e:78:a5:6f:24:ca:15:37:ee:44:74:9c:cd:5e:68:
b8:a1:d7:60:61:d7:60:d7:50:1f:d6:7f:ee:c6:6e:32:af:eb:
ef:91:d8:eb:db:da:f4:ba:6b:c8:6b:4a:02:2b:55:2f:c1:43:
48:9a:54:6d:b5:ea:02:70:d2:fd:35:42:97:8f:a2:d6:23:7b:
f0:a6:27:0f:30:2d:35:e5:70:c0:4c:cd:f7:3b:d9:a0:a7:21:
cb:14:34:94:94:3e:72:b7:43:d5:45:b8:4a:f5:bf:74:aa:fb:
5b:4f:20:5c:bb:d0:7a:6a:00:37:96:ea:55:f0:96:89:71:53:
c7:2a:6d:f0:1e:e2:5c:80:ba:9d:37:20:19:b1:92:30:29:2a:
04:e1:b6:25:da:05:60:e3:1c:56:bf:75:90:a9:c6:c0:91:59:
0a:a8:51:9f:3a:ed:40:19:34:81:93:f3:7d:97:1e:b4:5a:9b:
99:bf:76:c0:1e:8a:d8:e7:df:ed:2b:fc:b9:35:c3:26:f5:09:
07:5b:15:09:3f:fb:0e:58:2b:48:ac:3d:ba:8a:99:3d:bb:77:
07:13:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:00 2024 by rpki-client on console-ams.rpki-client.org