Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: uCdiuu54xrBd6mq6t5aLHF9LSJ947eluod5sNWHCmDU=
Subject key identifier: FD:BE:A1:C4:3C:89:86:2E:50:37:09:0E:1F:A5:D8:9B:12:AF:D1:FC
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0193549B107EC33F9CC9A4B9F8FF48CBE2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:01:08 +0000
Manifest this update: Fri 22 Nov 2024 16:01:08 +0000
Manifest next update: Sat 23 Nov 2024 16:01:08 +0000
Files and hashes: 1: Byj_0x7v8ktTVMnh0WHYhy2pkbs.roa (hash: yyTKJwUQGZQbsBoTOM0kra6CwFt8EOCIHUmFYn0YsCc=)
2: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: MV7ebBwdOW3oHbA2y1ESet9UrGTMxCweWEnkc/Jl31Q=)
3: fuN1qLInw_1_e_QquRSHZ0ascOA.roa (hash: 3VvaTGpjXtArfpuF9qgxbTjol7ZOwY9TjQMif+aULNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:10:7e:c3:3f:9c:c9:a4:b9:f8:ff:48:cb:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Nov 22 16:01:08 2024 GMT
Not After : Nov 23 16:01:08 2024 GMT
Subject: CN=fdbea1c43c89862e5037090e1fa5d89b12afd1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:2b:92:42:8c:f7:a1:c9:18:07:88:cb:3c:
b0:84:5e:2f:b8:ff:5c:42:c3:7e:47:6a:7e:5c:aa:
86:af:56:29:af:ee:1c:06:49:5c:16:29:0e:5b:e1:
53:39:ba:0e:65:58:9a:48:78:71:39:97:0e:df:27:
d6:cc:c3:7e:a9:27:c2:ec:59:f2:ef:cc:11:10:18:
8c:ea:12:12:5a:2b:55:68:27:ee:27:ec:4d:3e:4a:
c7:d2:4f:2e:db:64:6d:90:25:1e:d3:7c:05:d2:33:
c7:16:16:27:c9:5e:8f:a9:ab:24:06:01:92:53:ee:
50:36:7a:99:63:1f:86:cf:2c:ae:05:76:0f:c3:c6:
82:02:13:ab:aa:27:83:f7:cb:a5:3b:ea:a0:33:09:
16:72:ce:d2:2e:86:cd:54:dc:5c:00:a7:fd:82:c0:
b0:36:24:f4:03:6e:ad:cd:ae:45:78:c7:5d:d8:2f:
7f:79:30:8c:7b:0f:70:b4:37:6b:1b:62:f3:fd:35:
85:de:44:a4:a2:f0:e9:2d:3e:90:10:a1:53:20:cb:
39:47:a7:f3:10:06:c5:a9:cd:46:e9:9f:98:5a:b3:
26:80:d4:98:b8:41:c6:90:33:f1:ed:4f:58:29:98:
92:02:60:05:d7:33:e0:97:6f:3a:75:75:35:92:3a:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:A1:C4:3C:89:86:2E:50:37:09:0E:1F:A5:D8:9B:12:AF:D1:FC
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b8:6d:26:1d:c1:a1:93:a8:00:23:0c:91:d5:e8:69:09:15:
71:4b:c2:db:d4:75:21:88:7e:64:e8:15:50:7b:99:fd:84:cb:
d2:dd:96:ff:5e:d9:9e:81:2b:52:da:77:d7:01:c6:c3:a5:1d:
b5:7d:c7:94:12:8d:48:0f:08:c8:35:8c:e2:c7:82:b3:17:73:
f1:9c:61:cb:13:aa:7a:50:f7:2d:75:2e:bf:64:fa:56:9c:0c:
4e:dd:33:70:00:c4:97:2e:70:ff:80:4f:f8:48:6a:41:17:40:
93:38:97:bb:a2:6a:de:89:32:2a:63:f3:ab:ff:63:75:af:7c:
b2:03:1b:a2:db:6b:f3:ee:82:7b:9a:9f:84:2c:8d:97:e6:d4:
26:32:54:e0:ce:03:25:a7:b4:60:a4:82:40:d2:0a:35:2e:d1:
b6:fa:40:19:49:17:6d:68:ed:a0:66:a1:d4:6f:44:34:46:33:
99:67:e9:99:1d:0d:6f:f4:ab:67:67:38:63:e9:cb:a2:ef:ac:
f5:bf:47:16:3c:ce:0e:08:c5:03:b6:2f:c2:1b:13:23:9d:ae:
0a:54:f7:79:b3:eb:fc:02:0e:88:6f:b5:7e:45:5d:06:12:8e:
ed:62:dc:29:07:ac:c1:15:bb:af:39:ea:d7:b7:c1:1f:81:43:
0b:34:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:15 2024 by rpki-client on console-fra.rpki-client.org