Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier: hAP8t2YC8NM35Yv0oIZWx1C/57+p46QgUPxlvGS434A=
Subject key identifier: 17:32:E4:1D:36:37:DC:68:7E:59:CF:32:69:21:27:82:F4:66:7C:8A
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 01935689BF5819835FB1F26D66B0698D1E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:28 +0000
Manifest this update: Sat 23 Nov 2024 01:01:28 +0000
Manifest next update: Sun 24 Nov 2024 01:01:28 +0000
Files and hashes: 1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: oLch6O8tx523nrXb0ypkhcPnQZ9UC80kMVnNv6I6X30=)
2: Uc5eMO988jyf0m8rMUKO-r9c77s.roa (hash: iY195VbDDA37GBObcjrIbBx6HJAlDz3pEg4QhuTKvYY=)
3: rDztUAJLhwVs5Oyet9UHmMbxDZg.roa (hash: 7fghlbH348qiPBhX9kS8yLEvgrqJYBsC7zrK0L7LVOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:bf:58:19:83:5f:b1:f2:6d:66:b0:69:8d:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Nov 23 01:01:28 2024 GMT
Not After : Nov 24 01:01:28 2024 GMT
Subject: CN=1732e41d3637dc687e59cf3269212782f4667c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:a7:bd:a8:99:69:ff:2e:a8:5a:29:92:e9:
e0:e1:d4:de:78:25:31:cb:6b:cc:94:0a:15:5d:d6:
bc:da:61:b4:2e:b6:60:b6:62:0a:2e:01:78:e8:93:
46:34:cd:64:76:f4:60:a7:57:e6:b6:68:91:0c:1f:
a0:28:a0:e5:9f:70:07:a5:48:58:9a:4d:11:ba:23:
f1:48:cf:c7:4f:80:4f:9f:f8:ee:00:7b:a5:c0:d6:
68:5f:81:a6:82:33:83:6b:22:b4:d9:87:4a:e2:86:
a0:e9:fd:2b:f0:51:85:fe:dc:90:a3:08:cc:45:8a:
7f:e7:92:7d:b6:ce:99:32:7b:de:ad:21:05:25:8d:
15:7f:e5:6b:b6:53:f6:cd:c6:3b:01:ae:f9:a1:6b:
c7:08:58:83:44:d5:c3:a8:d0:7d:f9:0f:98:95:c7:
0e:2f:59:03:54:8b:31:98:3f:2f:e6:c0:ef:fc:46:
6c:f9:6e:aa:86:91:4b:54:82:ec:f1:ae:5e:bd:6b:
d0:a1:a9:fe:26:45:8e:3e:c2:05:1a:3c:cb:a0:b2:
d3:ba:d6:e4:5e:1f:2d:98:4f:ef:16:98:af:1b:fa:
75:9d:c3:43:64:63:76:76:60:6f:3d:a1:34:80:f4:
a4:44:7f:0d:8e:0f:4f:f2:c1:cb:c6:40:53:4f:94:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:E4:1D:36:37:DC:68:7E:59:CF:32:69:21:27:82:F4:66:7C:8A
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:98:28:68:b6:8f:2f:64:72:da:93:c2:27:ab:e5:c1:da:
27:82:ef:b0:85:67:50:45:ff:10:c0:87:35:cd:46:71:58:b0:
d9:90:84:a9:80:46:61:2e:07:bb:a3:18:d1:fa:2a:53:85:19:
63:b1:b9:a1:15:9f:24:8a:9f:50:d1:52:c6:f9:42:39:67:00:
be:55:9b:c3:6a:aa:e8:03:d3:76:af:e4:08:d2:5c:be:80:6e:
60:33:38:63:fc:a5:49:68:fa:ac:50:59:98:e9:11:0c:c3:9a:
7a:ce:c2:c1:d8:ff:f4:fa:52:1b:4b:58:d4:73:b3:a9:91:2a:
9b:33:f3:e5:5c:37:83:80:e4:51:36:40:3c:cd:23:30:4f:15:
f3:a6:6e:4a:44:46:ca:30:1b:6c:a8:1c:83:3f:2d:26:45:76:
c3:fb:c2:08:c1:85:39:c3:17:a3:d1:29:3f:7c:20:66:d1:42:
58:61:5b:9f:cf:b5:2f:2d:73:ed:0e:6c:65:b3:4c:b5:0a:1c:
ab:b3:18:58:80:49:c5:95:a8:64:4a:68:c0:8d:a6:0b:2c:ea:
79:11:b3:63:00:b7:0b:0c:31:8e:b6:90:1a:8b:07:47:a8:89:
11:be:be:31:21:06:87:60:90:97:cf:67:bd:2a:bd:90:0d:f0:
32:2d:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:39 2024 by rpki-client on console-ams.rpki-client.org