Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: MevtkKivxOLM+WButUq74c+TZlIQspBQXuqf5QHQ8EU=
Subject key identifier: B4:46:6B:42:E0:2F:49:03:5E:88:C5:B8:CE:EF:77:8D:18:D3:86:FD
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019365FC9140FE7E8BA56B2BF8DC4F9C55E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0A30
Signing time: Tue 26 Nov 2024 01:01:11 +0000
Manifest this update: Tue 26 Nov 2024 01:01:11 +0000
Manifest next update: Wed 27 Nov 2024 01:01:11 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: 1aKLq2zXcVuw368Q8TxEjFBORedXTEJwZEFtKbfqL5E=)
2: G-uwc1HvHWPtYepzdn695m6w_28.roa (hash: jTZ6NAelniw5WszLcachS1//0ZzORd0wj4RFexVgIfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fc:91:40:fe:7e:8b:a5:6b:2b:f8:dc:4f:9c:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Nov 26 01:01:11 2024 GMT
Not After : Nov 27 01:01:11 2024 GMT
Subject: CN=b4466b42e02f49035e88c5b8ceef778d18d386fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:18:74:04:ac:07:f7:3b:d0:95:03:9f:36:
cd:51:be:63:2e:76:4d:07:c4:f8:c2:e0:4d:f8:b2:
8e:b0:40:4e:c2:21:61:78:db:3e:bf:b7:b1:ec:cc:
4f:7d:ee:66:72:dc:9b:38:c6:90:48:5c:b1:da:2f:
13:7a:36:df:2a:66:1d:fd:0a:1c:3d:80:60:da:a1:
5f:0e:e5:c2:e5:9e:e5:ec:d8:cd:97:ba:f9:83:53:
e7:2f:89:23:35:19:14:ec:8e:a1:c9:c1:5f:2b:65:
9e:35:35:51:97:16:98:31:5e:fd:57:d0:e8:c4:0d:
85:db:e5:b4:8d:00:aa:4c:5b:f7:6a:32:0d:ee:af:
76:4c:cc:14:7f:98:63:9d:71:cb:16:66:19:66:00:
23:0a:22:a7:b5:3d:20:6b:10:0a:83:8c:8f:e4:cf:
c3:1f:9f:9c:d9:b7:65:98:bc:63:34:1c:98:55:e0:
98:ee:ab:e7:d5:ce:d7:4e:87:e9:08:b4:ea:dc:2d:
e1:e7:32:60:80:ba:ba:a2:74:57:01:d0:28:f3:56:
1b:22:eb:09:02:ec:f0:d3:c5:a3:8e:c0:bc:1a:e5:
b9:8f:6c:5e:c7:b8:20:7e:65:32:09:2e:88:d1:1e:
c1:da:71:f8:ff:32:63:95:08:35:74:0b:61:e1:77:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:6B:42:E0:2F:49:03:5E:88:C5:B8:CE:EF:77:8D:18:D3:86:FD
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:de:0b:b0:ab:fa:a1:d0:dd:50:93:01:6c:38:42:ba:3c:44:
f9:9f:62:01:b6:2a:99:e9:44:b5:a2:b5:ca:4c:43:ec:0e:b2:
6c:0b:df:38:c6:3a:23:d5:78:43:ce:ae:30:c6:5c:1d:71:24:
e1:a2:56:42:f6:a7:f5:fc:a7:53:ae:e0:db:8d:a2:6a:52:3a:
d6:bc:ae:96:a1:af:28:1e:65:3c:b7:d2:0c:bf:58:90:b2:48:
d3:37:54:67:bf:5f:14:0f:25:38:9f:2c:86:5c:e0:48:8d:5c:
32:ed:b1:78:c3:0f:b3:6f:27:63:8e:00:89:69:dd:e0:6b:74:
2f:a8:da:52:1d:29:24:1f:fb:0a:80:f0:d0:9d:64:0e:55:f6:
47:da:f8:41:d2:ef:27:46:29:83:fb:74:7c:ea:66:4d:45:74:
78:28:95:2e:f7:5f:9c:2b:40:8b:cf:24:93:1f:c2:57:0c:b0:
cc:2a:8d:34:b4:e6:2e:dd:4d:94:2c:e2:51:a7:b7:dc:fd:a0:
5a:b8:1f:c8:b2:5a:88:7d:12:0a:38:e4:0d:1a:87:9e:45:cc:
49:3d:15:28:ed:c4:43:76:ca:83:a3:bd:c2:57:41:9f:8e:dd:
ca:5f:68:1d:84:a0:f5:2e:07:24:b9:56:f2:18:13:ca:51:a9:
54:af:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:11:57 2024 by rpki-client on console-ams.rpki-client.org