Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
File: pziV78cIO7fqppbPh2s6ZuJ5wdM.mft (raw, json)
Hash identifier: YM6Z/EMOQeaVTwhVZWPU/YSNdK35jGtUIG8C018MDJo=
Subject key identifier: A4:C3:06:1A:F4:45:35:4A:B7:AA:1E:29:ED:BC:EB:B4:97:B6:0F:11
Authority key identifier: A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3
Certificate issuer: /CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
Certificate serial: 01935764F904EB8B4C39046ADFAD6D746441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
Manifest number: 07F9
Signing time: Sat 23 Nov 2024 05:00:55 +0000
Manifest this update: Sat 23 Nov 2024 05:00:55 +0000
Manifest next update: Sun 24 Nov 2024 05:00:55 +0000
Files and hashes: 1: pziV78cIO7fqppbPh2s6ZuJ5wdM.crl (hash: fJ2k5YUKSCpXVsGTilog7nzw2MEnN5MWGJU+cn7NNlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:f9:04:eb:8b:4c:39:04:6a:df:ad:6d:74:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73895efc7083bb7eaa696cf876b3a66e279c1d3
Validity
Not Before: Nov 23 05:00:55 2024 GMT
Not After : Nov 24 05:00:55 2024 GMT
Subject: CN=a4c3061af445354ab7aa1e29edbcebb497b60f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ed:c3:bb:58:73:45:3b:9b:13:c8:28:1b:8e:
a7:66:f3:dd:23:ba:71:f9:9d:4f:95:64:2f:6b:c3:
ee:01:3d:f4:fa:7f:0e:64:24:84:6a:d9:44:86:7a:
1f:a2:52:40:bd:33:0a:88:f4:8c:87:61:60:ff:2d:
11:10:85:74:ce:a1:36:ab:9b:fd:a6:a2:c1:3a:ed:
04:87:fc:89:fb:60:35:5b:f5:9a:5c:42:e6:df:99:
85:34:95:19:ec:7b:d4:26:6c:50:99:92:6b:9b:2b:
2e:f7:99:26:41:21:74:8a:34:c1:b8:f3:00:b1:d1:
bb:0f:10:38:ea:b8:06:06:b6:5b:af:24:08:73:13:
83:4a:cc:df:58:ab:92:83:26:cf:5b:cc:aa:72:cb:
d0:1f:69:de:bd:53:f3:58:71:45:b8:dc:97:71:22:
fd:78:75:c8:6f:80:18:b7:9e:b3:00:97:08:ce:dd:
78:1c:fd:3b:97:38:12:1d:66:02:a3:af:2c:2e:a5:
34:c7:35:28:cc:0b:06:f3:14:bb:97:60:00:98:5d:
4c:6e:ea:65:1c:e9:65:33:ed:d1:71:7f:54:56:b2:
29:6e:07:cc:c5:2c:1c:ce:f0:fc:ee:5f:41:20:85:
2f:0a:94:e9:67:c9:4f:eb:b7:26:ba:a7:9e:22:d2:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:06:1A:F4:45:35:4A:B7:AA:1E:29:ED:BC:EB:B4:97:B6:0F:11
X509v3 Authority Key Identifier:
keyid:A7:38:95:EF:C7:08:3B:B7:EA:A6:96:CF:87:6B:3A:66:E2:79:C1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pziV78cIO7fqppbPh2s6ZuJ5wdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aec107-93e9-40a7-868e-c91c5debd5b7/1/pziV78cIO7fqppbPh2s6ZuJ5wdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:64:13:0e:8a:1f:f0:00:41:72:e4:97:de:e2:88:66:63:
8f:71:24:55:3b:57:f4:0d:3c:90:e2:4c:62:f3:e5:06:de:fd:
e6:46:75:74:92:56:d5:08:d5:51:58:39:03:d9:1e:a8:9c:50:
99:be:1a:0f:80:42:7c:00:26:59:fb:06:5f:da:4c:7b:7b:e7:
f9:7b:41:ca:1e:0c:8d:13:27:ab:64:cc:d5:cc:82:5f:2d:28:
a1:3f:03:4a:f5:75:ce:44:e6:4b:fd:8e:c6:4e:53:91:61:d3:
cb:ef:c1:43:ef:af:5f:f8:d5:55:85:88:48:a0:7f:ac:20:a4:
9d:ee:83:b5:bf:da:82:0b:79:f4:13:81:f5:95:ac:58:43:0e:
7c:09:83:8e:c7:bc:f3:e6:f6:dd:13:2e:bf:68:d3:ef:c7:c1:
d7:a1:d5:0b:0f:3a:a4:57:f1:fd:ed:66:88:a6:ee:96:bd:95:
39:8f:ad:f9:ae:0b:20:52:85:9f:e9:f2:96:8d:eb:d6:06:ba:
4f:da:43:15:30:b1:62:9c:8d:41:a7:62:97:d2:35:e7:23:b2:
7e:8e:74:95:78:3e:a8:53:ae:ed:81:ad:d1:0a:e1:20:06:9e:
9a:af:6c:69:db:b6:db:f4:60:90:5d:94:a0:e3:22:0f:3a:72:
a8:8c:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:40 2024 by rpki-client on console-ams.rpki-client.org