Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: MCtRb0dPkqfv+IirEFOSYcD3YB9BAvf8VupWRbDTung=
Subject key identifier: B1:9D:0E:2F:7E:8B:CD:F3:01:9D:20:8C:7C:6D:87:83:17:2E:4F:F0
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0193579BACF49FF9D90299F2D30B290C913F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0372
Signing time: Sat 23 Nov 2024 06:00:40 +0000
Manifest this update: Sat 23 Nov 2024 06:00:40 +0000
Manifest next update: Sun 24 Nov 2024 06:00:40 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: mwpx7GjmPRzB96pW7xrjsO9m1rl4oioL5RDK56QdL+A=)
2: wV5NtQmFJ9GhanQ1MQZKHGY7T7Y.roa (hash: yNlh4AeRSzc8hfhy/mmUwZtOkndLWxajDl6n6qSCx3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:ac:f4:9f:f9:d9:02:99:f2:d3:0b:29:0c:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Nov 23 06:00:40 2024 GMT
Not After : Nov 24 06:00:40 2024 GMT
Subject: CN=b19d0e2f7e8bcdf3019d208c7c6d8783172e4ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:c0:94:1d:89:a4:e8:2f:61:fe:34:57:dd:
67:94:81:e6:90:3e:28:c3:c6:db:9f:3c:65:f8:43:
93:4e:c7:05:f0:ca:62:18:83:6b:04:79:08:88:56:
b4:44:2e:1e:9b:31:0d:f1:cd:c1:2d:38:df:5e:7e:
d1:28:18:b2:43:75:1c:75:16:85:86:4b:9e:bc:5f:
57:07:fc:94:45:a8:76:7b:fa:5c:3e:ae:fa:57:cf:
f5:ca:1b:e8:bf:61:42:93:34:a2:7d:38:36:ac:a2:
d1:88:88:6f:4b:e9:56:76:ac:01:9d:dd:3d:bf:33:
ad:d0:d1:23:b5:7a:ed:65:54:2f:f3:91:8d:cd:6b:
4b:5b:9b:28:cf:a6:4b:7d:d1:26:cf:c7:c6:3c:44:
71:c3:64:3f:69:4a:94:43:cb:16:fe:e2:e1:8c:91:
48:a2:93:41:4c:5d:20:8f:de:5c:19:db:cd:2d:0d:
05:d7:bd:03:51:e2:95:f8:fa:36:f2:0f:91:de:31:
62:3f:d7:29:99:32:b0:1e:4e:06:e8:7e:0c:34:a4:
da:b5:6d:b2:ec:18:bf:15:5d:b6:11:e8:66:7d:a3:
80:27:e6:5f:2e:21:71:fd:cb:bd:5d:7b:47:9f:a7:
7b:e5:ee:a2:14:c4:f5:3f:aa:b3:2e:a5:b2:3d:65:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9D:0E:2F:7E:8B:CD:F3:01:9D:20:8C:7C:6D:87:83:17:2E:4F:F0
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:54:2d:bc:11:56:ab:d0:4b:c2:25:78:ea:cb:50:7a:a1:1f:
e2:93:3f:66:c7:38:05:70:c6:88:df:9b:d0:8a:dd:17:6d:83:
46:94:7a:68:0e:59:44:ce:f7:54:55:5e:38:75:55:41:d5:28:
06:79:47:14:d4:fe:2c:6d:70:c0:71:17:1d:4f:ed:6c:e2:28:
53:f8:d6:6c:3a:63:65:7d:54:4b:b5:bd:b3:0c:e6:33:17:17:
ed:ae:dd:82:50:7e:6f:d9:c2:17:36:18:2c:97:40:26:fb:b7:
81:28:26:98:50:94:8c:7b:cd:31:44:da:53:b4:c8:78:cd:6f:
cd:fc:0f:ba:23:dd:18:43:d0:c2:52:63:0b:dd:46:66:8f:fd:
1f:68:ab:f2:70:82:36:c2:88:de:8a:e3:5b:37:6c:3d:60:73:
12:87:d4:68:d3:c2:ee:1a:b7:0f:5e:08:ea:58:74:14:7c:25:
26:c0:e5:27:e2:6a:07:01:38:6a:4c:fe:16:2b:f6:72:ed:a6:
a6:e5:76:eb:da:3d:6d:0d:9a:90:28:12:99:9e:4a:e9:50:b8:
1f:34:f1:ed:23:d4:39:eb:15:f5:90:a8:4a:69:ed:f7:eb:11:
41:f5:48:cd:30:f2:36:01:8c:66:b1:8d:c1:9b:77:f2:c4:46:
23:fb:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:27 2024 by rpki-client on console-ams.rpki-client.org