Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File: 3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier: yTUcuxdaRGyJfqdYl9VkvStUCewqT8QngeT+N08cMhI=
Subject key identifier: F8:B7:17:11:CC:8B:5A:71:31:63:92:80:BF:91:2A:B6:E0:0A:C6:26
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer: /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial: 019356F7081F219925A47FF0E6A1C0A1DFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number: 1150
Signing time: Sat 23 Nov 2024 03:00:50 +0000
Manifest this update: Sat 23 Nov 2024 03:00:50 +0000
Manifest next update: Sun 24 Nov 2024 03:00:50 +0000
Files and hashes: 1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: bSOPc+0gNIUW1YlAS5/JSlJYoBr75HbU00ELaRQRUfU=)
2: mgcsv3O5U7xPrUvsdzUJt0rQvCU.roa (hash: jvko7W6gAOU+XPPkllkVRjHgYmqpJTEHOlhDfoEqqUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:08:1f:21:99:25:a4:7f:f0:e6:a1:c0:a1:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
Validity
Not Before: Nov 23 03:00:50 2024 GMT
Not After : Nov 24 03:00:50 2024 GMT
Subject: CN=f8b71711cc8b5a7131639280bf912ab6e00ac626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:0e:4a:cf:a3:89:9d:a2:57:2e:8f:05:87:
c1:f2:ec:3b:10:a3:50:37:9b:d2:a9:f4:87:7a:44:
c4:98:69:54:38:37:93:89:eb:83:ba:cf:eb:c5:5d:
f4:e3:87:bd:ab:38:a8:07:e6:f7:71:cd:bc:f5:bf:
d3:d5:90:6b:c4:b0:b8:ae:9c:d8:65:5e:77:57:a2:
7d:dc:71:21:15:30:6a:c2:51:b3:f8:34:97:46:0d:
dc:11:48:f7:8b:5b:c1:49:2c:5b:76:20:f7:31:2e:
dc:06:e9:cb:8f:ed:98:09:f9:fd:8c:92:35:37:22:
b2:84:69:b2:2f:37:5c:1b:9c:fd:73:a5:3f:34:e6:
ff:ff:79:f7:d7:44:bc:5f:19:ac:33:82:46:8a:9e:
ff:43:30:82:21:3e:bb:fd:bb:a7:c5:f3:3c:b6:a4:
73:d9:6e:e6:61:00:fc:39:c6:bb:a9:13:13:d9:73:
57:3f:eb:fc:be:67:6a:70:77:09:c4:8b:0e:f5:06:
51:f7:b0:09:46:7c:bb:7d:31:c2:e5:04:0a:2f:2d:
b5:53:19:78:67:33:aa:b4:00:0f:e8:30:7c:8d:e3:
c7:d1:26:fa:62:d3:fc:ff:4f:e3:20:b9:6f:dc:23:
6c:c1:0d:60:9e:82:07:34:cb:2d:ba:9a:30:ce:ac:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:17:11:CC:8B:5A:71:31:63:92:80:BF:91:2A:B6:E0:0A:C6:26
X509v3 Authority Key Identifier:
keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:f1:77:fd:bc:fe:27:8e:4a:29:14:36:32:e9:b3:c2:fd:
b9:62:2f:25:f4:ca:b3:36:06:3c:4c:4c:3c:85:0b:f8:fa:6a:
95:a0:af:af:b0:32:75:7d:2a:07:21:4d:cf:9c:24:9e:bf:6d:
6f:29:8e:28:7f:f1:f2:e8:19:e2:fb:13:a0:b5:29:8b:d7:a6:
9e:fb:0b:89:92:8d:fe:71:ec:9c:a8:68:b2:22:35:5b:94:25:
c9:d7:52:ff:1a:89:ac:10:db:de:a4:36:40:d2:98:05:70:11:
cf:cd:40:75:5a:2c:b1:94:76:af:94:9d:3e:2c:5e:c4:55:e3:
0e:40:50:64:3a:a2:eb:c4:0b:2c:da:a6:17:46:6a:9b:c5:37:
55:f1:3f:83:d3:66:03:30:ca:1e:3c:7e:5c:df:b3:66:02:b0:
e2:3d:e5:63:3e:64:33:69:2a:95:43:e1:10:19:25:ec:26:f3:
1a:bf:f0:56:0a:f8:fe:b4:f9:89:c0:c9:b6:6d:9f:82:3b:4f:
31:81:42:9b:ca:6e:96:50:33:0f:56:12:3c:bd:5a:b5:f9:de:
b7:94:20:9e:0e:99:d9:7e:12:05:82:be:85:84:d1:99:4a:c1:
6b:98:a9:f2:f1:ce:3b:fc:b2:cf:2d:1e:90:39:80:31:c6:b4:
e6:f2:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:17 2024 by rpki-client on console-fra.rpki-client.org