Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: 1fZx77uUKESy08xfH5G47SXOHUVZ/0hST/AxD/JMXJI=
Subject key identifier: 3D:78:42:1A:6F:F3:62:F6:B7:B1:79:25:C8:3D:B1:4F:5D:25:22:59
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 019357D2A05EBD14520918E36BB726CC6AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 04A7
Signing time: Sat 23 Nov 2024 07:00:41 +0000
Manifest this update: Sat 23 Nov 2024 07:00:41 +0000
Manifest next update: Sun 24 Nov 2024 07:00:41 +0000
Files and hashes: 1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: 1HS7OSYri+rpSRGQee5vCM7oLFmqIQcjCN4lXP2cDo0=)
2: lWYayBKD4usRGQ6Y-Qs13Rlb-sU.roa (hash: sPtqGnyKiDp5ELKZM2GjMcUXJnNFzaNh6m2uVRvJ5lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a0:5e:bd:14:52:09:18:e3:6b:b7:26:cc:6a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Nov 23 07:00:41 2024 GMT
Not After : Nov 24 07:00:41 2024 GMT
Subject: CN=3d78421a6ff362f6b7b17925c83db14f5d252259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:c4:1f:72:f7:a2:03:f8:05:30:f0:b7:d5:
36:05:a9:4d:56:3d:bd:a6:a9:3a:79:e1:4b:b0:40:
54:41:e7:7a:5b:04:41:3f:f8:da:1d:e1:2b:93:cf:
e6:30:c2:d9:1b:ed:88:24:8e:ec:67:a0:f3:ae:92:
05:61:e6:d4:7a:e6:8a:7c:fb:b6:9c:fc:ad:97:d6:
ca:d1:88:7f:6f:4f:ab:17:7a:4f:77:19:ad:93:29:
81:22:4e:09:df:ea:10:3f:34:b6:92:06:86:a9:28:
9c:f7:ea:bd:b8:03:5c:1b:30:0d:30:14:44:ef:bf:
f4:d9:0e:5c:33:a4:30:4c:24:30:90:ab:7c:bc:60:
77:23:43:67:b9:4f:f8:83:85:24:2a:02:a9:d8:4c:
a2:28:15:49:33:09:30:55:c4:be:6a:3b:05:1e:3f:
f2:e2:82:45:98:0a:de:55:7d:4f:bd:f6:9b:19:cd:
25:4d:07:19:16:c3:2f:c9:d3:2f:3b:ab:60:b9:4b:
91:7f:05:fc:ce:3f:53:a6:47:8b:ea:6f:88:57:91:
23:e3:15:cc:e3:e8:5f:7b:eb:51:90:7a:29:82:06:
ff:94:ef:d9:b9:89:c9:f9:c6:ec:50:cb:44:5e:d8:
59:e6:26:82:ab:d3:51:af:a2:35:29:4b:78:cb:3b:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:42:1A:6F:F3:62:F6:B7:B1:79:25:C8:3D:B1:4F:5D:25:22:59
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:29:e1:89:cb:c5:f3:9b:a8:e8:65:53:be:3a:d1:5f:1b:
3d:61:10:79:f8:32:e0:d6:d3:3c:a6:d9:d5:67:65:d6:1b:73:
54:02:7c:a9:f0:a8:64:ca:25:ee:60:13:48:58:a7:76:c6:5c:
ad:5a:fa:5a:6f:6a:ee:96:34:2f:d6:73:21:62:8b:38:fc:b5:
68:6c:ff:13:2b:30:8b:18:48:f5:a4:d5:8b:fc:9f:16:24:2a:
17:77:81:e5:55:2a:fe:79:a6:47:dc:e6:c7:51:ed:e2:28:ea:
98:9c:03:a0:6c:f2:68:57:90:ff:59:f7:79:05:ed:99:6d:ab:
bb:57:27:eb:2a:ce:f7:31:de:a8:0f:0c:97:0a:0d:84:c0:27:
f8:d4:d8:90:73:03:f1:29:e0:2f:b3:35:c9:b9:82:fd:ce:41:
0d:a9:7b:1c:4b:cd:35:04:62:2a:cf:85:99:4b:d1:a8:06:fe:
f3:5e:28:7d:d4:e9:95:4c:54:3e:0f:61:4e:c2:0e:69:fd:0f:
59:43:06:87:2c:1e:ad:14:07:46:ed:5d:aa:a3:33:41:21:4b:
f8:8e:4e:b3:16:52:2e:3a:7d:2f:f3:60:a6:5d:22:76:80:1a:
12:3f:da:f9:d5:5b:d2:30:eb:d1:b7:d4:3b:08:be:89:83:7e:
79:70:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:49 2024 by rpki-client on console-fra.rpki-client.org