Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: oGK5qeK6PkpHd5K4uBcUCwtz3aZ1lyfLtP75LqDG+TI=
Subject key identifier: 14:A2:18:DB:E1:BD:40:4F:3D:C1:44:E9:DA:B4:72:57:C3:7C:1F:57
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 01935764F3811ECBA0DEEC0D4F1C2D25D49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 0E46
Signing time: Sat 23 Nov 2024 05:00:53 +0000
Manifest this update: Sat 23 Nov 2024 05:00:53 +0000
Manifest next update: Sun 24 Nov 2024 05:00:53 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: 037EJJnZIHtwBMIAUFLetPbqdyUhi9atoe1IeRfNrAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:f3:81:1e:cb:a0:de:ec:0d:4f:1c:2d:25:d4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Nov 23 05:00:53 2024 GMT
Not After : Nov 24 05:00:53 2024 GMT
Subject: CN=14a218dbe1bd404f3dc144e9dab47257c37c1f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:f7:bf:1e:f2:66:da:12:9d:c8:4f:2e:aa:
d0:c6:eb:17:48:de:44:90:73:3d:5e:0d:1a:5e:11:
f4:a8:75:b1:3f:60:af:0a:ff:f1:83:71:5c:d6:6f:
f3:26:ff:b9:c7:55:dd:05:f5:15:6e:dd:43:b1:52:
55:cf:59:c4:d2:9e:37:33:ad:2d:75:94:8a:6b:f8:
df:c4:68:8e:96:07:a0:e6:41:8f:0f:7b:38:ba:59:
70:b5:3a:0c:a1:33:2d:23:5f:ee:82:8b:4f:0b:9e:
b3:44:17:a6:7f:d3:b1:96:e2:8b:7c:cd:a7:82:d2:
ba:9b:93:d2:f0:3e:bb:5b:18:5e:db:e1:2b:52:81:
4d:2b:25:5e:2d:af:63:41:d5:25:a7:07:00:f8:fb:
a3:c3:eb:86:c5:a2:93:8a:92:c0:02:16:3f:7a:09:
6a:4b:92:e5:8e:f7:fa:39:1f:37:4f:70:d2:34:18:
8f:ca:d1:00:0a:90:b9:8e:9e:50:40:fe:8a:e2:ab:
f2:11:9e:99:3d:8a:f6:92:14:43:be:5a:40:ce:a8:
1b:ad:c6:66:26:2b:66:b5:9f:0e:e2:3e:9a:62:d3:
bc:fe:a1:da:f3:7f:f5:c9:c5:fc:e9:14:7b:ad:99:
66:d0:5c:c5:bb:fb:3e:16:65:39:0d:52:4e:75:57:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A2:18:DB:E1:BD:40:4F:3D:C1:44:E9:DA:B4:72:57:C3:7C:1F:57
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:07:35:0b:fb:fe:55:d3:bc:49:e8:4e:3d:3f:2b:72:c4:
ee:90:a3:f6:08:76:fb:12:de:1b:66:a3:69:a4:06:88:7a:1a:
89:6e:e9:b8:1b:ef:f0:5f:b0:14:c8:a7:56:88:44:8f:cd:b0:
cd:6a:b1:1c:5c:3a:53:05:b7:6c:e1:e4:bd:eb:d7:6e:49:83:
c6:4a:4a:c6:86:03:a1:7a:cc:21:f8:8d:e0:7c:fd:4d:f9:6d:
55:38:20:94:cb:d8:3f:10:97:60:e3:eb:6a:80:84:95:fc:ae:
40:b9:88:32:bc:d3:71:6d:70:7e:f3:d1:6b:80:27:f6:df:6f:
e5:8f:a9:65:0e:6e:c9:9a:a9:da:b1:16:b7:45:2c:25:ec:8e:
22:f7:cf:9c:51:da:e9:d8:d2:09:84:1a:b9:a5:bb:5f:77:f5:
c6:13:34:cb:96:48:af:d0:f5:32:9a:a3:d8:2d:d4:41:7b:f5:
64:7f:d8:a7:37:c2:f3:5c:b1:05:38:e1:1a:75:6c:7b:02:5f:
eb:ed:0a:cd:98:ca:ee:85:55:37:e1:23:8d:91:88:2e:45:07:
33:de:41:ad:2a:23:ad:7f:a5:38:e9:9f:41:37:25:1e:45:2a:
83:73:33:91:c5:aa:ba:f3:0b:56:a2:c9:36:37:4c:be:0b:7c:
b4:86:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:18 2024 by rpki-client on console-fra.rpki-client.org