Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: Epm019ANvwFuEro10AV/+IcLbpNFVOc8oAOsRBW3aP0=
Subject key identifier: E0:4D:52:63:71:B3:E4:48:62:08:59:35:3F:EF:27:A2:3D:D9:87:98
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01935162DDFCCD48EF87684E12A38546B53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 01:00:53 +0000
Manifest this update: Fri 22 Nov 2024 01:00:53 +0000
Manifest next update: Sat 23 Nov 2024 01:00:53 +0000
Files and hashes: 1: 08f4U5olwxHnldXUiRVnPMGj9us.roa (hash: T7dZ5MW7WG2ZcGAcj+EGh1GfvoVtAuRCu20W3A9TS5I=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: gmCMKT4ospgW6g91ZAml30Dj6PuREaeM9M+iotKpZHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:dd:fc:cd:48:ef:87:68:4e:12:a3:85:46:b5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Nov 22 01:00:53 2024 GMT
Not After : Nov 23 01:00:53 2024 GMT
Subject: CN=e04d526371b3e448620859353fef27a23dd98798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:68:91:97:65:a3:cc:46:61:a3:e3:f7:79:
4d:06:e3:1d:4a:fc:29:e4:36:77:96:12:8b:c5:21:
98:98:af:5b:bd:86:2f:e5:62:97:7e:44:55:22:af:
64:79:50:60:a7:f3:42:34:7c:1f:4a:ce:d9:36:21:
fe:36:21:bc:80:37:b8:4d:e1:c6:91:87:99:e7:24:
7a:0f:df:37:f3:d2:c6:f3:7a:f3:08:86:a3:6d:ba:
f8:97:bd:f7:b2:02:4d:ba:86:6e:2d:c2:e5:5a:fb:
2d:97:e5:b6:3b:f7:5b:f4:8a:bf:12:3e:0c:ae:9b:
88:42:6e:e6:9c:bf:c0:55:fb:f9:1e:aa:b0:69:c7:
ae:87:77:0b:b2:f3:74:54:9b:e8:86:1c:0a:67:3d:
c3:b6:a1:ad:17:bd:6b:d0:75:47:c9:b5:7c:78:ee:
b2:ac:af:6e:a6:ed:a7:ec:c1:67:69:be:03:40:f0:
1f:39:c9:46:d6:f1:79:b0:0a:0d:6c:e0:4a:5b:52:
07:a1:11:b8:3c:28:57:2c:3c:af:c9:65:b6:12:89:
a0:76:37:56:36:07:c6:ff:bd:54:88:a8:85:70:9a:
73:2c:10:7e:82:f7:a8:50:1e:9b:3d:57:92:cd:55:
69:85:15:2f:f7:ce:ba:ba:0a:33:3a:c0:d9:26:17:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4D:52:63:71:B3:E4:48:62:08:59:35:3F:EF:27:A2:3D:D9:87:98
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:75:20:49:9e:7a:c6:4e:b3:2a:9e:1c:70:e8:4b:9e:77:96:
86:83:77:a3:60:ba:54:85:d6:0d:fc:35:b9:cf:cf:f0:f4:16:
a1:e6:76:d8:24:41:43:6e:bd:62:87:fd:71:63:bd:18:c3:c6:
07:c0:be:22:a4:cd:04:c7:ac:d3:17:57:f0:5f:22:41:a4:2d:
0c:24:57:e1:a8:2e:df:89:73:0e:e5:83:d3:4d:b2:da:3c:ee:
3b:2b:a7:39:fd:66:b4:d1:3d:c4:8a:1d:f7:65:63:cf:88:41:
5b:44:a4:e4:17:7c:0c:e1:08:12:e4:94:ce:11:f0:0f:bd:6a:
eb:ad:57:4b:8b:dc:1e:4b:9f:c4:11:3b:ab:02:de:97:86:e0:
a3:5c:4f:01:a0:02:eb:ff:86:b7:83:06:64:89:26:ec:28:49:
22:d8:7a:7c:ce:fb:e1:17:10:7c:18:29:f6:4f:45:7b:c6:36:
72:48:52:db:c1:ca:6c:ff:db:e2:2f:de:99:7d:ba:2a:9b:6e:
1a:f8:eb:c1:84:53:3f:68:63:ec:ac:f1:30:92:c9:da:10:79:
79:e3:e4:ce:3d:03:c7:d0:0d:44:19:87:77:e2:12:29:ca:b9:
1c:b5:87:e3:e9:74:b4:35:9f:d0:43:dd:36:1f:a8:b3:32:73:
e9:fa:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:36 2024 by rpki-client on console-ams.rpki-client.org