Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: FRT9+8i6O223koDX1jHujziXPykwDLnPb6OjCotVCNE=
Subject key identifier: 90:89:D5:F6:05:D6:0A:91:36:95:B7:F3:CB:2B:58:D1:5D:53:7E:7C
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01935689F125DA5CA652515799804D78B341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:40 +0000
Manifest this update: Sat 23 Nov 2024 01:01:40 +0000
Manifest next update: Sun 24 Nov 2024 01:01:40 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: WaHun4Cw+Vu8D9w4W5z84MIJzRCFPrVE3HDqjaFnM6U=)
2: aTSK_FwmsWXvqqLgkRWfZyn0y2c.roa (hash: ZyE3m33f01D86H5p9Ajn+B6G2kkj9khtIYDBogaNbiM=)
3: mIugc9b_VjeqZR2WZexPbjxlixY.roa (hash: +JhAz3ycNvSeHTKYu4bLMgS3E0qqWjFNQaMs4LyKe7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:f1:25:da:5c:a6:52:51:57:99:80:4d:78:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Nov 23 01:01:40 2024 GMT
Not After : Nov 24 01:01:40 2024 GMT
Subject: CN=9089d5f605d60a913695b7f3cb2b58d15d537e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:69:7f:02:3c:81:35:cb:06:d7:d6:b1:70:
62:df:9a:8a:dd:08:c6:16:f9:94:81:c9:fb:55:ba:
75:84:08:cb:f6:7e:78:5c:5b:6d:40:62:14:ac:b5:
b3:01:7d:93:04:25:42:d3:ec:39:c5:c6:67:2b:bf:
10:6e:77:20:3c:a5:37:18:21:d8:30:61:bf:1c:46:
fc:04:65:0a:9d:19:1b:e3:0b:91:f0:f7:26:f9:cd:
86:08:86:d3:94:95:26:1f:88:cf:ca:19:1d:1e:87:
56:81:7b:72:56:70:49:7a:d6:e8:89:9d:f8:de:31:
9a:ff:d4:f7:47:40:65:76:fb:97:77:f7:41:ca:2b:
c5:09:05:b9:9b:e3:e3:ef:98:cb:3e:20:9b:d6:23:
cb:28:b0:06:9c:fd:31:ef:6b:93:01:2d:c6:11:ac:
58:71:cd:3f:a3:2a:9f:db:33:db:d6:f5:f2:68:ac:
5a:b5:4d:5b:04:fc:1c:a0:f7:78:13:28:6c:69:df:
9d:56:05:76:86:db:27:43:1c:ec:a3:60:67:9f:03:
15:24:88:bf:50:c7:5c:45:ea:a8:15:dd:a7:05:82:
f6:ae:06:b9:16:78:57:e1:f3:61:b4:19:9f:f3:1e:
b6:44:3f:b9:31:2c:24:a4:8f:ef:c6:63:b9:8f:4f:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:D5:F6:05:D6:0A:91:36:95:B7:F3:CB:2B:58:D1:5D:53:7E:7C
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:6b:1e:40:b1:81:ad:69:e5:32:5e:7d:54:7c:ac:8d:92:
e1:a7:30:ce:5d:c0:6a:50:a0:93:de:c1:46:b9:56:9b:25:f8:
f9:a5:a1:a1:f7:c9:79:44:7a:10:85:7b:f8:99:6c:e9:a6:9a:
0a:b8:6a:ee:af:45:bc:16:85:aa:90:37:24:5f:9e:cc:12:3c:
18:aa:de:3a:40:06:97:b3:9e:43:d5:f8:db:f6:1f:a4:f3:9b:
b3:e6:f1:cf:62:6f:24:30:07:cd:a0:03:6c:7e:64:86:72:7a:
0d:02:c5:45:93:4a:e7:1b:e9:95:af:88:8f:d0:96:6e:a4:c1:
be:e1:a3:93:ad:b0:98:ca:b7:ac:a0:68:52:5b:af:74:dd:18:
f0:9d:90:48:61:6f:b8:fc:c0:9f:5e:fd:85:4a:e9:e7:08:d0:
8c:cd:41:fa:df:db:d1:93:e1:20:8f:67:4d:91:1e:5d:3d:4d:
12:38:91:b5:1d:9e:87:23:4d:65:6d:bf:51:a0:8d:e4:87:64:
ff:b6:60:94:90:f3:85:89:c6:1b:f2:b8:6a:02:82:0e:d5:b7:
8d:f5:ef:e9:44:4d:0d:1e:6e:e4:4e:ff:d9:65:fb:7c:f7:e6:
49:40:22:a7:24:03:21:53:bf:fd:30:d4:61:d4:4d:6e:2b:82:
1f:58:e4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWifEl2lymUlFXmYBNeLNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWY5ZGRhMzA3Y2I1MjUzODVlZjkwZjUwNmQwZDU3YmI5
ZDJiZjIwHhcNMjQxMTIzMDEwMTQwWhcNMjQxMTI0MDEwMTQwWjAzMTEwLwYDVQQD
Eyg5MDg5ZDVmNjA1ZDYwYTkxMzY5NWI3ZjNjYjJiNThkMTVkNTM3ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wVpfwI8gTXLBtfWsXBi35qK3QjG
FvmUgcn7Vbp1hAjL9n54XFttQGIUrLWzAX2TBCVC0+w5xcZnK78QbncgPKU3GCHY
MGG/HEb8BGUKnRkb4wuR8Pcm+c2GCIbTlJUmH4jPyhkdHodWgXtyVnBJetboiZ34
3jGa/9T3R0BldvuXd/dByivFCQW5m+Pj75jLPiCb1iPLKLAGnP0x72uTAS3GEaxY
cc0/oyqf2zPb1vXyaKxatU1bBPwcoPd4Eyhsad+dVgV2htsnQxzso2BnnwMVJIi/
UMdcReqoFd2nBYL2rga5FnhX4fNhtBmf8x62RD+5MSwkpI/vxmO5j08hywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCJ1fYF1gqRNpW388srWNFdU358MB8GA1UdIwQY
MBaAFACvndowfLUlOF75D1BtDVe7nSvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTkt
OTBlYWNlOWUwNTllLzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTktOTBlYWNlOWUwNTll
LzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxVrHkCx
ga1p5TJefVR8rI2S4acwzl3AalCgk97BRrlWmyX4+aWhoffJeUR6EIV7+Jls6aaa
Crhq7q9FvBaFqpA3JF+ezBI8GKreOkAGl7OeQ9X42/YfpPObs+bxz2JvJDAHzaAD
bH5khnJ6DQLFRZNK5xvpla+Ij9CWbqTBvuGjk62wmMq3rKBoUluvdN0Y8J2QSGFv
uPzAn179hUrp5wjQjM1B+t/b0ZPhII9nTZEeXT1NEjiRtR2ehyNNZW2/UaCN5Idk
/7ZglJDzhYnGG/K4agKCDtW3jfXv6URNDR5u5E7/2WX7fPfmSUAipyQDIVO//TDU
YdRNbiuCH1jkpw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:58 2024 by rpki-client on console-ams.rpki-client.org