Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: 5WMYZyMAp5mrZl/U3LfWlTNIrsfZ9llU92Cmcn17Its=
Subject key identifier: E1:DE:01:A3:AD:24:EC:7B:EE:16:EF:ED:BE:A3:07:EB:A9:80:6E:37
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 01935689857A22D43964C39429837E653323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 01:01:13 +0000
Manifest this update: Sat 23 Nov 2024 01:01:13 +0000
Manifest next update: Sun 24 Nov 2024 01:01:13 +0000
Files and hashes: 1: TEeyrQbKbwe07KbX4lWJRJEntJs.roa (hash: CvDzFJ3H08j4czq4qq2W7y16PLYizv/g8e1VAfROaEU=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: xWuFXJEwK7X3ne3gtokQA1mmGV0lH5CoO7Frx/PNJUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:85:7a:22:d4:39:64:c3:94:29:83:7e:65:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Nov 23 01:01:13 2024 GMT
Not After : Nov 24 01:01:13 2024 GMT
Subject: CN=e1de01a3ad24ec7bee16efedbea307eba9806e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:1a:3b:3e:57:cc:b6:e3:6c:a8:05:59:a5:
86:0a:2b:44:51:9b:e2:3a:42:5d:b5:cc:62:fe:82:
0f:de:b2:02:f6:4e:38:fc:45:df:ff:11:8e:1b:d6:
8a:9f:b4:e9:70:af:29:7f:16:6f:94:85:47:3d:6c:
d7:3b:cd:3d:81:76:60:08:f4:8e:65:66:b0:a9:83:
a6:77:c3:48:b1:29:77:97:ed:3b:32:31:61:b0:dd:
f3:36:44:87:69:bf:49:f2:9a:55:e4:4a:d1:50:f5:
8a:fc:30:1f:fe:9d:0b:b1:b7:88:32:91:ad:d2:f3:
56:a0:ad:bb:fb:c9:29:f0:43:ef:d7:aa:ae:3e:3d:
1e:c8:66:cd:d8:27:94:85:06:47:f4:9d:51:3b:48:
86:9f:89:69:42:f2:f8:0b:02:3e:da:26:c8:48:c8:
53:3c:5d:d6:69:c3:3d:11:3a:4d:14:a1:16:da:f8:
cb:85:ab:90:62:37:fc:63:71:ee:d9:87:1e:8d:83:
8c:7f:c9:08:ba:7c:c6:a4:5d:c4:52:11:3c:19:a9:
f4:5d:7d:b8:3f:a7:6c:c6:4c:88:5f:c6:95:3e:32:
6b:7e:6f:ce:fc:3c:18:3c:35:b3:74:c8:89:ce:19:
b5:a7:09:27:e7:45:9f:3f:96:55:97:21:6e:83:6d:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:01:A3:AD:24:EC:7B:EE:16:EF:ED:BE:A3:07:EB:A9:80:6E:37
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:d2:d5:aa:62:12:00:0d:7b:a1:3d:e2:b5:2d:6a:fe:61:
e4:1b:c4:34:3b:6f:ee:7b:ca:cc:74:44:7b:1d:e8:b5:fa:e7:
fb:d3:c2:0b:f9:3f:67:b9:c9:b4:55:26:9c:74:5f:66:54:0a:
7f:4c:6b:fc:e2:f2:21:bf:5d:fa:19:92:30:28:f9:df:5a:85:
f3:08:b0:ce:2e:9b:0f:fb:0d:aa:1e:90:a5:ff:f2:34:44:19:
02:c9:de:b1:39:ea:f6:29:fc:e8:73:a7:ba:b3:c1:fc:16:fa:
50:c0:ea:88:72:ca:40:ff:4f:24:6e:15:35:3f:2f:94:c3:61:
82:e5:da:a9:92:e3:74:70:04:0b:4c:18:8e:a6:7e:37:a1:4c:
d5:e1:99:23:94:cb:f7:8b:ad:f0:bd:b2:af:5c:71:1c:4b:41:
99:98:8f:3f:20:e1:21:99:9d:b1:2e:5b:71:c2:7e:5e:60:bc:
df:92:13:ff:ac:5d:f5:1a:eb:05:09:0d:16:16:33:50:bc:2c:
bc:0b:86:03:39:6a:89:fd:7c:de:4f:39:93:f1:3b:e6:00:33:
68:f1:3b:fe:c7:a7:b9:eb:38:04:47:83:6d:aa:d1:d0:70:aa:
ef:2c:e2:d9:6c:ac:64:92:35:52:c3:f2:51:6a:54:2d:02:be:
17:7d:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:11 2024 by rpki-client on console-ams.rpki-client.org