Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: 85sbO72BLqnJS4dpzm9tmAEXi8sPZinycq5bwyBO/ic=
Subject key identifier: 19:34:98:E1:83:89:21:0B:00:F9:DA:93:31:62:5F:9B:9C:D0:61:5D
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019351D0826375EE2867B6D7EAF193D21103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1378
Signing time: Fri 22 Nov 2024 03:00:39 +0000
Manifest this update: Fri 22 Nov 2024 03:00:39 +0000
Manifest next update: Sat 23 Nov 2024 03:00:39 +0000
Files and hashes: 1: 8ERb2Zm2oHCMDzsJOE-fM-oaAUA.roa (hash: x9CAJifkd+9kV6FFlj2FyZ9jRnT4X0yniv/K3rwWU8k=)
2: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: Pyd5IoJROeZjO1aaVs/XmvTopaAIiZDbibREJ/fZzLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:82:63:75:ee:28:67:b6:d7:ea:f1:93:d2:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Nov 22 03:00:39 2024 GMT
Not After : Nov 23 03:00:39 2024 GMT
Subject: CN=193498e18389210b00f9da9331625f9b9cd0615d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:e5:28:1b:32:5a:b1:aa:b6:d9:06:e7:07:
05:99:15:df:cb:27:db:8b:34:d3:7e:38:89:62:d8:
3c:c6:78:99:ec:6d:1a:a7:84:96:91:57:a3:4b:cd:
da:89:23:8e:75:76:11:07:ee:9b:1d:9d:ff:46:0d:
31:76:45:e2:36:bf:b1:04:6a:ea:c2:4f:4d:80:3c:
4e:35:0b:e4:87:52:c2:7a:39:89:5a:f7:fc:c3:13:
5b:5e:34:ad:e8:86:4e:67:ed:55:8d:ea:66:98:55:
de:85:e3:aa:d8:7e:a5:d7:79:b7:96:e7:24:d5:33:
a6:14:cf:19:6a:64:a7:30:70:dd:30:83:9e:71:74:
f2:89:20:aa:c2:e9:74:7c:7f:01:b4:bd:ee:a6:e4:
02:b4:e7:28:73:75:b1:d3:8d:ad:47:10:cc:9c:de:
e2:aa:68:e5:6c:86:1e:4f:2f:84:b0:7c:13:df:4e:
da:c9:aa:b4:a7:f0:3c:80:4b:3c:44:35:52:46:15:
91:8c:84:10:f4:ec:08:00:59:f7:ec:6a:8c:91:43:
d0:30:7f:fe:4a:cb:32:87:15:24:4f:d3:0e:8f:32:
ca:2e:07:b3:7c:4b:7f:77:6f:45:f5:36:b2:09:af:
32:cc:d4:ec:f9:ef:0d:e9:02:32:db:5d:64:d6:57:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:98:E1:83:89:21:0B:00:F9:DA:93:31:62:5F:9B:9C:D0:61:5D
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:52:c8:c0:84:22:df:de:76:0b:71:08:47:b2:7f:1b:6f:
d3:d0:c3:c2:8a:39:2c:17:e0:cd:78:51:a6:6d:13:2e:9e:5d:
5c:ab:65:f0:07:ff:70:22:ae:54:bc:65:44:81:6e:67:f9:43:
f6:c9:53:0e:9a:75:74:dc:a8:66:3a:40:61:60:07:d6:ab:e0:
6b:91:3b:d3:31:06:4d:ca:99:59:e7:8c:e2:d3:2f:57:66:1b:
cb:f1:51:a6:36:e5:9f:e3:0d:71:b5:6e:9f:66:52:3a:bb:f7:
50:46:57:77:65:cb:06:fe:82:40:f9:3b:e9:1b:02:6f:7b:78:
6d:8b:ad:8e:c4:7f:ca:1e:c8:de:b5:fa:c3:ed:cc:45:3d:71:
91:84:b3:bb:2a:37:3c:d0:33:47:ce:37:5c:39:a2:9f:44:ec:
f0:6f:a0:f1:90:23:1a:69:e3:8c:ef:35:2c:2c:e8:fe:43:3a:
20:82:6c:de:07:d1:d3:4c:3a:f6:22:3c:48:d7:92:cd:9c:b6:
44:c6:13:2b:c4:df:ed:8a:8b:00:bd:3f:a1:12:1d:96:a4:f5:
d6:45:e9:5a:94:a0:45:e8:23:90:11:5d:2a:b8:0a:5b:4b:11:
08:ac:0d:8b:68:2d:37:d6:6d:55:39:22:fb:1f:32:d8:1b:42:
f1:f6:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:14 2024 by rpki-client on console-fra.rpki-client.org