Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: ra9P3gwIMX0OxxYhSgL1ZVDlpcymfqxae5ISUbvNWrY=
Subject key identifier: C6:CF:0A:4A:6D:AA:2D:70:55:E0:0F:45:B3:48:52:C9:22:72:25:71
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019356F68301E0848768BE69CDCDB3EF3B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 03:00:15 +0000
Manifest this update: Sat 23 Nov 2024 03:00:15 +0000
Manifest next update: Sun 24 Nov 2024 03:00:15 +0000
Files and hashes: 1: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: INN9iIRdzSbeTNZfPV1aBYnP72QTB5JcKQdrwJuJw1Q=)
2: _gladvQH26u_aWOsArjyYeT4a2M.roa (hash: /uqTSs/GvkKSj03NV15apsfZMe2zBNkMwNsyXQLNtoE=)
3: owDa-ppwGXEViJl6d4d5wZKPumM.roa (hash: sewrvSeThjziwjx6OFYZroppf+Tf4A6winDGpoKKY6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:83:01:e0:84:87:68:be:69:cd:cd:b3:ef:3b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Nov 23 03:00:15 2024 GMT
Not After : Nov 24 03:00:15 2024 GMT
Subject: CN=c6cf0a4a6daa2d7055e00f45b34852c922722571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:a0:52:e6:c7:a0:11:c8:af:a3:bc:60:5f:
22:bd:e2:26:9c:27:24:6b:79:7f:0e:45:b9:1c:6f:
4f:d2:97:59:7c:f5:a0:03:3d:37:ca:1d:57:09:3e:
26:e3:5a:49:97:42:a5:ae:a6:de:6c:e1:10:ac:ae:
cc:27:18:b1:75:c7:b7:99:a3:66:e6:5c:b9:89:ba:
a0:23:78:7c:31:69:82:89:6e:dc:8c:6e:cb:92:e6:
36:2a:e5:6c:7a:2f:35:0d:84:be:10:75:ad:9c:d9:
18:09:bc:8f:a3:96:98:d6:4d:f7:4a:79:92:b7:e7:
43:05:f6:39:6a:67:66:09:68:74:75:e1:51:e4:33:
10:9a:f9:9b:25:23:60:01:1c:05:2c:09:c2:68:82:
3b:3b:e5:c8:cc:60:44:06:6c:70:b9:8e:28:00:2d:
5c:82:31:dd:40:de:77:05:dd:ee:b7:c5:59:9d:3a:
a3:80:44:6e:75:c1:11:5b:f6:e2:17:10:86:ca:94:
8c:97:d7:f3:8a:34:75:e1:c2:54:c3:fc:31:50:22:
49:5d:6e:cd:2a:14:8f:8d:92:96:ba:06:7f:15:a1:
06:f1:e1:b9:e1:89:0f:9a:fa:7d:77:ce:9f:2e:a0:
67:02:55:f6:f4:df:cf:4e:ea:3f:c4:22:53:90:ac:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CF:0A:4A:6D:AA:2D:70:55:E0:0F:45:B3:48:52:C9:22:72:25:71
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:76:2c:b3:da:6e:36:2a:75:1c:c0:35:cc:04:8c:66:ff:
64:f3:5a:8c:92:5b:ce:3b:41:09:0d:f4:4e:7c:05:85:36:09:
51:11:98:d0:60:8e:7e:dd:91:ba:92:56:68:42:35:a2:bd:75:
d4:35:f3:b7:1d:8a:9d:be:d7:4e:11:9e:78:83:9c:b3:32:8a:
ec:5f:0f:3e:43:27:12:fe:65:e5:97:bd:35:f8:c0:d0:87:cb:
79:ac:cd:b6:59:e0:d0:66:cb:31:75:85:a8:8c:34:ae:25:80:
56:65:f5:59:4d:15:9c:7e:20:a6:05:f2:6f:c9:4d:b4:3b:5c:
4c:15:0a:b9:b3:6d:de:28:57:9b:b1:55:11:b9:0f:d0:12:55:
cf:82:0c:39:97:63:b3:9e:7a:af:e8:30:f6:3a:61:98:fc:ed:
a0:bb:b4:4d:7f:09:75:3f:b1:9a:1f:4f:fc:d7:24:c2:d7:80:
e6:22:e4:44:e8:5f:91:7c:74:46:6e:5c:7f:39:bd:98:03:6e:
64:fe:3b:3e:ec:cc:80:35:7d:fa:8a:6c:71:53:e7:f8:d5:48:
12:d2:15:9a:28:39:f0:f8:ff:f2:f8:52:d6:64:4f:30:02:d8:
f4:36:7d:80:d3:2b:57:4a:25:c1:d9:da:13:99:0c:ea:83:52:
75:93:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:06 2024 by rpki-client on console-fra.rpki-client.org