Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File: lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier: GTL5U7CRnhSvYLmmNZXKa+KyOFmUCgknrtYNgazKmxQ=
Subject key identifier: 97:30:6B:F6:A1:66:B7:2F:67:2E:E2:A6:BB:26:37:59:32:C3:0A:F6
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 0193523E217CB5274720B6F37274CBE4717D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number: 87
Signing time: Fri 22 Nov 2024 05:00:23 +0000
Manifest this update: Fri 22 Nov 2024 05:00:23 +0000
Manifest next update: Sat 23 Nov 2024 05:00:23 +0000
Files and hashes: 1: MVnJQ49sHBm5oBkTSCvVWU92AAI.roa (hash: NuEIB/qiMaV/CnKAdDc64VtnAizdIzqz8lnmd7uk9YA=)
2: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: c0n+px1/yReWpWYX8hDfJGngVqqbVo+wJs68J/ZSMi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:21:7c:b5:27:47:20:b6:f3:72:74:cb:e4:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Nov 22 05:00:23 2024 GMT
Not After : Nov 23 05:00:23 2024 GMT
Subject: CN=97306bf6a166b72f672ee2a6bb26375932c30af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:a8:a1:db:dd:fd:d1:fa:f8:e4:c7:97:4f:
d8:ed:fb:43:ad:a2:c4:66:7f:ae:6d:00:78:c9:be:
ee:bd:62:bc:87:38:2b:38:69:8f:13:ce:37:46:1e:
2b:42:49:c2:df:0d:84:29:d2:c3:89:43:7e:bf:f2:
03:3e:05:12:f6:27:45:6e:da:99:c8:94:50:43:11:
80:bf:5e:20:9c:28:f7:dd:b9:4e:ce:83:68:5d:08:
a4:9e:2c:09:9c:6b:6d:77:ad:90:9c:43:05:35:6a:
46:e0:7e:e2:96:05:09:2d:a4:b1:e8:06:5a:ac:b5:
36:13:b4:d7:26:79:a5:0a:de:ad:8f:7c:78:ee:8e:
f1:4e:e9:45:7b:89:b6:fc:c7:d8:57:7a:35:c4:f9:
72:30:a9:97:42:d8:10:1c:66:03:d3:82:11:4e:d6:
4d:07:58:a6:93:39:29:74:d6:91:5b:a1:36:d1:29:
75:5a:00:58:cc:02:eb:93:79:a3:cd:e6:2d:80:a8:
9c:0c:98:63:ea:40:bf:d8:64:7e:a6:09:98:bb:7b:
68:1b:0a:83:2c:a8:6a:09:c5:d5:78:e4:d5:4a:f0:
37:1d:94:d7:eb:ca:58:2f:e5:37:a9:e7:4d:62:a8:
f0:74:c2:fe:b6:23:bf:3d:d6:c7:ba:f8:25:e5:97:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:30:6B:F6:A1:66:B7:2F:67:2E:E2:A6:BB:26:37:59:32:C3:0A:F6
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:be:7b:4e:bf:89:b6:d9:fc:c6:6d:87:0b:b6:e8:50:cd:
bf:ce:b7:4d:64:6c:e6:0d:69:aa:ea:35:0c:53:b6:0b:50:5f:
cf:dc:fa:db:5b:33:b8:e8:84:8d:f0:a3:81:db:07:f9:38:e9:
29:b0:89:61:c0:40:2a:40:d4:c4:67:5d:61:25:f6:e8:8f:a3:
cb:22:dd:73:6b:3f:d4:b1:c1:e0:3f:c7:5d:5d:cf:e0:49:90:
fe:4f:3a:2a:e1:3d:91:ad:ed:7d:8b:d8:d0:09:a5:87:a0:1c:
85:ad:f4:21:1a:4a:c9:c4:6f:e5:9b:79:16:88:9e:59:31:67:
07:9d:69:f6:53:b0:d4:38:09:32:5e:fe:1d:f0:b3:4a:68:86:
f4:7a:78:2d:b5:aa:b9:09:bc:4c:ff:ee:01:a2:5e:73:54:cd:
63:32:e6:bb:fe:e5:fd:e7:b1:1d:36:e4:a9:44:5f:75:3d:97:
f4:b8:ec:29:b8:52:85:19:f2:c1:2a:85:d1:e2:00:b9:c5:36:
4d:23:19:1b:88:32:e8:0b:db:af:09:2c:a0:15:83:e9:33:2e:
80:a1:17:1a:26:46:c0:6a:ac:9f:3d:16:44:76:67:cf:76:8f:
2b:0c:c7:94:9c:45:e0:ce:e7:08:0f:67:7f:b1:33:e7:fb:cd:
a7:8f:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:56 2024 by rpki-client on console-fra.rpki-client.org