Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: zpkntvGW0hThY6FYsRx3g4gWbfrTv1jcvcftL+DHtIw=
Subject key identifier: 4B:A6:E3:3A:24:37:DB:7E:D3:1C:DC:07:BE:2B:E2:3E:A4:70:7A:10
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 019356F704CE5DF17D3A2B09A226F6765160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 8B
Signing time: Sat 23 Nov 2024 03:00:49 +0000
Manifest this update: Sat 23 Nov 2024 03:00:49 +0000
Manifest next update: Sun 24 Nov 2024 03:00:49 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: tom/fKlkzjgutoay6O4jwo34mTwKoIQfTA2S/RjiIYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:04:ce:5d:f1:7d:3a:2b:09:a2:26:f6:76:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Nov 23 03:00:49 2024 GMT
Not After : Nov 24 03:00:49 2024 GMT
Subject: CN=4ba6e33a2437db7ed31cdc07be2be23ea4707a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:6c:70:1e:16:40:f0:ea:62:5a:0a:f8:ec:
6d:b9:f8:60:94:c0:69:cf:68:11:a8:85:5b:2e:fe:
10:d4:59:a1:b1:49:90:b6:59:f9:7d:4c:a3:aa:7b:
a1:3a:f1:ba:c6:c6:00:80:81:8c:ba:04:04:30:e2:
6b:70:5b:c6:68:1e:1b:ba:06:01:59:84:5c:d5:1e:
d0:55:f7:f5:8c:e7:91:a1:ed:af:72:b4:8b:45:79:
39:90:06:98:85:34:57:df:e5:5a:37:47:64:65:75:
1d:54:45:f7:04:61:0c:c2:ec:65:9d:74:7c:56:5b:
3f:24:98:6d:ae:cc:bc:97:a6:c0:c5:a8:6a:b4:ba:
e6:e7:c5:f0:28:db:51:18:83:f0:4e:80:4c:c2:71:
fe:47:dd:61:5d:84:26:d4:51:4b:1b:13:76:17:fc:
fa:4d:48:87:ff:f7:6a:53:71:59:61:bb:b2:fc:f3:
ff:4f:35:6b:a1:b3:10:57:9b:38:64:86:52:d6:b1:
aa:50:f6:35:62:58:50:99:03:8f:94:42:dc:7c:98:
9e:ed:be:b3:58:95:cd:64:50:b0:62:40:64:f8:54:
b4:93:71:05:c1:a4:ea:db:5a:87:05:a1:65:09:4f:
5a:3b:7e:08:30:a7:df:7f:b5:8d:20:0c:09:10:af:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:E3:3A:24:37:DB:7E:D3:1C:DC:07:BE:2B:E2:3E:A4:70:7A:10
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:c6:c3:5a:d5:ff:08:fb:f2:6e:97:e1:4e:cd:48:7b:49:
47:5b:9f:0b:3b:77:e9:61:c2:75:f0:f9:7c:00:45:7c:0e:c0:
4b:3c:74:f2:f8:ea:ba:8a:b1:a7:9e:12:59:4c:1a:6e:22:c8:
a4:9c:2b:1f:03:8c:ef:f8:42:68:be:a9:08:e6:86:a5:74:e6:
f2:e8:d2:51:98:30:db:ed:b1:df:ed:9e:5e:d9:21:57:df:4a:
54:f7:75:e7:6b:ba:3d:ad:1f:f2:73:0f:a4:a0:06:be:87:e4:
92:fd:80:c8:01:3f:d4:1c:aa:79:1d:96:4b:4e:56:13:13:01:
9a:cf:98:b0:f6:46:8e:b7:d5:64:78:4f:10:76:c6:5b:56:84:
e8:c8:4f:5a:e7:e4:e2:a8:47:a8:8a:7f:a7:a4:94:26:9b:d8:
7d:38:4f:6c:85:5b:75:db:53:e2:62:74:42:1c:48:9c:8a:c8:
d6:45:3e:7e:f4:f6:ae:95:ff:ea:67:26:b2:7e:ea:08:23:1f:
ff:6d:fe:6f:bd:bf:b5:c8:c1:5a:36:64:7a:db:31:55:c9:db:
9c:36:39:03:44:2d:49:85:eb:15:4d:ca:db:fc:67:7f:c6:6a:
2d:57:43:b9:df:a4:e9:81:3e:54:28:f4:f9:41:44:bb:12:ed:
eb:0c:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:28 2024 by rpki-client on console-fra.rpki-client.org