Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: ZkgoUOINxXn2E5LlXlnaZmizJuUjsTpek+xAA/DjuTA=
Subject key identifier: D6:21:E5:E8:BA:5A:E6:2A:1B:0C:81:28:5E:1E:C2:D7:B7:40:A8:4B
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 019369D909B4AC153CAC25E2DFBAD845C618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0C4B
Signing time: Tue 26 Nov 2024 19:00:51 +0000
Manifest this update: Tue 26 Nov 2024 19:00:51 +0000
Manifest next update: Wed 27 Nov 2024 19:00:51 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: Oj97daHOIcNgkZJfiLwAPNa4GHh9yUf2As3Wi2nuLr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:09:b4:ac:15:3c:ac:25:e2:df:ba:d8:45:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Nov 26 19:00:51 2024 GMT
Not After : Nov 27 19:00:51 2024 GMT
Subject: CN=d621e5e8ba5ae62a1b0c81285e1ec2d7b740a84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:b9:10:1b:47:b0:05:76:38:a8:cf:54:44:
f8:be:c0:86:be:5d:49:c3:48:eb:3c:b6:3d:97:e9:
6a:d7:44:c5:5e:a8:ae:a5:7a:ce:03:20:99:4b:c6:
f3:bb:1f:4f:dc:73:e4:45:a9:95:28:0b:4c:dc:5e:
31:96:44:bb:85:82:b4:05:c5:b5:7b:ec:4d:2a:f8:
e2:5e:ae:49:aa:d1:17:a2:cb:6e:96:a4:80:76:29:
1b:bb:a5:37:60:1d:b0:a4:f0:4b:f7:45:09:b5:8a:
6e:0e:90:8c:d0:e8:f7:b3:ab:3e:67:52:b0:35:c1:
10:fd:03:ce:54:6c:bc:44:b1:2b:ad:1f:25:1b:a5:
10:24:73:4f:cd:78:df:c6:3f:1f:3e:aa:58:7d:c5:
b8:18:9a:ed:21:03:bb:23:79:bd:8d:f0:a8:9b:90:
a9:95:2c:af:ad:85:15:17:5a:33:cc:ea:d7:2e:e4:
57:70:56:a9:8b:02:fd:7f:bd:dd:6e:76:8c:a6:31:
92:60:dc:11:fa:0a:33:55:92:96:00:c6:44:fb:3e:
c5:54:98:03:5e:18:6c:8f:66:d4:f1:11:ea:07:6e:
ac:89:49:7c:5b:c4:c4:94:5b:75:52:0e:fe:a4:f5:
c9:39:f9:92:97:76:16:c5:16:5e:d5:b1:af:c9:e2:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:21:E5:E8:BA:5A:E6:2A:1B:0C:81:28:5E:1E:C2:D7:B7:40:A8:4B
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:27:65:96:10:6d:2f:fc:38:57:64:46:98:b7:c9:81:7b:
e4:06:30:5f:7b:a4:fb:3b:5b:39:3e:b1:a5:46:17:f8:c3:80:
d9:5e:12:9a:8c:49:29:b4:2e:8d:5b:1c:28:1d:94:80:90:9b:
9b:a7:de:bb:f5:ac:31:97:95:6a:d3:2d:4c:02:a1:3d:99:bf:
c5:ea:8f:ba:22:c7:60:6f:55:b9:c2:b4:29:ab:f8:99:05:ca:
13:39:ce:b5:74:46:50:e5:a4:e9:04:d6:f3:ba:a0:64:87:56:
55:00:79:e2:f5:4d:16:e4:44:9d:90:7d:f0:cd:10:5e:a6:59:
a7:32:50:a1:d8:e3:28:f1:69:9e:61:c4:64:f1:1d:83:4b:8c:
67:77:a5:ac:f2:bf:43:c0:a8:41:03:a2:22:72:dd:f5:d7:38:
99:b3:00:46:c4:61:db:81:0b:41:72:7c:18:4b:e2:45:3f:68:
9a:a1:14:f3:8a:92:1f:34:5f:04:8f:98:1e:aa:30:5c:65:7b:
75:d5:23:2a:dc:47:c2:11:0d:84:3e:31:33:86:1c:8a:fd:a5:
91:bc:af:1a:38:7d:1b:e7:4e:eb:f6:d0:f6:3f:6f:26:86:39:
04:f5:6b:8a:02:be:37:9b:25:07:f7:01:6b:ee:11:c3:c0:6a:
35:89:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:05 2024 by rpki-client on console-fra.rpki-client.org