Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier: PkXsG0y8aU13vSkZgItalPvwcqxLapWaS3dh1wKKGl0=
Subject key identifier: 28:4C:4E:2D:BD:77:0B:06:96:AD:56:78:74:C4:A4:9A:97:6C:3B:70
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial: 01938C9BD67EC35DD6030E530B9E0FBD1E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number: 0BF3
Signing time: Tue 03 Dec 2024 13:00:43 +0000
Manifest this update: Tue 03 Dec 2024 13:00:43 +0000
Manifest next update: Wed 04 Dec 2024 13:00:43 +0000
Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: FnZ0Q4AAcnrmSZiFPy03ttcPAzmedDOMHeS6CvxmB8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9b:d6:7e:c3:5d:d6:03:0e:53:0b:9e:0f:bd:1e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
Validity
Not Before: Dec 3 13:00:43 2024 GMT
Not After : Dec 4 13:00:43 2024 GMT
Subject: CN=284c4e2dbd770b0696ad567874c4a49a976c3b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:fa:80:bc:ae:1a:85:c1:55:28:b3:18:81:
e8:a5:a3:e7:da:2e:01:3b:c4:ba:e4:5f:40:5e:c7:
0d:e4:59:6f:41:aa:94:89:a4:cc:8d:42:d0:f4:a0:
a9:44:17:6a:59:63:f9:6c:e4:90:83:83:67:b1:a1:
8a:64:ca:57:db:17:92:4d:30:14:f5:41:6a:83:d7:
7a:19:da:50:35:2a:dc:4e:54:71:3c:ed:09:0b:74:
51:c6:73:d7:34:d7:96:92:15:3f:3e:99:c1:70:ec:
db:c8:64:5e:3c:45:93:9f:6a:27:be:3f:9e:8e:ab:
88:39:f3:f9:e1:5c:87:2a:6d:0d:39:8d:1a:38:96:
12:6a:79:86:5c:6d:a1:84:f2:6f:20:83:d0:e4:77:
d4:63:4d:93:04:83:91:b7:76:5a:c6:5b:cc:b5:fd:
57:04:b5:c2:85:40:1a:66:dc:a6:86:cf:c2:b5:04:
a8:65:5e:47:a7:17:0d:f9:a5:60:40:ce:0b:e4:03:
68:57:8b:e6:2f:b0:32:02:e7:18:ec:c0:60:f3:2e:
d7:19:f4:63:26:9e:d5:9b:13:87:d1:ba:9e:9a:a7:
2a:14:8e:2f:ee:b1:0d:09:39:3b:df:ea:03:24:29:
c2:ef:46:bc:d3:f6:cc:d3:f8:cd:fc:86:fa:bd:d4:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:4E:2D:BD:77:0B:06:96:AD:56:78:74:C4:A4:9A:97:6C:3B:70
X509v3 Authority Key Identifier:
keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:67:48:6c:83:66:ec:3d:3f:29:87:da:08:fa:37:42:5b:
b2:3c:ef:60:68:d9:8a:93:8b:e0:94:97:69:db:70:15:d2:05:
49:87:e8:1b:d7:57:cd:b2:b5:44:89:31:8c:8d:69:3e:12:8d:
af:f5:bb:20:19:32:d1:16:76:11:94:27:2b:ba:1d:99:dd:07:
4c:f1:8f:85:89:31:b1:21:c0:19:a8:82:d8:a0:5c:7a:4b:81:
e7:52:da:46:a2:e2:14:79:cc:35:be:4e:bd:8c:4e:c1:10:47:
f1:af:cb:0c:bf:8f:39:fb:39:b2:30:6b:fb:49:4d:6c:93:9b:
89:92:2b:e5:d5:b3:3c:b5:ea:45:9a:40:11:5e:78:6a:5a:95:
87:7a:d3:60:ac:6b:a6:c3:4e:18:c1:1b:a5:85:fc:86:1d:c0:
df:62:37:8a:d5:09:e8:15:71:39:29:fb:04:18:6f:ea:61:73:
47:67:1d:23:6d:0f:c4:c7:c8:e5:11:0e:cb:e1:a2:48:e8:62:
99:e7:ca:99:ca:8e:c6:04:3d:a7:81:f6:94:08:4a:f2:39:83:
21:69:c5:98:90:18:72:c1:bf:40:3d:92:65:a7:66:7c:35:a1:
a6:17:50:d1:ad:1b:92:02:2e:8a:07:5a:ff:70:f6:03:1d:05:
08:0a:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:13:33 2024 by rpki-client on console-fra.rpki-client.org