Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: QbDxvxx/+nIV33K88rN69Off9Uhn1aip+EtTT/eyTbU=
Subject key identifier: D8:BC:78:B2:F0:AC:0C:29:F3:39:AC:2D:A8:CE:10:63:BC:A0:71:2F
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 01935689B75A9B6DCB671F7328FE152B6F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 032E
Signing time: Sat 23 Nov 2024 01:01:25 +0000
Manifest this update: Sat 23 Nov 2024 01:01:25 +0000
Manifest next update: Sun 24 Nov 2024 01:01:25 +0000
Files and hashes: 1: JwwsV4NCg0YxbBtv0iDhs9tc6WM.roa (hash: +3FNKUyMPtbkF2xXBpG0dGMwLmbw7FvktH2+q4vmbqg=)
2: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: vDZBlho5h+R1sZD7cMzEbSE8RR82qz99U6T6NmAh2r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:b7:5a:9b:6d:cb:67:1f:73:28:fe:15:2b:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Nov 23 01:01:25 2024 GMT
Not After : Nov 24 01:01:25 2024 GMT
Subject: CN=d8bc78b2f0ac0c29f339ac2da8ce1063bca0712f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:b0:4c:ac:66:c3:28:d1:00:0d:b8:66:b8:
99:83:a9:5e:ee:1b:d2:7f:c5:d7:77:ed:02:ff:a2:
25:18:85:81:c2:80:a5:6e:50:ca:ca:3e:60:42:d2:
8b:25:74:27:d7:06:58:46:17:28:4b:34:36:a9:d5:
65:53:d0:62:a8:5a:e1:da:9e:10:46:bf:4e:1e:b5:
c5:4d:6a:1d:11:65:4d:05:70:22:ae:c6:74:a0:9b:
53:ea:ad:45:3b:c7:3f:91:64:ca:ee:ec:6e:21:3a:
f8:6a:43:b6:d2:df:97:74:14:d9:ce:bf:3e:75:c4:
f9:a8:19:73:2b:79:00:40:75:29:25:fa:61:02:4b:
1a:e8:2a:b9:15:df:81:a6:56:d7:3b:da:d8:92:99:
ee:01:c3:34:2a:03:9c:7f:66:0e:03:bf:17:7f:06:
0e:fc:6a:d3:dc:0a:0b:ee:c6:bb:a4:fd:7e:db:91:
45:95:37:d2:3d:03:45:4a:02:49:42:53:cf:5d:51:
c3:04:74:6f:be:81:7c:e3:8d:06:9d:19:54:65:f5:
9a:ef:b5:f7:22:a3:21:e3:61:67:5a:9c:65:0c:47:
e8:f8:3b:54:a4:02:a4:26:1c:7c:40:d8:67:e3:f7:
06:87:6e:fd:d0:c7:9a:b9:67:6e:2f:ba:00:ec:84:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:78:B2:F0:AC:0C:29:F3:39:AC:2D:A8:CE:10:63:BC:A0:71:2F
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7a:d0:db:61:41:c3:98:a6:5c:95:7f:6c:3b:01:f2:f0:5a:
77:48:de:17:e8:34:f6:71:38:8f:2b:57:f6:85:97:ec:6a:c5:
75:8a:05:30:e5:d0:12:a2:bb:5b:46:f8:f1:2e:64:9f:3b:37:
83:00:5e:a8:2f:cd:1d:66:e2:13:5d:21:0b:06:a1:39:9a:5b:
17:d0:7b:b9:5c:89:6e:11:18:ff:16:51:c3:09:7a:e5:7e:d6:
84:5c:05:f0:e5:25:45:f8:5b:cf:3a:a4:25:b2:e4:0a:30:69:
31:a7:71:58:5d:7a:46:95:83:ed:c7:27:f9:91:02:a2:7a:42:
3a:24:64:9d:fe:80:29:1f:a1:bf:ae:f7:53:2b:df:b5:3b:b8:
77:35:39:9d:04:f5:dd:17:f0:fc:ab:02:cc:e4:07:70:8b:25:
b5:61:42:d5:4f:7b:29:a2:33:a0:64:25:60:a4:b9:18:66:8e:
99:7e:5e:9b:09:3b:72:eb:b4:47:f4:12:e1:c2:ec:b8:3f:e1:
2f:eb:16:e4:45:c4:06:90:9f:62:1d:f9:a0:53:e4:60:f6:35:
8d:ae:0d:fc:ac:bf:31:6d:f8:30:64:23:3d:ca:a1:d6:b2:fb:
ef:3a:07:aa:5b:93:06:03:87:71:24:aa:6e:d9:3b:aa:30:cf:
e4:36:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:27 2024 by rpki-client on console-fra.rpki-client.org