Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: /5Qls+QXc4UoxClXc9X8AqvvZK1k+amukOMOjeH84ao=
Subject key identifier: 85:E3:3C:D8:B3:4D:69:1B:D9:5C:1B:44:DD:14:45:66:3B:9C:90:FF
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019352ABEBD8F4E2BB732630357306E49356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 07:00:18 +0000
Manifest this update: Fri 22 Nov 2024 07:00:18 +0000
Manifest next update: Sat 23 Nov 2024 07:00:18 +0000
Files and hashes: 1: 6jYQuJTbaEE6kGQFPfv7u7FFxPI.roa (hash: MV7gNKmTaVzEp2mjISY+ehWy3xHH3iuLg0YgsrPlU+E=)
2: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: Gc2Uz2jtbm42EP3ZMt/mIRiNzRg+peIa+GqZTP6xBSA=)
3: YeJzi5nn0zxRv-RtC7VBTv4Hb9g.roa (hash: eeS/MNHYJC4aCTlwj+wD+Wbc4bJy0djzdmu/G6SukYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:eb:d8:f4:e2:bb:73:26:30:35:73:06:e4:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Nov 22 07:00:18 2024 GMT
Not After : Nov 23 07:00:18 2024 GMT
Subject: CN=85e33cd8b34d691bd95c1b44dd1445663b9c90ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:7a:51:c5:9b:7b:9f:64:88:89:9b:09:7c:
4a:29:43:29:96:62:5e:7f:a6:bc:b9:1b:35:b5:1f:
f5:62:7f:30:cc:65:f0:b4:ec:8e:e9:9d:41:df:e6:
3c:d1:f5:49:2b:5e:91:82:fc:51:fb:1b:b1:b3:63:
e4:d3:db:52:cf:7d:cd:c1:bd:c5:7f:61:5a:64:d6:
5e:83:1c:fa:9d:09:3e:2f:0f:38:f7:93:a7:ba:14:
d7:7e:09:f9:11:34:0f:a3:d7:b8:a6:0d:43:c4:e0:
6d:0e:cc:e2:ce:8f:f9:df:2f:a1:07:76:66:15:18:
33:d0:2d:49:7f:31:1f:1f:1a:f9:a9:9e:94:dc:5d:
b5:01:f5:db:14:b4:dd:9a:af:fc:38:ff:96:a1:d3:
9c:ad:07:a5:4c:d6:75:5b:11:14:37:d9:6f:a6:c8:
c0:78:7b:5d:55:b1:30:cf:2c:b6:37:aa:2d:68:71:
6b:66:d4:dc:d0:f4:19:0d:f2:11:a4:d1:83:ac:0c:
ce:5b:97:7a:70:cd:2e:bc:ed:4c:7b:18:8f:28:c0:
79:5f:f0:3a:e3:a5:14:3a:4c:03:6c:dd:b1:39:1f:
f0:63:b0:e8:d1:4e:ba:bb:bf:f7:9a:d4:b4:63:c6:
1c:ff:2b:1c:15:9d:f6:d5:21:22:cf:54:95:c5:3d:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E3:3C:D8:B3:4D:69:1B:D9:5C:1B:44:DD:14:45:66:3B:9C:90:FF
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:18:da:85:86:b4:8c:7c:3f:3b:de:05:b2:2f:22:f1:12:7d:
c9:d0:6e:06:bf:14:88:71:8c:73:3a:f0:b0:db:41:11:9d:ce:
e3:59:7d:b7:ac:eb:26:5d:e5:7e:af:ff:7e:17:0b:47:c5:a4:
aa:42:82:2b:51:73:a9:0a:91:19:85:62:45:56:97:31:5a:3b:
78:7b:4d:09:7f:7f:5d:79:16:36:80:5b:52:7d:b6:49:0d:56:
3c:a4:cd:05:03:c1:05:4f:34:ac:95:33:59:d7:15:73:e6:26:
11:ce:4e:a3:d5:c4:0f:8d:d5:f6:25:24:0e:96:f6:73:37:aa:
2c:c7:23:5d:c6:03:14:43:6f:64:6e:9c:40:af:58:7f:98:b6:
19:00:64:67:54:1a:6e:f6:d5:1e:bb:4b:43:42:16:49:bb:30:
ef:61:7d:c3:30:67:5d:75:41:06:8e:f7:be:70:39:a5:80:96:
18:0c:4d:6e:01:e1:ad:65:af:29:7e:19:99:8f:c3:b3:d6:4b:
d1:24:93:e5:56:b9:f3:74:16:79:56:de:65:10:ad:31:0f:84:
53:e9:0e:87:52:24:f5:f1:94:c8:64:0d:05:4c:52:19:a8:5f:
89:eb:c9:9f:67:a4:a6:c6:4b:73:f8:d0:23:6e:3c:c7:35:5a:
95:97:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:44:38 2024 by rpki-client on console-ams.rpki-client.org