Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: 80ArVsDj1akJMyG1MaE+21Y8s3p4ERkw2FpwC0ghD8A=
Subject key identifier: 7F:72:B4:25:D5:D9:44:FC:42:18:97:00:17:8D:2B:AC:9E:23:3E:11
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0193572DBF52DB4B9278E23F17FCDA8E97CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 04:00:36 +0000
Manifest this update: Sat 23 Nov 2024 04:00:36 +0000
Manifest next update: Sun 24 Nov 2024 04:00:36 +0000
Files and hashes: 1: BfBTKSfATmgJi8n5b9NQ0ilLGzQ.roa (hash: 1EA7otafo9kJZIkuR0o5h2Dl1P1CF3/5T/Uo1i/cH5k=)
2: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: A70pTYGw1ZjuYmai0Fbk3MzhW/KVgxl3OUmfTuQCTIs=)
3: rXcrbHNIG9wGp2YCqEHSygWU7ko.roa (hash: PrA18qsN7tubObrms5v277PEKW7M+LzGRuEAtYNNRtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:bf:52:db:4b:92:78:e2:3f:17:fc:da:8e:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Nov 23 04:00:36 2024 GMT
Not After : Nov 24 04:00:36 2024 GMT
Subject: CN=7f72b425d5d944fc42189700178d2bac9e233e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:5a:e1:f9:03:92:b0:0c:86:a0:f7:26:9a:
56:74:26:c0:91:15:53:46:ab:8e:1f:75:b3:d9:53:
54:7f:f3:43:d0:ed:5b:7b:2d:fc:83:90:78:6b:93:
e6:21:e7:e4:f3:88:f3:2f:5d:12:d4:a1:e5:11:b9:
32:a5:2a:21:d9:50:66:2a:33:9a:d5:23:2b:3c:42:
35:f5:2a:06:d0:f8:dd:df:f0:46:5b:c3:f2:52:7e:
b2:a6:29:36:80:45:5a:f7:ff:83:b4:b8:dd:ed:40:
e0:2f:3a:03:97:ec:be:38:e6:52:a3:56:4d:28:0a:
9e:b7:06:39:f3:de:44:14:f5:88:7f:f9:6c:50:04:
ac:bd:78:61:ce:33:85:eb:0b:cd:e5:b4:19:34:ea:
02:1b:70:89:33:88:0f:88:2c:f4:49:c5:68:ad:89:
54:35:6d:75:a7:ff:b9:43:98:fe:a1:16:02:8a:69:
05:7e:d3:9b:8d:61:c1:04:c7:5c:fb:68:2b:71:a6:
d2:f0:94:bf:f3:c7:f3:9e:77:5b:e8:18:a5:d8:90:
4c:6c:bb:3b:a8:fe:0d:0f:8d:c2:4e:9e:b6:01:b5:
a9:ec:52:99:77:dd:33:c7:ba:ff:a4:20:d6:4b:58:
2d:39:eb:fd:f6:09:2d:a1:03:c4:e1:f1:2b:15:95:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:B4:25:D5:D9:44:FC:42:18:97:00:17:8D:2B:AC:9E:23:3E:11
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:29:a5:75:b7:f0:58:0c:fb:89:e4:6a:66:ca:de:53:f1:
73:54:26:0c:e0:0e:53:b7:97:76:e1:b8:e8:68:00:d8:db:81:
8f:04:d1:d2:c5:90:41:dd:1c:ed:24:7c:57:87:a0:c0:4b:4f:
59:d8:76:81:62:8f:ce:f0:43:1a:7e:48:f0:aa:27:e5:79:6a:
c3:70:07:2c:8b:0d:02:fe:36:2c:af:19:7d:38:24:50:6e:87:
90:a1:c6:7d:3e:7d:8a:ea:d2:2e:46:76:3f:98:ad:d6:0c:c4:
5e:44:46:30:19:14:1d:a4:5c:81:85:b2:bc:a1:fb:6e:d1:79:
b8:b5:3e:4e:51:f9:2a:68:fe:02:18:1d:0a:be:04:26:b4:09:
52:1a:c7:a8:79:c2:11:f7:4a:af:e5:db:82:45:56:e5:32:ae:
6c:60:af:b5:aa:29:5a:e0:6f:e9:ac:fe:a1:62:9b:8b:6b:f3:
e9:6a:e5:35:98:a3:2d:9e:0a:0f:ae:fc:fd:c9:f8:ab:1f:84:
8f:7b:9b:58:d7:26:d5:d6:34:5e:b1:34:b4:c8:ac:7b:ee:40:
bf:0f:55:7a:38:06:e7:7a:90:65:1f:df:fc:8a:4f:af:b0:1a:
21:96:b0:c3:7f:f3:27:d5:33:58:ed:63:9a:83:27:71:1b:02:
9e:bc:09:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:46 2024 by rpki-client on console-fra.rpki-client.org