Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: 7yQNphtWLx1+QpbOZSemUOcR9izN7Dq6Ne7pSRBBJEs=
Subject key identifier: 8A:2F:7F:01:F8:7E:D0:BD:83:2C:62:9A:7C:85:BC:F0:1E:15:0F:AD
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 0193572DD2CB868A85F0257AE0D4B160B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 137D
Signing time: Sat 23 Nov 2024 04:00:41 +0000
Manifest this update: Sat 23 Nov 2024 04:00:41 +0000
Manifest next update: Sun 24 Nov 2024 04:00:41 +0000
Files and hashes: 1: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: /stldqIsIk6sy1ZMGnXBKmML7zPbWkVYK5pCK8pPEgw=)
2: qKpM9MB8zJPXlCCWAH_r25O0-ko.roa (hash: Fgq2H49BwRz99FxRPavwZkW4GLac/KXaHo4ffV6SBa4=)
3: r9v6JuAUqKXZEF8CV7UcNFeP9e0.roa (hash: /9SHTgGyTGjqGZZViaB8ayMS7u0qOrKNSURlrrqIReE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:d2:cb:86:8a:85:f0:25:7a:e0:d4:b1:60:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Nov 23 04:00:41 2024 GMT
Not After : Nov 24 04:00:41 2024 GMT
Subject: CN=8a2f7f01f87ed0bd832c629a7c85bcf01e150fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:97:55:9f:33:b4:bc:b9:81:48:fc:43:cf:
c4:2e:24:6b:47:8d:0f:57:cc:52:9c:15:ab:72:eb:
57:ab:f2:cc:23:88:23:c9:82:1e:1e:67:34:47:64:
e4:04:e2:80:63:f8:e1:db:63:0c:13:7a:70:54:51:
ba:c2:3a:9a:e3:68:fc:9f:f7:2a:09:03:a8:a7:2f:
ae:35:ee:f0:1b:b3:ad:67:3d:96:bc:65:6b:2e:38:
22:02:cc:44:e6:1b:87:7a:01:fe:34:8e:df:a2:b3:
55:56:4f:ae:e2:b7:36:d2:75:5c:3e:fa:22:d8:eb:
f7:70:52:d5:4d:14:7a:91:03:54:f6:13:f2:e2:df:
fd:f3:a6:50:6d:6a:ae:c9:94:e9:62:23:fc:a8:9b:
cc:f7:0e:4d:b2:6a:e9:65:b0:0d:6f:5e:c8:50:70:
0d:15:11:6a:4f:df:9c:22:cf:7b:59:0c:e3:2e:c2:
67:f6:f8:94:64:17:ea:4d:dc:8a:38:3e:72:9a:cc:
95:f1:f2:36:8a:ab:ac:e3:0b:63:5a:24:9d:47:64:
27:bb:b8:36:c1:b8:81:65:86:70:91:7a:7f:12:fb:
d2:a8:4d:e3:e6:b7:b5:0f:5a:65:35:f1:bd:3e:8c:
ba:b5:05:88:2f:24:4b:da:da:73:ad:c8:ab:e9:d2:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2F:7F:01:F8:7E:D0:BD:83:2C:62:9A:7C:85:BC:F0:1E:15:0F:AD
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:92:46:4f:2c:c9:05:c6:37:7f:60:df:e6:16:fd:29:39:
7d:3e:35:88:d4:b5:f3:7c:b5:62:b9:81:d5:53:60:c5:84:71:
cb:12:64:d7:13:f1:9f:8d:3b:12:90:01:eb:45:13:33:c5:c5:
7e:de:dc:be:42:43:fa:73:13:d5:54:c3:0d:15:32:ad:4b:0e:
99:60:96:7b:80:07:08:0f:bc:84:75:1c:d7:c2:7f:50:62:b9:
bc:fe:4a:33:11:9b:40:01:b7:a1:8d:2b:8c:9b:11:ce:e1:74:
84:a3:54:63:70:80:a3:e3:03:82:64:91:e8:2f:71:88:8d:5f:
26:32:5e:cc:87:1c:96:5d:64:57:d5:bd:aa:60:c0:01:80:5e:
99:d6:61:d3:5e:10:10:3b:fb:e3:d9:50:5d:21:87:58:ed:d0:
f9:45:c2:4c:f7:3d:a3:da:9a:3f:0e:b7:33:f9:c8:8d:07:ef:
77:55:9b:1c:bd:1e:89:b2:c4:ce:c6:48:6b:66:30:b7:a6:95:
a1:4b:f8:0e:73:96:3d:11:9d:f8:5f:e9:2f:4c:1a:8f:81:d2:
62:3c:af:55:35:a5:19:ce:65:c0:11:32:a3:01:6d:e2:19:e7:
43:4b:08:45:f4:9a:c5:bb:b1:34:98:3b:e8:28:54:95:a0:c7:
a5:96:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:18 2024 by rpki-client on console-fra.rpki-client.org