Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: 91LEsJbhn+LBwFuZ8MrcWg8fQdCkkPBudvsN6V5yC5U=
Subject key identifier: 71:E6:0B:60:CE:2F:F5:60:68:A3:26:9A:42:42:89:99:14:37:14:0B
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 0193549BFAFD3FA6DF8C05EEF73B3A1BB599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 0424
Signing time: Fri 22 Nov 2024 16:02:08 +0000
Manifest this update: Fri 22 Nov 2024 16:02:08 +0000
Manifest next update: Sat 23 Nov 2024 16:02:08 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: 0H7WEQIBeQseCmnDhRZjpSysMl2s6/bUWUJaAc3Ke6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:fa:fd:3f:a6:df:8c:05:ee:f7:3b:3a:1b:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Nov 22 16:02:08 2024 GMT
Not After : Nov 23 16:02:08 2024 GMT
Subject: CN=71e60b60ce2ff56068a3269a424289991437140b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:f3:b2:c9:e1:24:68:cb:c7:85:35:e1:d7:
57:3f:80:12:1e:e7:45:1c:1b:ae:aa:eb:a4:92:f4:
9e:a9:2c:0d:43:0e:1f:c6:ab:5c:f3:80:df:aa:34:
fb:5f:41:09:cc:9d:3d:ff:56:d5:2a:d0:c1:22:8b:
5e:f6:7d:12:55:4f:c8:ee:11:c0:27:c3:f7:51:d9:
26:30:57:5d:05:3f:70:26:78:d8:ed:79:5f:11:ec:
ca:41:8b:0c:5d:23:f5:46:86:36:59:65:d2:a0:80:
02:16:82:d3:bb:de:8c:68:47:cb:5a:2e:b9:59:bd:
6a:c6:70:e9:f4:97:19:1e:19:3e:f9:d1:03:6f:f4:
71:f1:0b:f1:bd:a1:48:64:6a:b9:ee:8a:fb:77:d9:
d9:7f:b5:20:0c:3c:64:ab:cd:b0:ef:f8:d9:32:73:
32:0b:33:a3:b1:2f:f3:ef:92:62:13:6d:bc:03:98:
e1:23:22:03:cd:e4:ca:f8:30:05:07:94:e7:43:d0:
89:c1:db:ff:5a:6f:9c:37:9c:ba:37:0c:d6:b0:0d:
bb:33:60:08:b0:3d:57:f2:99:b4:49:9b:d2:f0:f8:
7a:48:e2:f1:8a:7d:e8:c9:e1:ce:95:d5:47:aa:8d:
80:05:e3:88:13:ea:1c:3b:c9:ba:b2:af:33:66:79:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:0B:60:CE:2F:F5:60:68:A3:26:9A:42:42:89:99:14:37:14:0B
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:e2:cb:31:9a:16:cb:74:c2:b2:93:89:ec:83:40:33:0b:
11:aa:00:5b:a3:4e:f9:7a:fe:f9:07:5d:33:c3:c2:25:53:80:
ab:71:5b:cf:d3:09:11:bd:d1:ea:ef:7d:89:9b:5f:4e:cf:31:
e8:7c:a5:15:c5:91:4b:be:6d:c0:e8:34:0a:ea:a1:ad:25:64:
35:b6:2c:8e:b6:5d:64:0b:1f:13:ef:75:07:55:c0:93:cd:73:
03:b6:25:44:15:1c:bd:6a:80:12:07:c6:fd:26:9f:8c:3d:38:
70:90:ab:a1:08:93:b2:f1:d1:0b:1d:1c:5e:78:57:a3:5e:e7:
f7:5f:43:17:93:6d:b7:3e:5c:d8:fa:8a:03:b3:26:a6:6b:35:
34:a8:b3:c3:c1:6c:a1:21:aa:88:43:aa:a2:6b:01:f5:31:ea:
8c:24:a2:c4:b0:8c:46:60:ad:20:ee:2f:a7:c4:fa:a8:0f:59:
58:fe:40:c0:8b:cd:63:6b:65:ae:67:82:c4:f1:07:82:89:92:
80:73:d3:ad:33:c9:e4:99:0d:53:44:07:b5:70:4b:8c:df:eb:
fc:d4:25:f3:4d:c2:bc:04:90:1c:fe:61:9f:87:20:79:bb:c4:
7f:b4:c0:c5:15:66:dd:bd:bf:cf:a7:b0:80:be:b7:45:96:9e:
77:0e:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:48 2024 by rpki-client on console-ams.rpki-client.org