Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: dQvlYHTPAnn36zafgVy8u99YPbqhDRQEeuWVp0XjjY0=
Subject key identifier: E1:78:FD:A5:AA:C6:AD:FF:9C:15:4D:47:E9:2F:D0:2A:E3:A7:38:2D
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019355762FDEA900C1590A58EB468EBED82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0233
Signing time: Fri 22 Nov 2024 20:00:29 +0000
Manifest this update: Fri 22 Nov 2024 20:00:29 +0000
Manifest next update: Sat 23 Nov 2024 20:00:29 +0000
Files and hashes: 1: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: AjMDtPyRaHz/lQhGajtwDl8Yw5ajHjtZR9F7ACEOL9I=)
2: tK-sYkWBMlg04xDtjA4w24NXU2g.roa (hash: yjupCBGvdNJrzR90Ihj3sUnBiBLHwcdWZkDRFQlOXwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:2f:de:a9:00:c1:59:0a:58:eb:46:8e:be:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Nov 22 20:00:29 2024 GMT
Not After : Nov 23 20:00:29 2024 GMT
Subject: CN=e178fda5aac6adff9c154d47e92fd02ae3a7382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:f6:2c:df:11:2f:18:63:0b:fa:bc:5d:18:
86:18:d8:4b:04:ee:dc:1e:3c:f9:fc:53:7e:9f:2d:
b5:10:ca:a4:de:8d:de:54:b4:36:61:9d:00:a5:f7:
33:12:40:36:82:03:e2:ab:6f:9e:e5:82:8d:e9:c8:
e8:c4:eb:a3:72:cc:89:8a:bc:08:e0:c0:0d:75:82:
35:43:6c:00:e9:8b:5c:a6:9e:6d:9d:c1:78:f8:c9:
00:14:ab:3d:d6:68:5a:c6:94:6a:c2:40:ba:db:42:
b6:90:eb:12:bd:b6:b6:8f:31:14:0a:65:68:cf:bd:
7b:8f:ed:69:e2:27:c1:2a:bc:13:b4:d1:20:3f:b2:
c3:f2:1c:01:b6:34:c7:f2:f4:82:eb:f0:af:90:29:
4d:78:30:a6:8a:71:da:a4:7c:89:ba:ca:25:6f:3d:
6a:ef:51:86:49:0d:41:08:4a:9f:42:2e:ae:2f:17:
31:16:95:cc:0f:f7:64:b9:4b:c9:55:df:48:38:f0:
a5:db:8e:b3:79:23:91:8d:25:84:cb:7b:ff:b7:90:
4f:b6:ea:2e:7c:70:4e:f5:5b:cc:52:fa:04:37:56:
53:6e:cf:69:61:99:4a:c8:8d:4e:b4:b5:3b:ca:e9:
37:c9:3d:11:ce:95:79:93:0e:af:66:7a:41:8f:e8:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:FD:A5:AA:C6:AD:FF:9C:15:4D:47:E9:2F:D0:2A:E3:A7:38:2D
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:ef:61:bf:81:ca:ea:c2:5b:4d:2a:95:37:b5:ea:ee:d1:
bf:89:70:c5:d1:bf:76:c4:19:ff:9f:00:a1:1c:e8:14:29:92:
f2:da:9f:84:ed:d9:56:79:20:3d:3d:78:c9:85:5e:16:64:ff:
e9:9a:56:7f:fc:77:88:97:70:74:e4:96:1f:4e:07:9a:d6:c4:
5d:71:4a:4a:ec:aa:9c:65:2c:3a:7f:0e:da:db:8e:53:a5:a7:
97:c7:a3:ce:dd:e1:84:62:b9:3a:71:e8:fd:5d:53:94:77:b0:
a3:b9:12:e2:bb:5c:e1:18:8d:0f:ce:94:67:91:ee:c5:7e:4c:
18:50:5a:98:61:75:80:89:a6:63:e7:e2:8c:ee:67:33:74:45:
09:33:95:88:9d:19:6c:c3:e1:fc:1d:11:8c:38:c1:a8:27:c3:
ff:f8:2d:73:43:0b:c1:27:7f:58:b0:8c:1f:35:d4:59:f3:22:
f0:44:02:79:0a:f0:2e:7e:13:7b:6e:0b:6c:55:86:e6:34:a1:
47:fc:08:0d:07:73:1f:53:14:f9:51:11:52:ae:ce:59:ec:c9:
dd:4f:8a:dd:1f:1a:6f:0a:d1:34:2d:54:de:b5:ef:e0:0d:e1:
d8:c6:c2:ff:54:58:ba:0f:41:4f:22:9c:3c:6e:68:84:f4:36:
6c:e3:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:10 2024 by rpki-client on console-fra.rpki-client.org