Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: /xhguAulg9NFEJ7oJ1n7IODKUtLB2d2wGR2eRrrnLbg=
Subject key identifier: 00:5F:08:B1:FE:FF:90:D7:93:52:CE:2D:8D:77:2F:A2:0F:22:23:62
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019352ABF5A8110FC7126D3A131AB0602AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 059F
Signing time: Fri 22 Nov 2024 07:00:21 +0000
Manifest this update: Fri 22 Nov 2024 07:00:21 +0000
Manifest next update: Sat 23 Nov 2024 07:00:21 +0000
Files and hashes: 1: Dej3rpN5o4fJCx8gNyjHlFtwC8A.roa (hash: l6+wtWbeAdLo9rQRBz0cuQMfo+AoLGZP/XIMdTDMP0U=)
2: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: dCv43HJ+A/O/xe0nEV+evgVADyTUVeUPEo4dTlUHdhY=)
3: ve4gvlWv1kxLp8_eHVc0b_t6lcU.roa (hash: i56ZcIVbp9RWAsdcUuisi27BwNgXaqfQWo2OlKtVqiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:f5:a8:11:0f:c7:12:6d:3a:13:1a:b0:60:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Nov 22 07:00:21 2024 GMT
Not After : Nov 23 07:00:21 2024 GMT
Subject: CN=005f08b1feff90d79352ce2d8d772fa20f222362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:87:64:cf:ee:31:d4:13:a8:74:5a:0b:58:
f1:ee:88:9f:37:ea:fb:e7:a6:14:4a:39:c3:ea:b6:
89:17:06:0c:68:aa:6a:1f:5a:2e:61:da:ee:78:03:
7d:30:c6:5c:ee:72:56:bf:d1:9e:f7:8d:77:3b:f4:
af:33:56:89:4d:19:01:e3:c0:93:11:55:5e:34:16:
27:f7:16:5d:69:52:01:fe:01:c1:f9:ed:03:a6:c1:
ce:cc:51:d0:87:a0:4f:d4:08:35:19:7e:ef:fa:02:
89:87:5a:b8:cc:98:fc:ad:96:4e:ff:72:33:01:87:
2c:43:fa:9f:86:46:e6:e3:aa:b5:66:0d:76:8b:8a:
25:e3:78:84:6c:fc:57:39:ac:76:84:3d:6d:48:6a:
58:ea:12:d3:59:b0:6d:65:e9:a0:90:e9:5e:06:21:
f2:9c:05:8b:96:6b:11:8e:45:c3:c2:bb:b2:5e:4d:
6d:ac:c5:e1:54:c1:b6:3d:7a:67:ab:fe:b8:b3:f3:
80:5a:3d:72:a9:19:a4:16:2a:b0:42:85:81:4e:50:
3e:db:0f:4f:42:f6:8c:45:2b:9b:de:ef:09:ce:55:
07:96:f6:c7:82:0b:7c:ef:b5:45:d2:ea:03:d1:e6:
6e:e2:85:e4:da:39:71:b3:87:50:d9:bf:96:82:31:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:08:B1:FE:FF:90:D7:93:52:CE:2D:8D:77:2F:A2:0F:22:23:62
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:71:c3:4f:3b:e2:30:9a:90:b7:f5:15:7c:29:85:f0:85:bb:
a0:5d:e9:46:4c:4f:c8:da:83:e1:44:f0:18:bb:68:49:73:c3:
e0:ef:fb:54:8a:a5:c0:a7:04:e4:b7:2b:74:d3:e2:64:53:56:
c5:3d:54:f7:bd:6e:6f:b3:e4:a8:e4:83:c9:a9:9e:c9:b6:0b:
80:fe:09:3f:0d:7e:d0:d5:50:c0:d0:8c:a1:e8:6d:3c:86:e3:
73:2c:b7:1e:79:f6:52:2f:5f:c7:86:23:de:6c:51:4d:37:5d:
c4:34:90:58:89:31:7a:3f:89:33:62:70:26:b6:93:4d:5c:61:
cc:52:cd:9f:68:80:0b:cb:63:41:30:56:88:c8:98:69:4a:96:
79:c6:c2:c8:2f:f4:31:38:50:48:d8:a6:8e:54:31:60:09:04:
b5:0b:40:4c:8b:92:8c:92:7e:62:61:5a:28:ac:db:9b:a5:8c:
42:11:04:17:a0:58:67:20:11:f0:3b:d9:09:7c:27:12:23:66:
24:12:de:52:b9:30:0e:ca:56:cd:2e:a9:0d:b7:bc:e2:55:cb:
ef:bf:81:d4:ec:2c:b0:e7:28:8c:83:4f:f5:17:09:1f:77:f5:
98:ad:09:a1:de:b0:f7:34:b0:1d:9d:5d:bc:ff:73:f9:00:ea:
e0:98:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:39 2024 by rpki-client on console-ams.rpki-client.org