Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: 00tlusXonQSYRclRl2CyTysqp3UXEDWUdBa27UeLgkE=
Subject key identifier: DE:02:5B:5D:05:50:5F:0D:EC:40:D2:3A:58:92:65:AD:61:16:A8:E7
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019357646B1203973BF69FDB2214927C9D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 05:00:18 +0000
Manifest this update: Sat 23 Nov 2024 05:00:18 +0000
Manifest next update: Sun 24 Nov 2024 05:00:18 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: 8TxzxQWRUMOEDFVMQJqf6j6mZtRD8GkxRTJz8Rqi+Wk=)
2: d85_IosKeeGjJqlrs08w-mcsBzw.roa (hash: PaAHwvnH1zYaacqoI5yFogke7/gmicIlBnS6YO9OflI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:6b:12:03:97:3b:f6:9f:db:22:14:92:7c:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Nov 23 05:00:18 2024 GMT
Not After : Nov 24 05:00:18 2024 GMT
Subject: CN=de025b5d05505f0dec40d23a589265ad6116a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:10:a4:fd:f7:ca:1c:02:89:83:a2:4f:76:
71:d5:ae:4c:55:7e:5e:61:02:e8:73:00:50:e7:cb:
b7:12:e6:68:ec:9c:a5:f3:4d:77:ad:43:06:24:7e:
51:6b:48:33:58:59:45:46:7c:00:4f:b6:a6:fc:9a:
26:f3:e5:c9:84:64:38:fa:44:a1:f4:b2:06:df:2d:
15:64:be:15:88:b7:d4:76:6c:b2:52:04:97:0d:9b:
e2:fa:25:86:c7:d6:0d:fc:9d:b0:f5:3f:7e:78:b8:
b4:9a:7a:38:37:7e:4b:28:06:11:30:b1:5b:f2:29:
64:ef:d6:85:d8:63:85:5e:db:af:50:3d:ed:5f:fd:
70:d5:02:77:39:69:c7:55:53:e1:b9:d5:7d:51:74:
af:35:9d:c3:02:b5:c1:9b:e8:4e:73:d9:6f:3f:ef:
b5:ab:b8:d4:c5:5c:7c:fa:60:7c:df:37:03:56:f4:
73:23:53:c5:65:7c:8c:81:77:80:2e:cc:95:0a:a5:
63:d0:6d:ad:ba:b4:f2:03:62:5e:48:ad:8e:98:20:
f8:d4:07:fb:48:0c:57:83:a2:b3:8d:54:2f:f3:4b:
05:ab:0a:9f:2b:09:0b:88:10:b1:e4:8e:9c:01:f2:
21:57:c0:d6:b0:4c:bf:ea:4e:ee:81:19:95:ac:f0:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:5B:5D:05:50:5F:0D:EC:40:D2:3A:58:92:65:AD:61:16:A8:E7
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:36:a5:18:07:a3:bd:6e:51:65:29:02:02:5c:25:2a:e3:dd:
1d:bc:db:68:3d:b3:cd:4a:db:90:e1:68:c5:b7:23:d0:52:72:
2c:44:44:44:30:3b:e6:74:ba:da:6c:6e:aa:1d:89:f2:79:6a:
04:fd:48:e5:bc:72:06:33:0d:47:16:ef:9f:c8:d1:1f:bb:fb:
54:36:6f:c8:6c:8f:ba:cd:ab:e2:0d:ab:91:4d:2e:cc:ed:57:
f9:ab:c9:3d:b1:9f:61:34:b0:70:ad:24:17:ec:36:49:82:86:
3a:66:a0:4a:31:19:f2:d5:8f:4b:c5:fb:bf:17:ff:39:c2:a0:
4a:05:dd:39:ff:50:78:e6:41:52:7d:0e:b6:1c:94:b7:d2:aa:
48:29:bf:27:f9:b9:82:63:83:8b:e4:3c:89:dd:05:14:7d:02:
68:3a:ef:19:b2:b4:97:bd:fe:46:d0:38:2b:58:6c:a4:f2:ae:
f8:5a:69:09:20:fa:df:c5:b8:0f:69:3d:fe:37:5d:eb:a7:94:
d2:9c:86:8b:e1:2d:55:91:42:30:89:aa:40:36:0c:25:77:08:
ed:07:83:b4:25:70:d2:d2:e9:a1:7e:60:7d:ed:52:e1:99:7d:
e7:88:11:44:59:c2:60:4d:18:79:71:a7:86:01:d4:b1:ef:2a:
91:e1:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:43 2024 by rpki-client on console-fra.rpki-client.org