Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: pFC7ucRG95hbyT64kUFKK3Ojb0YWR44tR8bqhNG45h0=
Subject key identifier: 3C:9B:64:CB:FE:AE:70:D6:39:9F:E7:DB:2B:77:E1:26:98:17:96:FC
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0193512B8F9DB1DD764E7F308B9B85E6395E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1374
Signing time: Fri 22 Nov 2024 00:00:29 +0000
Manifest this update: Fri 22 Nov 2024 00:00:29 +0000
Manifest next update: Sat 23 Nov 2024 00:00:29 +0000
Files and hashes: 1: BTI-OYejCfxokvrBtx66yR0xxfQ.roa (hash: eNpdcBNXcPMpX4iV3EDVeSvtYyJQoN0Hkku4w31OCME=)
2: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: ouTpUpKCQTX9PonurHjPhhG/HJBSoSDF7iBcyDPeXKc=)
3: toKfpwwFZSo8wfW0MN1VmNaFSWs.roa (hash: lYL4YhuLB3v741Ox5CSxyOoqL+IqWH9Jn+pHD80R9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:8f:9d:b1:dd:76:4e:7f:30:8b:9b:85:e6:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Nov 22 00:00:29 2024 GMT
Not After : Nov 23 00:00:29 2024 GMT
Subject: CN=3c9b64cbfeae70d6399fe7db2b77e126981796fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:a4:f0:76:77:5a:62:32:4c:9b:b3:aa:95:
69:f9:5c:31:44:72:9b:6c:16:17:07:98:27:43:83:
4c:4f:5c:27:81:e5:32:7d:82:66:6a:a2:b2:6c:41:
62:1c:df:e1:8b:8b:26:1a:81:c4:bc:d9:9e:ec:23:
67:79:6d:b0:6a:9e:83:54:6f:0a:f0:0d:1e:f8:cc:
83:a2:ae:3e:66:0b:0e:6a:32:74:03:ac:97:dc:13:
a1:2a:34:de:b9:23:c2:ed:e0:47:dd:80:94:58:5b:
78:6e:55:fa:88:d0:6d:f5:18:65:9d:bb:ea:03:0a:
5c:cc:9b:81:73:19:08:b6:b5:2d:d5:70:2b:a2:2a:
58:18:1c:dc:f4:7a:a9:18:7d:bf:99:97:74:22:c1:
be:25:ca:6e:b3:56:f1:34:d3:ff:2c:31:bb:4b:55:
0f:71:54:b9:9c:8b:5c:75:92:82:ee:89:21:ab:e9:
88:93:4f:9d:84:7e:a2:c0:31:63:46:fc:e0:1e:06:
de:f7:b8:b6:55:e4:9e:47:be:ae:f7:86:52:c3:be:
06:ae:92:94:cd:60:ba:f4:6a:70:12:54:c3:8b:4e:
c2:c9:ee:7f:1e:46:5e:f7:51:bf:57:b3:79:ce:58:
bb:36:9c:f1:97:7d:bf:2d:69:b1:36:6b:cf:91:06:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:64:CB:FE:AE:70:D6:39:9F:E7:DB:2B:77:E1:26:98:17:96:FC
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:32:c2:d2:f2:ea:cb:b4:4e:5b:24:44:4d:f8:7a:90:94:b3:
4e:89:02:a0:04:9f:fe:9d:1b:c2:fd:fe:8f:68:3c:15:5e:b8:
7b:3d:a9:54:49:5a:6d:25:da:33:37:ff:e8:ef:b4:64:dc:e2:
7d:e1:c3:12:0f:b7:2d:fe:d3:d0:02:59:fb:20:18:14:24:56:
2c:05:19:3d:36:08:b1:30:5c:77:54:a5:98:84:1f:33:ce:58:
6d:42:71:af:14:4f:8f:41:a9:2a:6e:af:35:ce:e4:79:32:ff:
ee:68:cf:27:40:ad:ac:07:4c:06:0d:c7:7e:cb:20:b2:f8:cc:
7e:0d:f4:78:d1:b6:d8:9e:ee:cf:c6:6e:a0:9b:f4:d8:4a:8a:
8d:08:ec:02:df:25:f5:13:46:52:5b:20:9e:56:87:7f:ea:af:
25:2f:19:86:82:bd:7c:51:67:ae:5a:5e:a4:6a:9a:19:5e:af:
de:12:79:8c:dd:3b:cf:9d:0d:ed:ae:9c:31:fa:65:be:9c:c0:
75:0d:7f:2f:42:85:4e:97:4f:55:f9:fa:ef:55:54:26:8b:3e:
30:81:64:19:16:da:a5:75:e7:9d:1b:b7:04:87:fb:d8:86:5e:
a9:3f:86:97:b1:37:5e:89:8e:23:18:a4:e6:14:d7:23:eb:cb:
ce:46:af:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK4+dsd12Tn8wi5uF5jleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjQxMTIyMDAwMDI5WhcNMjQxMTIzMDAwMDI5WjAzMTEwLwYDVQQD
EygzYzliNjRjYmZlYWU3MGQ2Mzk5ZmU3ZGIyYjc3ZTEyNjk4MTc5NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSak8HZ3WmIyTJuzqpVp+VwxRHKb
bBYXB5gnQ4NMT1wngeUyfYJmaqKybEFiHN/hi4smGoHEvNme7CNneW2wap6DVG8K
8A0e+MyDoq4+ZgsOajJ0A6yX3BOhKjTeuSPC7eBH3YCUWFt4blX6iNBt9Rhlnbvq
AwpczJuBcxkItrUt1XAroipYGBzc9HqpGH2/mZd0IsG+Jcpus1bxNNP/LDG7S1UP
cVS5nItcdZKC7okhq+mIk0+dhH6iwDFjRvzgHgbe97i2VeSeR76u94ZSw74GrpKU
zWC69GpwElTDi07Cye5/HkZe91G/V7N5zli7Npzxl32/LWmxNmvPkQYs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDybZMv+rnDWOZ/n2yt34SaYF5b8MB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjLC0vLq
y7ROWyRETfh6kJSzTokCoASf/p0bwv3+j2g8FV64ez2pVElabSXaMzf/6O+0ZNzi
feHDEg+3Lf7T0AJZ+yAYFCRWLAUZPTYIsTBcd1SlmIQfM85YbUJxrxRPj0GpKm6v
Nc7keTL/7mjPJ0CtrAdMBg3HfssgsvjMfg30eNG22J7uz8ZuoJv02EqKjQjsAt8l
9RNGUlsgnlaHf+qvJS8ZhoK9fFFnrlpepGqaGV6v3hJ5jN07z50N7a6cMfplvpzA
dQ1/L0KFTpdPVfn671VUJos+MIFkGRbapXXnnRu3BIf72IZeqT+Gl7E3XomOIxik
5hTXI+vLzkaviQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:50 2024 by rpki-client on console-ams.rpki-client.org