Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 6ZsvulcMYBxBHbtLU4+K0CD+IwTVgXNg7oP5e4aKuJE=
Subject key identifier: 24:C3:88:D3:54:99:09:09:84:F6:88:04:90:47:57:B2:D6:16:77:E5
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 01935989FBE391B4D91B6C71F3D38CC37637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 132D
Signing time: Sat 23 Nov 2024 15:00:35 +0000
Manifest this update: Sat 23 Nov 2024 15:00:35 +0000
Manifest next update: Sun 24 Nov 2024 15:00:35 +0000
Files and hashes: 1: Q7KisqHG30FKjLEsNjHuKA9mQ8A.roa (hash: DMu+kseazVncRsrtG84Y5Rj7j2wNiHXxNco3EpnNI2g=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: fqZ0sQR1j0W6FH9RvbUmq5mPmvU5I7iV27urlvdTse0=)
3: p7Rkq0PJPYxIfRL4MPX3Yjc1WYQ.roa (hash: OGNGl7cXUJZqLuVBA+00V8idLmOPKL9BU1V/5CoFE/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:fb:e3:91:b4:d9:1b:6c:71:f3:d3:8c:c3:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Nov 23 15:00:35 2024 GMT
Not After : Nov 24 15:00:35 2024 GMT
Subject: CN=24c388d35499090984f68804904757b2d61677e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:37:9c:0a:60:4e:be:64:ae:05:bb:a1:64:
20:65:a8:37:ee:4e:53:5e:52:a6:0a:2d:6d:8c:64:
4e:85:64:94:25:b3:2b:f3:37:4d:9b:42:b6:75:f3:
51:47:9d:7e:d7:9d:a2:73:f2:ea:c9:0a:99:d0:cc:
24:1e:15:ab:43:d6:d1:9d:cc:68:dd:4d:f0:d5:09:
ff:7b:72:39:44:76:a3:15:44:c8:ef:b7:d6:3d:92:
76:f5:c8:26:4c:b2:e7:ef:49:19:fb:88:20:57:5b:
6e:66:43:f4:08:a5:3a:e4:97:12:c4:d4:8e:17:0a:
8c:7a:01:f2:61:57:68:1d:82:3f:5d:1e:ce:cc:0d:
12:3d:ed:81:2f:b8:d3:1e:fc:ab:e9:79:b3:be:09:
b8:52:02:a0:1b:d0:cc:f7:15:c1:4a:22:59:7e:0b:
c7:99:8f:7f:c1:94:ab:6a:02:d5:31:da:5f:da:99:
3c:95:23:c6:99:7b:05:27:37:09:42:2a:64:91:78:
b5:b8:8b:02:dd:d1:2d:9e:02:38:0a:86:71:c1:30:
60:cf:9c:b9:1e:7e:92:d6:d9:df:41:57:b1:a9:85:
da:e4:fa:fc:de:d1:92:49:b2:7f:d5:18:3f:2b:f1:
9d:1d:b2:d1:04:97:16:d2:82:63:0a:4f:8e:b4:be:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C3:88:D3:54:99:09:09:84:F6:88:04:90:47:57:B2:D6:16:77:E5
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c6:7e:8a:b8:d3:5e:c1:8f:6f:2d:af:8d:60:27:87:76:6b:
31:75:45:5c:3d:04:74:0d:07:08:11:c0:1e:78:a1:41:bf:01:
69:39:41:8c:1a:75:3f:9b:65:32:8d:29:39:73:95:fe:59:f6:
ec:86:65:f9:1f:47:6a:05:29:73:a3:e2:1c:2a:d7:07:47:65:
4e:7f:7c:d8:ff:c2:68:36:f7:0a:95:ae:ea:23:10:d0:89:0e:
43:16:4e:c6:de:d3:09:87:74:01:8f:59:89:6d:53:70:b6:36:
76:1d:d6:09:bd:29:a1:cf:c2:7e:e2:ae:64:f6:63:0c:bd:3b:
b5:aa:01:7f:4e:92:f2:31:c0:53:e8:44:ce:bd:48:39:56:bc:
86:15:d3:4d:76:36:7c:51:8f:bd:95:81:2a:ec:78:36:f5:1f:
7e:9e:6b:6d:d5:95:07:a5:28:60:2a:17:c5:5a:76:d0:18:b4:
c2:26:d9:3d:fa:17:b2:9c:5c:b3:a7:01:17:f3:04:b4:00:c7:
a6:cc:eb:10:a3:34:4e:7c:2f:a6:01:d9:6e:57:e0:b6:84:47:
98:3d:2c:55:51:34:c0:9a:90:89:3a:89:85:90:a7:69:80:2a:
ce:03:77:fb:30:ea:6c:80:d4:b1:2a:40:79:7b:ca:28:a5:72:
c4:0a:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:28 2024 by rpki-client on console-fra.rpki-client.org