Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: XLZm3mIlRJNY9P8FSNlX+kxMoaNMh3v21UrYrs0MBnM=
Subject key identifier: 4C:0A:F3:0B:7E:42:2C:7F:E1:42:B9:F8:AA:E7:F4:67:5B:6A:7A:AC
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 0193568ACC67A4A4CAC678F4C1D2552CEC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 0699
Signing time: Sat 23 Nov 2024 01:02:37 +0000
Manifest this update: Sat 23 Nov 2024 01:02:37 +0000
Manifest next update: Sun 24 Nov 2024 01:02:37 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: j168uW8TBDwCJIjXMUYPNgu4wG401QTSR6wy1COiPAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:cc:67:a4:a4:ca:c6:78:f4:c1:d2:55:2c:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Nov 23 01:02:37 2024 GMT
Not After : Nov 24 01:02:37 2024 GMT
Subject: CN=4c0af30b7e422c7fe142b9f8aae7f4675b6a7aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:50:9f:3c:c4:75:90:65:57:e8:83:f0:fb:
cf:99:ba:35:bb:ba:91:1b:3e:61:7e:1e:78:b9:bc:
2d:2a:48:25:8c:42:f3:fa:bc:43:aa:cb:38:9c:5c:
1e:44:92:8e:a9:e8:7d:79:04:39:3c:81:92:b4:89:
69:c2:80:c1:42:45:74:fa:a7:b0:95:da:f0:61:b3:
08:e0:6e:3f:b6:da:b3:02:e9:e9:ff:da:fd:22:0e:
4c:38:3d:ad:3e:6f:2d:62:25:6d:94:50:4d:67:40:
80:91:a8:83:f0:b6:6a:68:0a:f4:38:69:7d:30:f6:
f1:5a:0f:1b:e8:05:2d:d8:06:b1:68:22:5f:05:b3:
d0:ca:f4:5d:7a:92:fa:e7:89:8b:3c:e9:51:39:80:
9a:95:66:92:38:7c:87:2d:78:04:f5:cf:a8:5e:58:
83:92:e9:e5:47:53:f7:bb:2e:f8:1b:62:bb:df:5b:
b2:98:ce:59:76:14:22:7f:3d:c8:82:52:fc:fd:7d:
76:fe:f6:1b:ee:9d:f0:f7:17:c2:89:00:6c:ea:2d:
7a:29:4a:10:b7:7f:c6:ed:db:00:28:0d:3e:83:79:
a1:d9:f5:d9:46:90:bf:74:1f:4e:fb:5e:25:33:c0:
a4:1b:f3:87:58:5f:e0:eb:ba:49:26:17:c2:6c:d8:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:F3:0B:7E:42:2C:7F:E1:42:B9:F8:AA:E7:F4:67:5B:6A:7A:AC
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2b:c1:b3:20:fd:60:eb:bf:1c:ef:0f:46:7e:ed:18:47:2a:
1a:99:a3:7f:75:d6:9c:b0:85:10:03:55:2d:0d:dc:68:38:6d:
89:d5:b8:c4:dd:9d:87:8a:d2:e4:c0:23:cb:0b:53:ec:04:fc:
bf:4c:84:79:f0:a1:3a:c6:d2:48:34:ee:57:50:fe:57:5a:5a:
16:0f:73:00:22:6e:e6:a2:4e:89:eb:6a:6d:2f:7e:45:9a:fd:
76:59:d3:ce:3a:e5:bf:32:2d:3b:7f:3f:21:1f:5f:c9:7c:d2:
7f:44:6c:68:93:5d:df:5f:ba:bf:44:33:40:05:c8:bb:6f:2c:
93:e4:e9:50:c3:dd:76:4d:c1:ef:bc:f2:4b:c6:23:fb:6b:95:
01:67:8b:b2:0e:85:03:a7:8d:26:8f:6d:00:e7:8f:a7:65:49:
2b:c8:c3:a1:ef:ac:ae:03:d9:45:46:32:a2:f9:36:b1:ad:70:
74:fc:14:b8:95:1d:ef:99:96:bb:7d:98:86:59:ee:08:df:0a:
d1:26:fe:3d:99:11:88:39:34:6e:c6:1a:59:09:4e:45:f5:96:
f5:92:b6:c0:ce:d1:87:d8:b5:07:05:a4:3f:25:20:00:cd:bc:
af:ec:99:61:f0:d5:e1:c3:c3:db:23:c2:ef:a7:d0:fd:d2:85:
cd:72:d0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:54 2024 by rpki-client on console-fra.rpki-client.org