Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: 456IEPtDh7hdCmVHRiy5MOKZVCekfjFRYsMdjo7fHr0=
Subject key identifier: FB:FE:D8:CD:05:73:CC:8B:4D:85:2D:9F:89:09:97:85:0F:72:87:32
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019351D0AA3EF5AB5727D43DF987C0BBA4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 033D
Signing time: Fri 22 Nov 2024 03:00:49 +0000
Manifest this update: Fri 22 Nov 2024 03:00:49 +0000
Manifest next update: Sat 23 Nov 2024 03:00:49 +0000
Files and hashes: 1: DGensIxGf8XhnTgA6Zh5Xccheuo.roa (hash: n4LQZKgjWlJtsj9XBGINrSrdTHtIqF5pfsMkVasokpI=)
2: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: ektoklP9L2NHwvXFZRfXHhZUun8coeoqk21g6p0TQ1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:aa:3e:f5:ab:57:27:d4:3d:f9:87:c0:bb:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Nov 22 03:00:49 2024 GMT
Not After : Nov 23 03:00:49 2024 GMT
Subject: CN=fbfed8cd0573cc8b4d852d9f890997850f728732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:ef:8d:1b:05:9f:76:d7:0d:fa:cf:ba:91:
f9:53:1e:76:2c:a3:bb:94:b4:1b:2e:15:55:91:e5:
6d:86:c2:f3:b9:88:db:72:37:f9:c0:31:c2:4a:dd:
b8:f6:92:2c:c4:a5:5c:9e:e9:30:f1:52:53:60:11:
55:27:63:8a:96:f1:7a:d9:c7:22:16:2a:5f:05:7f:
67:ec:33:d3:b4:88:1e:5c:cc:90:9b:3d:b5:a8:bc:
de:f0:fb:2b:ae:08:75:8a:9c:72:bc:5c:7d:4a:80:
0b:25:ba:07:28:65:4e:1b:22:c0:16:41:27:75:54:
9c:02:ad:6f:40:31:1c:6a:74:58:b7:6a:4b:84:8e:
ad:93:e4:98:5a:1a:21:8d:2f:cc:63:35:70:bc:f1:
db:0e:ac:9b:87:21:e1:77:de:48:c4:be:61:8b:de:
a7:9c:23:8a:d0:6c:c0:2a:2f:64:b5:72:29:8d:1a:
5b:ce:2b:35:c0:4a:d1:de:1a:ef:3a:a6:64:b7:44:
2d:7c:34:9c:21:07:d3:9a:df:d5:b3:e7:5d:8c:48:
95:a1:6e:01:a8:e5:2e:dc:93:b6:78:1c:15:90:8a:
8d:1a:e1:e5:73:c3:16:c0:be:b0:1c:17:9b:73:13:
2d:2e:28:80:6a:c2:bc:b2:19:63:15:79:a6:8a:49:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:D8:CD:05:73:CC:8B:4D:85:2D:9F:89:09:97:85:0F:72:87:32
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:d8:63:08:89:1e:9c:af:d4:d6:60:f9:0f:d9:66:7a:91:
3d:a7:ae:2c:c0:64:14:99:35:e0:e2:69:f0:61:c9:8c:0a:be:
0a:cb:68:a6:19:8f:dd:d4:9c:a9:05:d6:e3:85:e2:7a:8f:24:
ba:23:c0:07:5f:61:58:c4:98:5a:a3:37:37:4a:20:f9:a1:6c:
fc:2d:23:7e:ad:fd:a5:41:7c:76:9d:c5:30:07:44:bc:1e:de:
ba:82:1f:0f:4a:9b:a2:cc:ce:a5:9f:f4:7a:47:90:cd:e5:a2:
97:db:23:56:e9:5e:c5:e4:b5:fa:9e:65:33:b6:8b:43:18:50:
34:76:57:3d:87:53:80:fa:5a:cb:2a:f1:62:eb:47:85:f3:e8:
3c:23:82:b7:37:2e:3a:ac:23:c0:f8:f9:9b:3e:04:22:90:d5:
4c:26:6b:98:e2:a2:09:01:cb:a3:66:09:ea:5a:ca:46:a7:5d:
58:b9:5d:f7:05:97:cc:69:57:1d:fc:e3:0e:b8:9b:2e:a0:a0:
24:e9:63:32:ba:82:38:31:06:91:0e:82:48:d7:0e:ea:9a:6e:
3e:c0:f6:94:5b:48:5c:24:e3:5a:30:5d:4a:eb:a3:ca:d5:83:
56:73:ee:97:80:d5:c5:c6:54:f7:4b:fb:a4:c6:d3:e7:f4:38:
ce:f2:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:44 2024 by rpki-client on console-ams.rpki-client.org