Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: yssid2PDn0wukG7twffBxDJxsyMKFAccWm5PA1h3cQw=
Subject key identifier: 4E:40:DB:44:56:65:FC:A4:FD:6F:17:91:39:E4:08:99:1C:7A:10:CE
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 0193579BA95777CA9D1E8BFDFAF5C2824F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 1236
Signing time: Sat 23 Nov 2024 06:00:39 +0000
Manifest this update: Sat 23 Nov 2024 06:00:39 +0000
Manifest next update: Sun 24 Nov 2024 06:00:39 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: BAPUIl31cyYS1/xyvY84nd4YS/eoEpRPSGZlCUcKtdY=)
2: qg2PUXUWxQxYTfWRtvmal-wwtYw.roa (hash: 0X1SPp2FzxFcd+JrK6WjL5TW1PJnjbJ36A7mUW16+jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:a9:57:77:ca:9d:1e:8b:fd:fa:f5:c2:82:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Nov 23 06:00:39 2024 GMT
Not After : Nov 24 06:00:39 2024 GMT
Subject: CN=4e40db445665fca4fd6f179139e408991c7a10ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:62:39:58:ba:51:8e:c2:9a:9b:31:75:7a:
ae:6d:cb:af:99:66:21:80:21:bb:eb:69:a7:a9:b2:
24:bb:27:91:39:c4:23:85:02:44:aa:25:58:b9:e5:
82:68:22:62:46:69:6a:4c:6f:1b:c5:36:2c:5e:19:
20:b5:21:95:99:d2:81:ed:9c:6c:4b:0e:16:de:35:
a0:7b:97:b7:44:fc:61:39:3a:10:de:d3:2a:7f:6c:
10:ef:01:c1:85:08:ff:8c:f7:23:89:bd:60:40:dc:
9d:4e:e9:c9:e1:7e:e8:78:bc:ba:39:51:a6:3b:be:
8e:6b:f6:4a:45:46:66:7f:f6:b6:57:a2:0e:7b:4d:
fd:d3:eb:f4:e5:7d:d9:17:2a:63:13:05:2e:26:95:
4d:70:9b:18:d2:15:35:f3:d2:18:94:48:58:19:31:
47:b5:76:e0:54:89:0a:ef:d8:ee:d2:26:7c:0d:ca:
36:4e:ac:61:b0:a3:9a:ee:76:40:d2:55:af:64:f0:
c9:ed:2d:30:95:d5:92:f8:1f:65:a2:99:51:ac:be:
a5:d9:e1:3e:75:cf:f6:58:6e:a9:40:05:2c:01:8e:
90:a7:d0:db:d3:f2:0c:61:42:07:b4:18:c6:62:ab:
5d:25:be:de:64:39:ba:91:94:c0:59:69:23:87:f2:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:40:DB:44:56:65:FC:A4:FD:6F:17:91:39:E4:08:99:1C:7A:10:CE
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:56:5a:66:34:17:c3:0c:78:96:36:c5:49:bc:9b:86:4b:
89:47:57:aa:59:bb:40:66:e7:cc:2b:47:ea:84:03:ba:75:57:
a4:ac:15:33:ca:00:e9:eb:3a:7f:33:3b:ed:9e:32:64:c6:e8:
6a:ac:f5:ec:73:e1:56:c4:1e:bf:ff:03:e4:b2:10:f0:ab:64:
cc:8b:05:13:9a:18:0d:f9:fb:18:ee:23:0d:56:52:5a:e4:35:
93:3f:7a:f7:a6:cb:80:ca:27:a5:b1:be:b5:5a:1f:c7:4d:ec:
ea:e3:66:8e:3c:3e:1a:e2:60:00:93:35:b7:1e:a3:1e:23:3c:
4b:12:2f:55:1b:1c:ed:e2:ce:20:07:8f:7b:7d:80:f0:2e:bf:
12:bc:2b:45:00:cd:3c:40:94:91:ae:ed:01:ee:7f:7f:c3:ff:
d0:0f:5b:bb:33:dc:19:9e:1c:bf:41:03:4d:18:8d:b6:66:19:
f5:4f:82:e1:27:9c:dd:a4:64:d7:da:1a:d3:af:bd:13:73:68:
ce:65:5a:76:3e:70:09:46:5f:69:fa:79:f2:fc:8b:b5:f2:fb:
6a:16:83:38:c5:7b:73:5b:f8:49:be:4b:6b:fb:92:60:1c:25:
5c:c8:33:d1:ae:4d:0c:3d:57:b5:a6:1c:43:42:20:23:b5:3a:
c0:cc:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:38 2024 by rpki-client on console-ams.rpki-client.org