Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: lFasgVsNObkj/+1M6NtFeUckHhd1ZmUHuu2KRZKvBz8=
Subject key identifier: 61:63:FC:81:F2:4B:8F:87:68:14:71:83:47:5B:71:B3:B8:E8:33:AC
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019352AE182D5BA1658B8EB2C31C8F5B699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 12F6
Signing time: Fri 22 Nov 2024 07:02:41 +0000
Manifest this update: Fri 22 Nov 2024 07:02:41 +0000
Manifest next update: Sat 23 Nov 2024 07:02:41 +0000
Files and hashes: 1: HEWx2S34MiUqiw41A-aYdyP3GvI.roa (hash: kvsRLY6f1ekDUMdh2mB9Xm6+C58+9Xmdj0LQBQStVcM=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: ceBs1wq13dz1TsBguSSGMVzmfnnz08xBofFLaTe1U+U=)
3: e5RArwmEKA___iSwx0e4wAaqDK4.roa (hash: JNHfe3qUl/RWRUKYCqVi9dTRWD0ESjPT9QrGjqY94HA=)
4: iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa (hash: DIk1/CgKHHZayFogegArFlhvkmCWKg0YcXljwpip8xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:18:2d:5b:a1:65:8b:8e:b2:c3:1c:8f:5b:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Nov 22 07:02:41 2024 GMT
Not After : Nov 23 07:02:41 2024 GMT
Subject: CN=6163fc81f24b8f8768147183475b71b3b8e833ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:d5:e6:9d:5c:ab:b5:67:e4:be:d9:31:fb:
bf:a4:33:4b:e2:84:50:0b:98:f4:05:46:e9:80:54:
e6:68:76:77:bb:39:09:ba:de:6b:c6:e8:41:d8:46:
f8:45:f8:c6:98:5d:44:d2:c8:7d:53:eb:a7:88:09:
51:1a:42:be:1d:42:75:67:61:d3:25:44:39:54:5b:
48:a3:34:5d:16:4b:71:17:ca:49:72:56:3f:6c:9f:
0a:61:49:5a:9f:a3:44:62:63:61:ff:67:e1:de:22:
bc:ae:87:05:d9:17:90:e5:a2:f9:75:d5:b9:eb:41:
1d:cc:86:15:4e:33:cf:e4:63:20:c1:19:8b:43:c1:
2e:e5:1f:3e:c9:56:a8:1c:27:39:f9:c1:da:e1:f6:
c2:87:63:4a:83:b9:9c:1a:33:7c:38:81:0a:cc:ae:
9b:5e:ee:2f:84:25:c8:d4:64:f2:ff:1f:b4:3e:84:
42:0e:31:a5:17:69:11:41:14:e2:9e:e2:18:7b:ec:
28:62:5b:8d:22:d7:b1:50:ea:4a:eb:17:ae:5f:c5:
18:fc:97:dc:26:da:f6:e0:16:dc:d2:2c:8e:00:4f:
68:79:2b:4c:f5:1f:cd:64:ec:65:8f:f2:6d:d7:04:
e9:70:c3:0d:76:53:d6:fe:48:f5:81:07:0e:43:2b:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:FC:81:F2:4B:8F:87:68:14:71:83:47:5B:71:B3:B8:E8:33:AC
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:c0:ca:78:ac:52:5b:24:fe:e9:e3:b1:c2:b6:a2:f2:17:
07:74:c8:c0:70:5b:06:7a:c4:e4:5b:15:8c:23:33:3c:8b:43:
f5:76:d8:79:2b:65:24:be:31:c9:6f:86:40:13:e4:6e:89:14:
dd:4a:ab:37:0e:15:c3:34:10:84:ec:22:a4:85:e4:3f:61:fe:
c7:81:a0:50:e5:a6:f7:d2:38:14:6f:b2:29:5e:e3:8d:ae:d1:
c4:6c:1e:98:23:a2:eb:fc:3f:76:cc:8c:81:ee:11:3d:95:ed:
8b:a6:3c:22:92:13:44:45:86:da:b2:bc:ba:b5:a9:d1:b0:a1:
e7:ec:fb:f9:36:7d:df:3f:ff:de:0c:ad:56:fe:ff:e8:1f:cc:
cc:4a:23:92:50:a7:58:4b:1c:f6:5a:b3:6e:be:67:0e:20:c9:
ee:d1:95:c1:90:3e:72:bc:d6:71:d1:ea:be:49:7f:d4:37:b4:
bc:5f:0f:79:8b:90:9c:a1:4b:9f:ef:85:bb:b4:ab:f1:58:2d:
e3:bc:72:f6:28:f9:d2:79:40:e7:6a:f1:df:c9:47:af:c8:9e:
e3:0d:17:a5:dc:00:e8:65:19:ad:05:37:0b:23:c9:9b:79:42:
3d:b3:f0:0e:1b:dd:c3:56:a6:5a:21:41:c8:6e:46:88:e2:f9:
8b:60:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:20 2024 by rpki-client on console-fra.rpki-client.org