Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File: UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier: MAfYCtIc5ZrNSsyuvh9qlNWQZ13+f+HmBwpXf3vNKbs=
Subject key identifier: 32:75:2E:47:54:19:E5:BC:CE:EA:AC:E2:18:6A:FD:BE:9F:84:2B:54
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer: /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial: 0193579BC8CC180A4A0F2F35B24B495E8CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number: 0307
Signing time: Sat 23 Nov 2024 06:00:47 +0000
Manifest this update: Sat 23 Nov 2024 06:00:47 +0000
Manifest next update: Sun 24 Nov 2024 06:00:47 +0000
Files and hashes: 1: Mp8i2HAPbOgjY6AhLP-eZTsYH14.roa (hash: NWiQMvbW3aGIQrfEjRVZnOImLOPh0+VWqZbI4C3givU=)
2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: 0bfFjdvZNQmZ7Zy4GWYMYwx0HFI/fOPhgvNf5wP4YZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:c8:cc:18:0a:4a:0f:2f:35:b2:4b:49:5e:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Validity
Not Before: Nov 23 06:00:47 2024 GMT
Not After : Nov 24 06:00:47 2024 GMT
Subject: CN=32752e475419e5bcceeaace2186afdbe9f842b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:d9:a5:e6:66:73:bf:4d:fc:f9:63:39:de:
55:37:bd:1b:b2:86:ef:cb:23:81:a4:aa:09:c4:40:
95:14:56:84:d1:4c:7f:c1:8b:53:e3:62:47:9b:2b:
56:e8:f0:73:a6:9e:ca:f9:2d:be:01:b8:b0:9b:7e:
6e:57:ca:d3:d2:f6:7a:48:3f:c2:d6:16:c1:b4:9f:
29:d9:8b:81:ad:8d:73:71:1e:9b:a4:33:de:b3:cb:
97:9f:a2:36:5e:60:88:23:0c:25:36:82:54:58:db:
a5:6e:11:ce:fe:d9:7c:11:49:63:9b:56:4e:a1:59:
15:f0:e2:f1:39:63:ea:1f:8d:9e:bb:b3:04:4e:16:
e2:b3:d9:5d:98:6a:55:94:30:f4:34:36:b3:62:b8:
15:d8:ef:27:21:c6:74:8a:f5:e5:69:ef:ba:9d:3d:
39:31:87:89:52:33:fb:14:63:e2:0d:2b:3d:15:65:
15:58:bc:f7:82:e6:48:f9:0a:86:05:cc:f9:53:5b:
40:c2:e6:bc:75:4c:7f:6f:b3:ba:cd:97:c0:af:cd:
48:e2:4f:0a:1d:dd:82:2a:4e:23:74:44:52:c1:d8:
ef:ff:50:ae:8b:33:69:8f:c7:b9:ab:87:58:d6:65:
7f:36:2e:30:81:34:37:10:bc:5f:7b:97:a6:3e:ef:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:2E:47:54:19:E5:BC:CE:EA:AC:E2:18:6A:FD:BE:9F:84:2B:54
X509v3 Authority Key Identifier:
keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:86:42:c0:8b:45:e1:ce:ed:77:d6:1e:1a:90:6e:9d:ee:
c3:3b:4c:fb:a0:55:1d:6d:64:56:ef:ad:34:4d:5c:7c:c0:08:
fa:f9:35:bc:ca:35:28:80:58:6c:78:31:f2:db:d2:f3:ba:7f:
cd:8e:66:33:c4:2d:bc:20:a1:bd:e9:12:c7:5f:ca:6e:66:9d:
4d:e5:32:9d:fb:a0:15:67:0b:1c:65:7b:94:4a:47:f4:24:26:
0b:9a:63:65:3d:6c:63:d2:8d:f6:fa:2a:7c:7c:e7:ed:bf:71:
44:89:c8:73:42:3b:48:ec:cd:ba:aa:ce:14:a8:cc:74:45:41:
41:d2:bf:bc:9b:eb:ce:e0:1a:54:d1:14:f0:b4:07:fe:f0:d9:
fa:dd:90:0c:23:00:8d:b9:e6:40:dd:06:0f:db:a2:fe:3c:40:
c8:4a:0c:fd:4c:da:2e:ab:5d:a9:3b:74:83:29:c0:40:02:7f:
03:da:ce:41:89:40:dc:a4:f5:5b:09:ce:89:4b:09:1c:74:0f:
74:43:c9:4a:9c:9e:e7:b9:27:38:8b:25:e0:58:50:29:1a:e5:
9a:cd:44:b5:ad:aa:dc:f3:8d:78:cc:b6:fe:7f:47:73:9c:63:
ae:1c:8d:21:57:36:c0:62:01:cc:b0:37:cc:20:9f:d3:11:ff:
62:43:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:56 2024 by rpki-client on console-ams.rpki-client.org