Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: gyuFcLu/MgSAepQ7CQ5BmX+FBhGNhR/8laRXu84CpkI=
Subject key identifier: 76:04:E4:45:61:AB:64:8B:2F:22:62:4D:7C:6B:0E:72:A9:73:2E:B8
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019353BF11E2D33C6DE4E08EE1CB721F9850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0457
Signing time: Fri 22 Nov 2024 12:00:51 +0000
Manifest this update: Fri 22 Nov 2024 12:00:51 +0000
Manifest next update: Sat 23 Nov 2024 12:00:51 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: fvu75kTXXiCP4pWqtTSY5Yi5iULl7YDDatbCVHis5Aw=)
2: Wjf_cJN6Yl4ieoCGXHUpdIaZSO8.roa (hash: tS0wE/OpQQbK+mnzzdqpt3VG2Vrwkb1JuUA5FS7EyP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:bf:11:e2:d3:3c:6d:e4:e0:8e:e1:cb:72:1f:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Nov 22 12:00:51 2024 GMT
Not After : Nov 23 12:00:51 2024 GMT
Subject: CN=7604e44561ab648b2f22624d7c6b0e72a9732eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:8e:d6:4e:88:b2:c6:ec:0c:93:c2:b1:6a:
24:f9:21:60:18:a5:b6:9d:8c:4d:a6:51:a0:79:9b:
59:a9:15:74:ba:5b:26:ce:fe:85:9b:02:cb:f0:4d:
75:91:af:b0:c5:87:c4:c5:35:4a:78:41:be:d0:6a:
de:7a:c2:86:9a:a5:e8:98:c2:fa:f5:16:5b:f0:40:
2f:b3:a8:f8:f8:6e:96:ef:e7:03:19:81:60:9b:c5:
52:b0:52:aa:a7:cb:19:7f:ad:9a:99:a7:09:22:76:
51:d0:b8:7b:8a:73:95:90:a6:7f:66:47:21:9a:ae:
86:eb:a8:1d:6e:d9:b8:b8:6b:9a:6f:7e:ee:a3:28:
93:3b:d9:69:3b:2a:1a:f2:4a:df:e6:42:10:b6:31:
ea:31:3e:c8:7f:fb:61:7b:c3:54:0d:65:6f:a7:2f:
58:97:45:b7:31:9f:86:f3:e5:db:66:aa:7e:ef:07:
92:61:98:5b:09:f9:dc:77:4b:9b:09:75:be:69:77:
fd:78:ba:f4:31:d9:56:0a:4a:7b:62:7c:74:4d:e8:
a3:a4:a0:5d:13:ed:4d:4c:b1:53:47:ce:75:2b:d6:
98:b5:f0:29:f7:ed:78:78:d1:46:1c:14:26:23:41:
8b:83:28:7a:2e:91:98:b9:57:dd:2e:6c:e1:b3:61:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:E4:45:61:AB:64:8B:2F:22:62:4D:7C:6B:0E:72:A9:73:2E:B8
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:cc:ea:86:2a:7c:3c:4a:c4:4e:0a:11:ed:05:8a:d2:65:
3f:42:18:a5:cc:cd:48:89:60:94:f8:25:71:86:01:d7:56:55:
b6:f8:b3:9a:ed:2c:56:37:2a:d1:75:4d:22:74:55:24:e4:1a:
b6:34:36:1c:e3:fa:ad:9a:5d:d8:ad:f2:ad:53:57:3c:ca:08:
f8:95:f7:19:f9:4d:72:f1:53:34:a3:b1:ec:b5:ea:8b:71:b7:
e9:b8:36:8e:a6:73:f2:3e:74:1f:32:66:00:2d:00:e0:07:ad:
88:28:35:2f:b0:09:b3:80:ff:4c:45:ab:e2:59:f8:02:87:74:
7e:5f:fd:fe:44:e6:0c:05:2e:74:2f:ac:1b:2a:e9:df:ab:c1:
82:80:95:10:b1:31:84:f6:2e:b6:f1:56:0e:4d:aa:36:03:aa:
e2:1f:03:4e:3d:b6:dd:6d:4e:64:23:cf:f7:79:45:3c:85:14:
c2:36:15:7f:e8:4b:a0:9e:70:98:e9:eb:64:b4:51:4a:d3:41:
d9:1b:06:73:4e:08:13:b2:37:79:98:d4:ed:18:5f:f8:ae:80:
0b:46:4b:57:1d:b1:d6:42:56:88:64:c2:c0:e8:e4:a3:e6:73:
01:0e:64:7e:56:ad:ec:9a:a0:53:47:a3:86:93:ba:13:db:96:
d0:36:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:05 2024 by rpki-client on console-ams.rpki-client.org