Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: /gIMoaOlzgvShzk8r4aRoy1SKeUaOu8JH9k8sj5jRQU=
Subject key identifier: E2:1A:38:EE:E4:2B:30:E5:EE:02:59:F4:F7:36:0F:C9:01:9D:40:4F
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0193591C049DAC70DE3E46C4FAA3E724C1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 13:00:28 +0000
Manifest this update: Sat 23 Nov 2024 13:00:28 +0000
Manifest next update: Sun 24 Nov 2024 13:00:28 +0000
Files and hashes: 1: 7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa (hash: /PjGQYL3vQwjgAyl2Ojtk29i+eXnESpE43sdsFd8Z5E=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: ws2aO3Cmdsy92RZV1K8M1QiFQmnKkrFESR4A6UsD1RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:04:9d:ac:70:de:3e:46:c4:fa:a3:e7:24:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Nov 23 13:00:28 2024 GMT
Not After : Nov 24 13:00:28 2024 GMT
Subject: CN=e21a38eee42b30e5ee0259f4f7360fc9019d404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:c8:a9:e1:b8:f5:06:11:37:f2:5a:c1:6a:
4d:e0:57:b2:f5:3e:dc:75:03:e2:41:37:aa:1a:69:
b0:b8:a8:61:2e:7a:03:70:e7:f6:2a:31:a1:e8:3b:
2a:45:d8:4e:3e:7c:f6:df:8e:ff:11:6d:50:90:bf:
0c:20:7d:69:c4:50:12:b2:99:1e:fd:b5:8b:b7:69:
f3:cc:f7:a1:45:b0:e4:75:95:17:3a:d0:9b:c8:93:
fe:7c:19:97:f5:95:0d:cf:8f:21:aa:ec:4a:99:55:
2b:ad:bd:ec:b6:59:e0:d4:a5:ce:16:9b:a4:da:2e:
22:65:69:93:e1:80:cd:93:9c:66:f2:7d:cc:2f:b8:
4f:3e:96:be:bb:89:24:5c:27:4d:43:6e:85:f9:40:
92:ee:36:42:8a:c6:5d:83:72:61:7e:17:a8:b9:60:
d4:96:05:83:38:94:26:d9:b9:4f:63:1a:fd:fc:79:
36:45:46:a0:05:4b:95:c3:77:86:9b:b4:8e:70:11:
ad:d5:dd:6f:e4:c8:ce:9c:99:14:b3:60:8d:56:6f:
4f:36:19:5a:8e:7c:40:b5:6c:7e:c2:ec:d3:77:d0:
d8:11:e3:55:29:c6:41:a9:a9:28:b5:74:bd:34:21:
2f:17:42:23:ce:7d:a3:22:c8:19:21:ce:71:09:fe:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:38:EE:E4:2B:30:E5:EE:02:59:F4:F7:36:0F:C9:01:9D:40:4F
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:60:9e:4b:c8:c2:a0:07:f6:ef:6e:98:5e:42:64:36:64:4b:
a0:a3:fc:3a:c9:c8:26:4a:fc:0d:c2:23:aa:96:33:89:fa:2d:
9a:9a:b0:be:22:fc:5c:cc:d4:7d:e2:de:e9:38:e7:da:a8:57:
52:12:00:5f:e3:0f:4f:69:de:06:47:f9:a6:44:8e:8b:09:15:
2a:79:0d:64:5a:2e:30:28:54:16:e0:61:c0:d0:6c:40:0d:b8:
5e:e2:d0:b3:da:84:bf:29:52:e7:52:79:18:f9:34:30:74:4c:
1d:52:7f:77:23:44:79:04:e0:8c:61:47:67:bd:0d:ef:17:e9:
83:6f:5d:f1:5c:fc:ab:fb:c4:50:e4:d7:44:dc:b3:cd:f8:de:
b5:e6:73:5b:bd:87:02:05:48:75:ac:90:a9:81:08:68:b5:06:
f9:37:5a:4c:fc:df:c6:d5:3d:10:ef:3f:fb:b7:ae:7d:cc:67:
df:af:57:6a:be:b7:60:65:39:99:a9:08:6f:50:94:8a:c7:47:
bb:be:8e:b7:8f:11:d6:33:80:19:e0:7c:13:f4:d4:1f:3b:c9:
8e:5d:cf:9d:98:dd:ee:16:bf:f5:b3:c1:dc:64:28:84:e3:00:
a8:ab:17:da:b7:30:28:2c:ec:56:e4:32:d6:44:85:2c:06:71:
c4:9f:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:12 2024 by rpki-client on console-ams.rpki-client.org