Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: dMFPM6oSxY66tUfOWZ/RSQ1Nra2HzsB5pm/E2m9Vkkg=
Subject key identifier: 85:4D:52:53:99:59:42:17:D2:FB:F1:70:C0:AC:6F:43:11:36:A2:2C
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 01935162E5C1401AAD5F4E011E80DE75EC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 0B61
Signing time: Fri 22 Nov 2024 01:00:56 +0000
Manifest this update: Fri 22 Nov 2024 01:00:56 +0000
Manifest next update: Sat 23 Nov 2024 01:00:56 +0000
Files and hashes: 1: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: DO5oCK3TUplHEyDdsm5Q5cgNXLLsZHptNQTYaaON34c=)
2: uTFhkZ2r_lKVtusmg42FiOjnfSc.roa (hash: aUl2MedU4hUxnyFDqzhJx8LMyqaTSvJU+TutfRo9V4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:e5:c1:40:1a:ad:5f:4e:01:1e:80:de:75:ec:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Nov 22 01:00:56 2024 GMT
Not After : Nov 23 01:00:56 2024 GMT
Subject: CN=854d525399594217d2fbf170c0ac6f431136a22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:3d:b2:bd:a6:be:6a:d7:ff:9c:5b:0d:14:
5d:a5:a4:63:a2:2f:8d:12:1d:0d:bd:7f:ab:32:b1:
e1:35:b8:6a:d6:18:0c:de:5b:8b:c7:41:9f:12:d8:
c9:85:5b:1b:87:e2:04:e8:d2:f7:b4:c9:60:3b:7d:
2a:46:c2:b8:5c:41:53:e5:2c:de:52:c4:7b:85:1c:
d1:7c:f8:cb:f5:1a:23:5c:d0:a8:ad:83:aa:d3:10:
ab:49:b7:ae:b1:c0:83:6c:7f:69:08:b4:49:f0:2a:
90:0b:0a:30:61:da:b6:0d:a0:0e:ec:a0:d5:df:df:
d9:e8:5f:2a:b9:38:c7:b3:6d:85:c1:72:28:11:c4:
34:3b:90:4e:c2:39:74:94:e9:61:1f:2a:4b:c1:87:
17:a8:a0:96:b8:9a:2e:97:cf:ea:70:75:bd:f1:e5:
53:8e:be:e9:2c:d8:6b:42:f8:4f:18:39:c4:c5:1d:
57:89:b2:58:e3:a4:c6:2c:62:f1:ac:26:7c:5b:09:
e7:7c:fc:d7:71:4b:4e:a1:38:c3:dd:3d:9c:87:4b:
7a:bd:d7:76:df:fc:48:1e:e0:d2:f8:10:53:78:ed:
e1:0f:53:cf:44:7a:4b:86:bd:42:07:0d:8f:8c:31:
9d:49:d8:58:47:0f:d0:78:ca:ce:fa:60:82:5e:dc:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:52:53:99:59:42:17:D2:FB:F1:70:C0:AC:6F:43:11:36:A2:2C
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:c3:3b:2a:0b:81:c3:cf:a2:23:e5:de:2f:1c:7e:31:89:
cb:b6:23:93:12:b4:b0:96:52:06:f4:c0:2a:44:6e:73:e5:c7:
ec:59:45:8a:d5:d4:62:99:11:b8:94:18:5e:d0:c2:83:b6:d9:
0a:c7:91:b6:d6:ff:60:48:bd:95:ac:af:c5:82:a7:6f:e7:74:
5a:5e:bb:52:86:ca:4c:3c:68:dc:6d:bd:11:a1:a7:e4:08:25:
2b:44:c1:18:b9:1a:c0:30:15:0b:5a:99:92:b4:13:22:95:88:
92:8a:47:bd:bb:a1:63:1e:00:a0:59:33:1f:59:06:34:de:33:
ef:89:23:17:18:c7:29:46:11:f3:e5:19:0c:7e:e5:c9:e7:84:
0a:48:0a:5f:cb:ed:d0:e6:d7:a4:79:2d:f7:cd:86:21:ee:af:
24:bd:70:a8:93:68:f0:40:0f:74:66:85:c2:ca:ad:2b:1b:fc:
08:be:c1:91:9b:b3:51:10:94:64:5c:c6:bb:2f:b9:15:c6:9c:
6b:48:13:22:dc:b9:cf:3e:bf:b5:dd:37:0b:dc:69:ce:b5:6d:
d6:e4:c8:fc:28:93:c2:bd:e1:6a:65:b2:79:1b:b5:0c:e8:55:
3a:14:f0:23:5b:4d:bf:0e:41:67:a8:81:2e:7a:b9:8d:1d:1b:
bd:d4:60:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYuXBQBqtX04BHoDedew3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjg0ZTUwZTMzZjNhMDAxNWM4Zjg5OWM4OGJjYjEzN2Jj
ZmI1ZjkwHhcNMjQxMTIyMDEwMDU2WhcNMjQxMTIzMDEwMDU2WjAzMTEwLwYDVQQD
Eyg4NTRkNTI1Mzk5NTk0MjE3ZDJmYmYxNzBjMGFjNmY0MzExMzZhMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMI9sr2mvmrX/5xbDRRdpaRjoi+N
Eh0NvX+rMrHhNbhq1hgM3luLx0GfEtjJhVsbh+IE6NL3tMlgO30qRsK4XEFT5Sze
UsR7hRzRfPjL9RojXNCorYOq0xCrSbeuscCDbH9pCLRJ8CqQCwowYdq2DaAO7KDV
39/Z6F8quTjHs22FwXIoEcQ0O5BOwjl0lOlhHypLwYcXqKCWuJoul8/qcHW98eVT
jr7pLNhrQvhPGDnExR1XibJY46TGLGLxrCZ8WwnnfPzXcUtOoTjD3T2ch0t6vdd2
3/xIHuDS+BBTeO3hD1PPRHpLhr1CBw2PjDGdSdhYRw/QeMrO+mCCXtwhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVNUlOZWUIX0vvxcMCsb0MRNqIsMB8GA1UdIwQY
MBaAFKtoTlDjPzoAFcj4mciLyxN7z7X5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjIt
ODBlNWQ1M2VkYjQxLzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjItODBlNWQ1M2VkYjQx
LzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5DDOyoL
gcPPoiPl3i8cfjGJy7YjkxK0sJZSBvTAKkRuc+XH7FlFitXUYpkRuJQYXtDCg7bZ
CseRttb/YEi9layvxYKnb+d0Wl67UobKTDxo3G29EaGn5AglK0TBGLkawDAVC1qZ
krQTIpWIkopHvbuhYx4AoFkzH1kGNN4z74kjFxjHKUYR8+UZDH7lyeeECkgKX8vt
0ObXpHkt982GIe6vJL1wqJNo8EAPdGaFwsqtKxv8CL7BkZuzURCUZFzGuy+5Fcac
a0gTIty5zz6/td03C9xpzrVt1uTI/CiTwr3hamWyeRu1DOhVOhTwI1tNvw5BZ6iB
Lnq5jR0bvdRg/g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:24 2024 by rpki-client on console-ams.rpki-client.org