Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: YXd6/StR0kNAMv8yqWbJK8d9oBkDuUNJP1fBuCHG9Gk=
Subject key identifier: 55:6A:FC:4D:6F:2C:94:22:16:3F:A7:1E:AB:1F:C5:E9:7D:F0:D6:24
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 0193568AEFBFD3363DB430DC67DA28AF5EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 01:02:46 +0000
Manifest this update: Sat 23 Nov 2024 01:02:46 +0000
Manifest next update: Sun 24 Nov 2024 01:02:46 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: V/dXaFZ2U3K+3BAH83z+mA3he3p6WTEFmWs9taSyQO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:ef:bf:d3:36:3d:b4:30:dc:67:da:28:af:5e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Nov 23 01:02:46 2024 GMT
Not After : Nov 24 01:02:46 2024 GMT
Subject: CN=556afc4d6f2c9422163fa71eab1fc5e97df0d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:f0:45:60:97:e0:2c:76:f1:d3:07:2b:6a:
b9:81:09:9e:da:fb:52:d7:73:11:ed:dc:ce:24:71:
1a:58:3b:24:45:ef:6f:51:b6:6b:0e:ac:ab:8a:91:
62:cf:cf:0c:d7:6d:d7:29:18:ca:cd:4a:50:3a:84:
c9:43:0a:0c:e0:3f:95:e6:1d:5b:ac:69:e5:93:2c:
ea:86:24:cf:24:c2:45:02:0a:40:39:cf:3d:55:30:
6a:d9:12:91:38:e2:2b:b2:5c:be:fb:a2:fe:17:f2:
13:41:cb:a3:58:e0:15:14:7a:6f:3f:a2:f9:67:ec:
05:fd:82:12:90:c1:5f:c5:93:02:35:6a:9d:bf:f1:
1b:14:07:ab:50:5d:d7:9e:fb:d0:e4:bd:42:32:eb:
87:5a:2a:72:70:b4:d1:1c:cb:18:01:fb:0f:98:ae:
c8:c1:0d:f5:cb:7f:9b:52:57:4d:15:63:2a:44:c6:
14:83:9e:a3:da:0e:f8:d9:d3:0d:c9:ac:3a:aa:0a:
a0:d7:b2:fb:18:cf:93:52:9d:f8:39:bc:d7:f8:eb:
22:c1:99:55:62:79:78:f5:14:05:71:fe:99:29:d2:
23:12:43:9a:97:ea:32:d8:e4:d7:9b:ca:88:ff:62:
2d:bc:d2:41:c2:38:46:47:17:4c:35:02:b2:25:47:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:FC:4D:6F:2C:94:22:16:3F:A7:1E:AB:1F:C5:E9:7D:F0:D6:24
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d3:ce:41:d6:7e:93:4d:c6:6a:ff:f2:55:0c:42:0c:5e:a3:
64:af:b5:c7:64:f8:d3:29:00:ff:a4:94:90:71:fc:7b:cc:77:
8b:6f:a1:d7:ed:24:ac:ba:7d:a3:78:82:21:c5:ad:3b:0d:93:
c9:a7:1c:74:e4:a0:fe:60:54:f5:54:cc:80:70:bb:dd:aa:5b:
ae:8a:22:39:5e:76:15:71:9e:9f:59:d5:ab:e7:e7:42:65:86:
49:7d:b4:94:a5:3b:68:80:65:e8:60:14:39:85:e0:b9:ee:32:
73:d1:93:26:81:e6:d8:91:41:c9:7e:c6:ba:62:55:c3:e1:35:
3e:3b:5f:d3:0e:db:bb:4b:ef:6e:30:b2:6d:e1:a2:a2:02:5b:
b4:e0:ee:1a:4a:36:86:73:98:40:4b:42:4e:43:89:a0:49:aa:
55:75:74:81:41:72:b1:d0:3b:49:62:19:92:c3:c0:ef:b0:21:
a2:d0:bf:2e:ac:19:9e:dd:bb:e8:dc:70:25:14:e8:27:24:0d:
c0:da:ff:d2:5d:fb:1f:f1:b5:cd:de:18:6a:3c:3c:aa:81:01:
2b:63:b6:a2:7d:4d:3a:e8:e3:5c:df:54:29:f6:0d:bb:1b:90:
a5:5b:34:13:ec:18:16:69:5a:b6:fe:f7:df:52:21:47:29:c2:
bd:63:3c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiu+/0zY9tDDcZ9oor16hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZThhMjAyOTc4Njg5YmQ4ZDVmNWU1N2ZjYzFiZmViODY3
YzMyMmEwHhcNMjQxMTIzMDEwMjQ2WhcNMjQxMTI0MDEwMjQ2WjAzMTEwLwYDVQQD
Eyg1NTZhZmM0ZDZmMmM5NDIyMTYzZmE3MWVhYjFmYzVlOTdkZjBkNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnnwRWCX4Cx28dMHK2q5gQme2vtS
13MR7dzOJHEaWDskRe9vUbZrDqyripFiz88M123XKRjKzUpQOoTJQwoM4D+V5h1b
rGnlkyzqhiTPJMJFAgpAOc89VTBq2RKROOIrsly++6L+F/ITQcujWOAVFHpvP6L5
Z+wF/YISkMFfxZMCNWqdv/EbFAerUF3XnvvQ5L1CMuuHWipycLTRHMsYAfsPmK7I
wQ31y3+bUldNFWMqRMYUg56j2g742dMNyaw6qgqg17L7GM+TUp34ObzX+OsiwZlV
Ynl49RQFcf6ZKdIjEkOal+oy2OTXm8qI/2ItvNJBwjhGRxdMNQKyJUecJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVq/E1vLJQiFj+nHqsfxel98NYkMB8GA1UdIwQY
MBaAFK/oogKXhom9jV9eV/zBv+uGfDIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQt
ZDdiMDg5NDhmN2M3LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTA3YWEtMmFjZC00ZGM3LTlmMGQtZDdiMDg5NDhmN2M3
LzEvci1paUFwZUdpYjJOWDE1WF9NR182NFo4TWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9POQdZ+
k03Gav/yVQxCDF6jZK+1x2T40ykA/6SUkHH8e8x3i2+h1+0krLp9o3iCIcWtOw2T
yaccdOSg/mBU9VTMgHC73apbrooiOV52FXGen1nVq+fnQmWGSX20lKU7aIBl6GAU
OYXgue4yc9GTJoHm2JFByX7GumJVw+E1Pjtf0w7bu0vvbjCybeGiogJbtODuGko2
hnOYQEtCTkOJoEmqVXV0gUFysdA7SWIZksPA77AhotC/LqwZnt276NxwJRToJyQN
wNr/0l37H/G1zd4Yajw8qoEBK2O2on1NOujjXN9UKfYNuxuQpVs0E+wYFmlatv73
31IhRynCvWM8JA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:44 2024 by rpki-client on console-fra.rpki-client.org