Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File: Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier: 4GZwz/kAbX0753lPEzAfD/yi8Ky2Sf8HSacS2txc/K8=
Subject key identifier: 10:AA:1D:A2:EA:54:94:56:0B:33:7C:52:E8:0D:5C:2F:AE:FE:6A:80
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 019352ADC886B1FA004EA10445985979014D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number: 068D
Signing time: Fri 22 Nov 2024 07:02:20 +0000
Manifest this update: Fri 22 Nov 2024 07:02:20 +0000
Manifest next update: Sat 23 Nov 2024 07:02:20 +0000
Files and hashes: 1: PlyOY5mqLCGu8pSsgpEKZTKaGWo.roa (hash: 6sv/uXvlsO3NZ2gXwVpJi81Ow1aVgEWgbcE/bDIqBY8=)
2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: uamuaxn0Wv2ptxkvZ7NXetMmbgoCGQQiTDYyAR/1f6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:c8:86:b1:fa:00:4e:a1:04:45:98:59:79:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Nov 22 07:02:20 2024 GMT
Not After : Nov 23 07:02:20 2024 GMT
Subject: CN=10aa1da2ea5494560b337c52e80d5c2faefe6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:4a:c7:49:70:53:d7:5c:e4:a7:68:3d:ed:
49:c4:9e:23:dd:d4:00:ab:1a:8f:df:53:31:c1:4c:
91:db:f3:e0:75:e6:b4:68:12:76:35:26:d9:74:b8:
7a:f0:02:1e:a7:13:f1:52:8b:89:d3:33:00:dd:b7:
ed:0d:2d:6e:9b:6e:26:b7:7f:4d:f7:fd:e7:32:0a:
0d:40:85:f4:7d:0b:88:be:87:c4:b8:f2:dd:3b:29:
ff:f3:5e:cd:27:88:e7:c1:50:70:f8:1b:c7:1e:61:
d8:72:ae:07:79:ce:f4:d0:d6:ba:0f:88:a7:db:2b:
5e:89:28:17:2c:ac:62:c3:0e:98:cd:9b:3a:d1:4b:
11:f8:fc:d9:e7:be:e1:1a:aa:44:01:6a:d5:87:7e:
ca:76:2c:3d:a5:aa:9a:73:a0:4e:41:5b:08:bc:8a:
76:90:0b:ed:03:6e:e3:af:5f:f3:ea:83:aa:45:e5:
5d:51:08:36:d6:c5:f0:78:77:fe:ec:5e:4e:d6:89:
58:c6:e1:09:b0:e9:db:d9:a9:28:fe:ad:be:fd:82:
20:6e:be:1a:9c:67:7c:2a:c1:6f:4a:d1:83:c7:a2:
50:58:8e:42:42:28:a7:0e:c9:31:02:57:d1:f7:13:
ee:1a:8b:96:bd:d5:26:e0:1d:eb:38:99:4e:81:ea:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AA:1D:A2:EA:54:94:56:0B:33:7C:52:E8:0D:5C:2F:AE:FE:6A:80
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:8e:7b:60:2b:e2:26:fb:40:c4:fb:a1:c6:d8:84:1b:87:
a8:d1:7c:ba:0c:28:91:ba:64:88:f8:cf:74:52:1f:4a:71:b9:
56:82:6f:a8:01:d2:b0:56:2a:5c:e2:91:1f:a3:69:06:38:a4:
67:e7:6c:49:4e:e0:f8:b9:ae:fd:bd:8e:d9:69:5b:e0:20:37:
a3:dc:da:7b:fa:81:09:a7:bb:9f:36:d8:72:2a:a7:84:e9:2e:
17:7d:11:88:b0:10:29:66:37:7d:e5:4c:1a:16:7d:8e:ae:1f:
27:df:31:26:d5:0e:61:80:28:97:37:29:4a:a9:d8:12:72:91:
1c:e9:6b:63:53:d3:af:2d:fa:90:ee:00:70:2d:c5:7d:80:9b:
c1:cb:e8:16:2b:c1:68:5d:2b:47:6c:e6:37:18:85:dc:e0:26:
49:59:e8:95:1e:83:60:c7:2c:1a:a6:71:09:9d:60:10:e6:e8:
c7:93:85:42:0d:ab:49:7f:7a:fe:3c:ff:64:76:45:13:22:7d:
a2:64:25:93:29:2f:04:54:83:06:af:d5:fb:1e:ea:ea:78:c4:
50:ab:b1:5d:81:5a:c9:c6:c6:67:a9:c8:4a:16:e8:ee:f0:a8:
cf:2a:b8:6c:a6:eb:98:f8:b3:34:e0:99:49:1a:9a:f6:80:e4:
9f:36:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:54 2024 by rpki-client on console-ams.rpki-client.org