Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: kT/vqbiGL8uMv2+qorfxjd7VXvv5PL7XR0yfZKCre88=
Subject key identifier: DA:31:C9:B6:7C:04:35:8A:62:13:1E:AE:21:9A:0A:C2:40:3C:CA:0F
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 0193579BDF7ABE25741EC6F7682DBF2A5E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0A58
Signing time: Sat 23 Nov 2024 06:00:53 +0000
Manifest this update: Sat 23 Nov 2024 06:00:53 +0000
Manifest next update: Sun 24 Nov 2024 06:00:53 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: 42f28Ffxck2UpT5+zZ6OvTqjE15edUmt6onTfAB8VrA=)
2: lIEyS_6vJbgr_ft2wjBpBQwqQ-Y.roa (hash: Q5MtSJiKrCLPnt4H1QAkBjY416nd5fswkDK/ccgU3PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:df:7a:be:25:74:1e:c6:f7:68:2d:bf:2a:5e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Nov 23 06:00:53 2024 GMT
Not After : Nov 24 06:00:53 2024 GMT
Subject: CN=da31c9b67c04358a62131eae219a0ac2403cca0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:c3:c2:cd:18:b2:6b:16:a0:d1:5e:9f:06:
f1:b9:94:47:fd:44:b6:86:bf:9c:3e:89:5b:49:d4:
b4:6c:81:96:15:a4:e6:00:30:d1:a6:e8:63:81:46:
c5:ac:02:af:72:0f:9b:7a:5c:9e:1f:8d:d4:c2:66:
0d:da:43:86:82:fa:15:be:e9:41:0f:5a:3e:95:97:
85:15:33:b2:c8:a6:3f:3e:bf:66:a6:e7:30:a3:f9:
04:44:59:2a:dd:32:df:31:3a:68:7b:ce:df:2a:b8:
af:c8:5c:a4:59:0a:3b:2b:04:8a:9a:a8:08:0c:6e:
ec:53:0e:d7:70:c8:41:11:e4:f2:e7:43:7a:fe:c5:
e7:4c:eb:65:9c:5a:a2:c3:e9:0f:b8:9d:ee:c8:6f:
5d:50:f6:aa:83:ed:56:87:30:b2:57:44:d4:ec:f2:
fc:95:21:c9:01:0a:12:d6:91:55:e4:15:d0:2c:9d:
fe:b0:62:35:27:c3:75:b9:5d:34:66:16:1d:38:7c:
dd:f2:84:7b:6d:a0:b1:10:93:80:f5:63:66:bb:f0:
30:1f:45:e8:b9:1b:29:84:d9:54:6a:64:11:ae:1f:
1d:67:01:c6:49:38:bb:36:ab:53:7a:27:f3:22:d1:
4b:95:87:1a:c9:d6:c1:8c:29:86:cc:c9:96:3f:89:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:C9:B6:7C:04:35:8A:62:13:1E:AE:21:9A:0A:C2:40:3C:CA:0F
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:8f:8b:ba:40:89:e7:b7:b4:02:b8:24:66:e7:ab:aa:db:
2f:ba:34:2f:6d:84:30:b2:ac:2c:2a:ac:4f:2b:a2:56:b2:8e:
d3:9b:df:65:76:c6:89:47:51:3f:c1:5c:0e:5f:d8:ee:38:b5:
32:c4:53:bf:bb:4a:80:f9:93:f7:90:c1:0c:ac:7d:dc:6d:fd:
1a:0c:25:83:65:35:72:ee:67:31:d9:ca:1e:37:e6:ba:37:35:
46:23:a5:64:11:ec:5b:71:8c:23:cb:4c:ca:c7:bb:0d:55:12:
c1:35:4a:a9:34:c2:5b:16:85:3b:ee:5c:f8:4f:70:21:93:4f:
bc:4d:50:c2:ed:89:ed:8f:ca:72:90:31:d7:da:5c:4f:63:09:
55:ab:32:4e:ae:a2:8f:b5:9d:60:4f:e5:6b:46:f6:4b:d8:ac:
3b:e7:ef:1c:eb:2c:53:29:fc:22:a0:54:15:e1:7c:c5:00:ce:
44:1c:ae:df:13:de:75:ac:89:1a:d6:92:7e:1a:ae:fd:ef:39:
c3:8b:4d:d0:8b:f5:a1:84:06:fa:8f:6b:7b:58:b5:d2:0e:f0:
a6:d0:f4:66:f5:ae:31:02:b4:5a:f6:7c:b8:a7:3c:ab:dc:90:
ef:d5:91:49:e3:f4:10:fb:96:f5:ea:da:f4:c2:73:4c:a8:6a:
b3:d0:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:38 2024 by rpki-client on console-ams.rpki-client.org