Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: PmUVwmmOWUpfn0eZOe3UMJPMvYK8RMD4Gox+4/cMi1A=
Subject key identifier: 90:5D:C2:10:53:4F:09:3F:1E:3C:D4:9C:8A:A6:54:18:61:36:D3:44
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0193568AC28EB98FA7B2CDFADE02C6E4C831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:34 +0000
Manifest this update: Sat 23 Nov 2024 01:02:34 +0000
Manifest next update: Sun 24 Nov 2024 01:02:34 +0000
Files and hashes: 1: LSGM7vSXp13ydrW98bnFaLd9hUc.roa (hash: /jae2BIVvzfnsYv1M+LXz3ruqosU91IBGfDVSswFEPE=)
2: VmFoo1_NaBt6goBTWk7CIF8_DRE.roa (hash: /wc6qQaFYSgwGkREUw1UMiUg7gaghWru9/mc/KQ22Yg=)
3: lV4_rIW0RmXtrynvdYgRpCCKH7M.roa (hash: exOLqYruVqqLg8l8aZ4nszhHbUF0OucpKVG3Otp7kI8=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: 8M6PnHhR+1g7aviT1CBwOtZQlaLO5yAxssmMcdqK/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:c2:8e:b9:8f:a7:b2:cd:fa:de:02:c6:e4:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Nov 23 01:02:34 2024 GMT
Not After : Nov 24 01:02:34 2024 GMT
Subject: CN=905dc210534f093f1e3cd49c8aa654186136d344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:b2:44:19:fe:e6:56:22:77:ea:c0:25:18:
3a:19:25:66:de:39:9b:48:e7:c5:73:44:cf:5e:a2:
5d:26:d6:85:b4:55:27:a4:33:77:e2:17:95:2a:f5:
ee:10:75:96:63:8a:4a:b8:78:fb:1c:a2:da:2b:e5:
ae:9b:de:3f:27:4d:e7:32:69:0a:71:94:a0:7d:7f:
ea:fa:8b:77:e3:0b:ed:0a:39:89:46:5d:26:fc:f1:
e5:5e:fe:aa:5a:ba:ea:c5:89:fe:04:80:9d:5e:3c:
d8:5a:6a:e3:cd:8a:1f:45:88:8b:03:bc:64:a9:59:
31:c7:6e:7e:97:e1:a4:93:c1:fa:90:76:7c:46:5f:
f0:c4:36:6f:2b:86:47:e7:7e:71:3c:37:e6:c9:70:
42:0b:47:5d:bd:c0:e2:27:21:4c:4a:e4:02:a4:30:
b4:cd:67:90:42:b2:53:5c:33:44:9d:90:1a:6c:58:
84:c4:0d:7c:c6:f8:5b:ae:46:08:9d:65:ac:09:2a:
68:ef:84:b1:e6:11:09:33:bd:6d:cd:3a:89:bd:85:
c2:e4:3a:85:a6:32:9d:05:e1:94:14:0c:4a:5c:d3:
ea:39:67:2e:aa:b0:d9:6d:b8:63:0e:d6:77:27:26:
7e:d1:60:0e:a8:71:0b:23:9e:18:99:cb:d8:59:24:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:C2:10:53:4F:09:3F:1E:3C:D4:9C:8A:A6:54:18:61:36:D3:44
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f8:41:36:da:bd:bd:e9:2f:26:5d:12:5c:9c:3e:c8:ad:d1:
6d:01:94:41:69:b4:51:01:da:b2:5a:17:33:22:f0:a5:b1:81:
bb:da:6a:a2:66:b6:12:77:33:ff:b8:76:be:25:db:3b:b4:67:
67:76:53:ce:82:99:36:e9:98:62:40:fb:5e:38:49:60:75:44:
87:c7:5d:18:86:91:92:e9:4a:e1:ba:9e:b1:3a:63:07:95:b3:
64:f7:08:5b:91:4d:24:a9:62:27:1d:79:d6:ac:44:61:0e:ac:
dd:a9:a8:d4:f3:53:e3:30:31:16:b7:06:56:03:c6:ef:76:dd:
f5:60:dc:6a:68:29:dc:56:ba:2e:66:9a:00:6d:39:66:1b:a3:
f4:6a:99:77:50:29:f1:6e:12:02:10:32:cc:5b:3d:77:fe:d3:
66:b5:ec:64:e5:5a:68:c4:99:af:31:92:f3:6e:a1:c3:30:12:
81:b1:e3:dd:1f:d7:99:54:77:9c:36:6b:ff:7f:2f:dc:b7:08:
00:99:e7:63:54:a0:08:fb:49:bc:e7:e3:f5:9c:dc:40:35:15:
64:4d:92:a3:61:a9:11:9a:a7:c8:d4:06:06:ca:c9:70:0d:06:
ed:68:4c:40:68:4f:f6:d1:d1:fb:13:8e:68:fd:76:6a:82:b8:
a1:f7:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:44 2024 by rpki-client on console-fra.rpki-client.org