Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: aawGpVzMuacNYnTP4x+fjG+RyBBadM49cgBUcNVy2/0=
Subject key identifier: DF:FA:82:5C:C2:DA:35:34:13:9B:27:FE:9A:CE:3B:31:26:32:3A:B6
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 0193591C1BE5B9CFEE2AC6B1F0FBB143ECA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 13:00:34 +0000
Manifest this update: Sat 23 Nov 2024 13:00:34 +0000
Manifest next update: Sun 24 Nov 2024 13:00:34 +0000
Files and hashes: 1: BWkkTqw-jJBRPisw_cClaMvRu38.roa (hash: 39zcG6TiTehQWTNjeWIi5QL/uV9ur2Jq+npdVuiKgaU=)
2: RWIrmC7PrK1RlMKLQAOtBdVPWdw.roa (hash: lbXNbD8owt/IAbUrPs4UHh9Z+nNa2IeuiGKVaUDcVyc=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: C/WZt3jVlFBa9SPeZe3a4LCgFZFWsl3jSoPZ0tGut0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:1b:e5:b9:cf:ee:2a:c6:b1:f0:fb:b1:43:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Nov 23 13:00:34 2024 GMT
Not After : Nov 24 13:00:34 2024 GMT
Subject: CN=dffa825cc2da3534139b27fe9ace3b3126323ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:96:60:b1:a8:8e:0a:ac:c6:8a:c6:20:3d:
0c:fe:64:3c:ab:29:74:f6:30:e2:1d:eb:26:cb:72:
2f:f0:dc:92:b6:07:f0:19:4e:a0:aa:80:a9:e1:ed:
59:60:5b:8a:eb:36:b3:48:39:d6:d6:32:a3:f8:b8:
92:5b:6b:44:4f:69:bf:e8:f9:c2:ce:8a:06:41:bb:
20:b2:8f:29:b4:4f:e6:a3:16:3f:e7:76:6b:2d:51:
70:a9:73:17:50:70:e5:4d:b7:05:be:f6:a6:f1:e1:
6d:43:6c:79:64:25:6d:9e:f2:a1:01:4c:96:c9:14:
62:1c:89:e2:76:9a:0c:95:55:c0:9c:6d:cd:3b:3f:
6f:3e:67:45:14:46:6e:76:dc:56:23:74:61:83:c7:
25:ef:da:91:6f:d3:3a:b5:1d:20:8d:90:df:9f:d5:
db:d1:fd:cc:7d:5e:21:73:2c:ee:35:0b:ac:23:b1:
f5:81:d7:75:09:19:f5:f1:ea:bb:73:d4:21:39:1c:
8c:8e:d6:7d:8b:fa:04:8b:df:3e:c1:92:ce:c1:79:
a2:1f:7a:8c:0f:e1:8f:c5:69:09:63:07:33:42:dd:
89:70:17:c8:ed:7d:1a:4b:9b:80:1f:c3:05:e5:a4:
cf:52:29:8d:ef:a7:5e:31:5a:db:be:77:98:23:f5:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:82:5C:C2:DA:35:34:13:9B:27:FE:9A:CE:3B:31:26:32:3A:B6
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:f9:e7:4c:ce:b2:8b:a8:95:7f:d7:d8:86:0a:e8:1c:c0:
d6:fc:4e:ba:76:80:1b:04:01:e3:d4:1b:d9:69:69:72:44:da:
b5:5b:ec:f3:51:6d:ed:77:da:26:13:c1:af:0d:9d:cf:9a:e2:
2a:7b:a8:ea:0b:16:b1:a8:a3:c5:23:37:ae:fa:55:4b:8e:fc:
f1:1d:18:1a:39:df:4b:4d:ab:0b:2d:70:b5:f7:60:b7:52:3b:
5d:4f:a0:f0:18:8f:1e:0d:66:36:1a:53:70:e2:47:94:0d:22:
5d:75:fd:11:6a:31:30:61:61:d8:2c:b7:13:96:72:fe:31:ad:
65:64:f0:59:d5:a4:37:cb:a9:22:1c:61:00:be:4d:98:89:81:
a6:ea:d1:24:c2:0d:26:08:7b:66:8e:22:fe:9d:c9:b8:4d:20:
81:5c:8f:1e:14:53:b5:0c:d5:80:17:e9:1b:e3:c6:97:3d:46:
a3:c3:c5:f1:de:45:0c:90:43:70:79:1c:21:15:eb:fe:a5:91:
58:a3:78:40:7f:3b:db:13:df:52:c1:55:d8:c6:9c:f4:04:86:
3b:1d:11:1a:1e:61:ac:05:dc:55:00:fe:09:56:57:c4:65:7b:
15:7a:bb:16:87:16:26:43:47:41:5b:9b:22:05:64:b9:d8:db:
e9:d8:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:54 2024 by rpki-client on console-fra.rpki-client.org