Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: AhSh+DIoHM5pgxcxgvllbqeHkak1T4lXvVV8w+yihWs=
Subject key identifier: 36:3C:B9:42:51:42:A1:E8:4A:63:7C:FB:4E:F9:6F:B9:C8:CE:74:09
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01936A470C9E6B6FC0A1CD58F14051CCF9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 21:01:01 +0000
Manifest this update: Tue 26 Nov 2024 21:01:01 +0000
Manifest next update: Wed 27 Nov 2024 21:01:01 +0000
Files and hashes: 1: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: KFeBMnPixQcFgUoCWy1XE2uEkJ5vdzV187YXH2fZR/A=)
2: nDE5f6FqOjztkIVF9dZj0IduaAQ.roa (hash: QZ25HyD6q/qYluhutYPlC31u9jD5KAF5gn2Mvn+SSN4=)
3: yvpjWtz46zsun1W2QybrjRRakTk.roa (hash: XQWdrjR0LoFDKoLC95zC6F9aO6E2j9FpmMx9mFkAAi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:47:0c:9e:6b:6f:c0:a1:cd:58:f1:40:51:cc:f9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Nov 26 21:01:01 2024 GMT
Not After : Nov 27 21:01:01 2024 GMT
Subject: CN=363cb9425142a1e84a637cfb4ef96fb9c8ce7409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:87:7c:8b:42:08:b8:d7:ff:7f:15:a4:f8:
af:ab:24:80:34:57:f4:b3:37:77:ce:f8:48:9c:35:
b5:ce:c8:8b:19:43:cf:84:1c:b1:d6:46:7f:3c:d5:
d5:1e:80:35:e2:04:8e:e8:58:42:39:27:26:1d:83:
d7:d3:26:55:a6:83:2a:f2:69:cf:c3:86:f8:0b:95:
32:ef:10:33:f9:2d:c7:dd:9a:ad:af:9d:cf:dd:9f:
7c:a2:15:de:e7:28:89:90:b0:f8:e1:c1:32:9a:9f:
fa:83:17:f6:c3:53:69:a2:fd:74:cc:3a:08:e5:0f:
e2:d7:2f:2b:0a:df:2d:ac:05:5b:25:80:be:7a:2c:
60:f0:86:15:a9:3f:c2:de:60:d8:86:7c:bc:a2:f9:
46:7e:90:a8:2d:08:c2:5a:d8:e0:b8:dc:b1:db:0b:
3c:b9:a4:a4:46:7b:a2:7d:3a:07:48:67:6a:bc:3d:
88:5d:1b:44:4e:d8:de:2c:c6:aa:0e:2f:ce:71:7f:
bd:ed:c6:62:87:de:92:95:76:c5:61:74:22:24:ac:
b7:7f:d8:cc:a6:95:10:be:f7:fd:75:06:3e:55:2b:
ab:6f:c1:eb:74:c1:04:94:34:c4:a7:fa:d0:7b:55:
93:cf:9b:a9:50:3c:c9:d2:05:a5:db:c7:7b:8d:a4:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:B9:42:51:42:A1:E8:4A:63:7C:FB:4E:F9:6F:B9:C8:CE:74:09
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5f:23:81:1f:d9:70:32:ab:2b:21:2d:d9:59:35:06:c6:5c:
1f:e7:c6:8e:49:b2:47:2f:db:0d:c8:6d:b0:74:52:c1:be:62:
03:b1:78:09:14:13:73:7d:0a:c4:46:93:1f:98:87:48:4d:27:
18:5c:6e:ca:1f:14:8b:24:5b:39:bb:61:d1:90:bc:87:28:52:
92:d8:97:b2:75:5c:bb:5d:47:f3:de:54:33:8e:2c:ec:72:aa:
97:c0:e6:6b:be:56:f7:9d:a6:a4:47:da:a5:c2:62:d1:2c:ee:
4f:84:66:bc:14:b9:97:62:11:55:35:8a:cd:58:e0:91:b4:14:
6d:f6:67:3c:11:bb:f3:5f:7d:59:8c:97:ce:45:c6:a9:cb:28:
1b:22:f0:8c:db:75:95:41:ed:64:54:a2:7f:70:54:18:ec:09:
e9:73:bd:6b:a0:9c:89:ff:bd:7f:a6:e9:87:9f:04:e1:0b:91:
47:e8:f3:89:a0:a7:1e:43:56:ee:db:ed:d5:94:93:81:28:94:
55:ec:1d:a7:99:e4:aa:92:de:d8:0b:6c:97:e3:37:3a:0e:09:
c4:69:d8:5f:d7:d0:53:93:71:1b:a3:33:71:2a:2e:69:b1:54:
d1:2f:41:15:dc:98:63:1f:52:33:ae:6e:1f:e0:ba:9a:7c:b6:
c3:19:da:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRwyea2/Aoc1Y8UBRzPnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDZlODI3M2Y5MDUxYWMzMWNiOTU3OTJjYjUxNDAwZGFi
NzE0YWEwHhcNMjQxMTI2MjEwMTAxWhcNMjQxMTI3MjEwMTAxWjAzMTEwLwYDVQQD
EygzNjNjYjk0MjUxNDJhMWU4NGE2MzdjZmI0ZWY5NmZiOWM4Y2U3NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwCHfItCCLjX/38VpPivqySANFf0
szd3zvhInDW1zsiLGUPPhByx1kZ/PNXVHoA14gSO6FhCOScmHYPX0yZVpoMq8mnP
w4b4C5Uy7xAz+S3H3Zqtr53P3Z98ohXe5yiJkLD44cEymp/6gxf2w1Npov10zDoI
5Q/i1y8rCt8trAVbJYC+eixg8IYVqT/C3mDYhny8ovlGfpCoLQjCWtjguNyx2ws8
uaSkRnuifToHSGdqvD2IXRtETtjeLMaqDi/OcX+97cZih96SlXbFYXQiJKy3f9jM
ppUQvvf9dQY+VSurb8HrdMEElDTEp/rQe1WTz5upUDzJ0gWl28d7jaQyhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDY8uUJRQqHoSmN8+075b7nIznQJMB8GA1UdIwQY
MBaAFALW6Cc/kFGsMcuVeSy1FADatxSqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUt
OWYxYTVkYmI0MWQ2LzEvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUtOWYxYTVkYmI0MWQ2
LzEvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF8jgR/Z
cDKrKyEt2Vk1BsZcH+fGjkmyRy/bDchtsHRSwb5iA7F4CRQTc30KxEaTH5iHSE0n
GFxuyh8UiyRbObth0ZC8hyhSktiXsnVcu11H895UM44s7HKql8Dma75W952mpEfa
pcJi0SzuT4RmvBS5l2IRVTWKzVjgkbQUbfZnPBG78199WYyXzkXGqcsoGyLwjNt1
lUHtZFSif3BUGOwJ6XO9a6Ccif+9f6bph58E4QuRR+jziaCnHkNW7tvt1ZSTgSiU
Vewdp5nkqpLe2Atsl+M3Og4JxGnYX9fQU5NxG6MzcSouabFU0S9BFdyYYx9SM65u
H+C6mny2wxnaLQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:06 2024 by rpki-client on console-ams.rpki-client.org