Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: 0lgW/DpSBh64PL/JWXvDbYb1rMJWr7itKri2V+t167E=
Subject key identifier: 87:F1:F4:41:42:95:EB:C2:EA:80:E9:E0:91:7C:72:4C:A6:E1:AA:2D
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0193549B5A089E220AC613A42CF0718A2194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 04A6
Signing time: Fri 22 Nov 2024 16:01:27 +0000
Manifest this update: Fri 22 Nov 2024 16:01:27 +0000
Manifest next update: Sat 23 Nov 2024 16:01:27 +0000
Files and hashes: 1: DQD1u8u62R2YAULivH5NxlcFYc4.roa (hash: fhL18DQHeOmM4U9qjzQ6maeqOedLD9+gsjBs3Qwdutg=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: wOXz7YU95akHAh2TvbMR1dbPny0Kmosi+iZVy9DphlE=)
3: kAGgNkfTXrEJYbsZo8U_PX68X8E.roa (hash: nrhON9O1T9cSCnuB+anD/8HHR2clrB2Ny5SFT2r9Ntk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:5a:08:9e:22:0a:c6:13:a4:2c:f0:71:8a:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Nov 22 16:01:27 2024 GMT
Not After : Nov 23 16:01:27 2024 GMT
Subject: CN=87f1f4414295ebc2ea80e9e0917c724ca6e1aa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:5a:4d:1c:38:d1:57:92:17:87:18:a7:f5:
47:b9:fd:2c:9e:d8:2f:69:4f:8a:02:7e:de:a5:1b:
29:6d:f1:7c:54:c5:39:7a:09:6a:b3:57:17:27:f5:
35:10:28:99:fb:e9:ea:5a:e1:6f:a0:fa:0b:50:fd:
72:36:ad:09:ce:33:75:0e:c5:0d:07:a3:a7:c7:6d:
12:a7:08:bb:85:8d:71:82:18:6d:47:e9:e1:eb:5e:
08:c1:6a:58:1a:53:05:58:aa:63:70:92:3e:82:0e:
07:74:17:20:06:3e:af:32:c5:98:e8:8a:44:ef:81:
bd:19:62:88:13:89:f5:60:b4:ad:51:e8:cd:2f:f7:
47:ae:1a:41:88:c6:7e:78:4d:71:c9:2e:5c:e5:05:
35:77:20:be:07:cb:98:ae:f4:b5:06:86:59:e7:c1:
dd:da:12:99:61:b8:ce:9c:ae:50:0b:cd:ed:c5:ab:
29:31:9e:22:08:34:3d:8c:0a:16:06:84:ca:58:ca:
bf:48:94:16:f0:42:7f:81:85:07:d5:be:4a:9f:46:
b3:83:a0:47:ae:25:81:da:ad:48:24:0e:8b:41:85:
15:c0:6d:9d:f1:d0:fa:20:8d:88:55:cb:53:69:4c:
cd:a5:8f:26:b8:18:99:57:d1:4e:9c:c0:95:38:0f:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:F4:41:42:95:EB:C2:EA:80:E9:E0:91:7C:72:4C:A6:E1:AA:2D
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f3:c8:24:6e:ca:3d:7d:46:b3:5a:42:f9:5a:b4:53:d5:81:
a9:d4:cf:fa:a3:5f:8c:9a:2a:85:0e:85:33:b7:df:6c:e2:b7:
11:bf:1b:ef:97:90:dd:c4:f4:04:23:c4:47:63:5c:63:4c:e6:
67:ba:87:fe:ce:8f:9e:93:3f:08:d4:57:85:38:19:f0:d5:f0:
17:32:d8:20:1d:d1:90:e8:38:b0:1d:e9:6a:ce:70:12:98:c0:
95:ef:3e:0f:3e:a5:cf:cd:bd:06:6d:31:a4:d4:b8:0a:96:5d:
2d:bb:b0:dd:4c:af:8f:e9:08:95:38:52:71:75:a7:21:79:6f:
5d:81:d7:1c:a1:49:29:c0:cb:d7:fc:2a:4a:98:10:b1:67:51:
12:a9:b3:1f:83:db:f2:ba:8a:3f:0e:4c:7a:a3:61:7c:a7:4d:
53:e5:83:f4:75:af:ef:60:f8:88:1a:9b:3a:88:42:ab:f5:68:
c1:21:62:69:a2:49:17:46:da:f8:41:24:c2:4e:c0:8a:5c:07:
b7:a1:8d:43:61:2a:f2:2d:58:d7:44:55:af:6f:93:b3:e4:89:
b0:1b:b6:d4:ab:eb:3c:95:3d:84:b7:c7:bf:c9:01:01:15:27:
8f:a2:14:d5:7a:67:16:5e:fb:5e:23:28:bc:22:e6:ac:34:c4:
01:f6:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:09 2024 by rpki-client on console-fra.rpki-client.org