Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: Dkp4gnVbfPVjqEDax6i+EwDO14AJ0P/rw/71yCNw/8A=
Subject key identifier: A7:8C:EE:BD:5A:4B:B1:A6:5F:44:7B:AA:11:29:7E:56:2C:0A:F8:BC
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 01920BA915FC3EAD4A55BECFE6BB5064EDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 0A
Signing time: Thu 19 Sep 2024 19:01:23 +0000
Manifest this update: Thu 19 Sep 2024 19:01:23 +0000
Manifest next update: Fri 20 Sep 2024 19:01:23 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: sCbODV8M5ZNp1ZBTonqboylqlefmmmxritTC9Z0Z/Xs=)
2: Vlrs-AHalelyZUiBjivZ6qFQ-NU.roa (hash: Nxt8wVhlJrw54UNiPIfaD022PfyhYqSOHrQ50kltGyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:a9:15:fc:3e:ad:4a:55:be:cf:e6:bb:50:64:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Sep 19 19:01:23 2024 GMT
Not After : Sep 20 19:01:23 2024 GMT
Subject: CN=a78ceebd5a4bb1a65f447baa11297e562c0af8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:5d:e4:06:55:66:28:1e:67:ac:6f:74:d6:
87:bc:44:f2:c2:cf:98:83:1f:ca:a0:b6:a1:08:99:
dc:19:1e:af:d5:c4:eb:8e:08:f7:76:a1:b8:34:37:
98:3d:9f:d6:d5:d7:3c:b6:d3:82:4a:1c:30:ba:38:
76:ee:b6:b5:01:5b:c7:6f:71:44:a1:a1:c7:82:99:
60:5b:b3:8a:1a:01:c2:73:2f:d2:43:7f:df:40:09:
e2:23:6e:d0:3b:13:ae:7f:b9:ca:14:d8:fb:6c:62:
b2:7f:81:ec:8e:19:1b:60:0d:b8:bd:8d:72:a1:41:
19:95:00:3d:18:9a:89:40:5f:3d:da:e0:02:bf:32:
26:e5:a3:b0:65:b9:ed:65:23:b1:99:71:23:ec:f1:
89:73:6d:cd:0b:f1:df:02:57:ea:42:6c:18:22:a2:
9d:6c:b7:0d:bc:ed:62:f6:79:03:ba:de:14:48:06:
82:9c:78:93:97:f3:37:14:76:25:81:a6:1c:82:1c:
fc:f3:62:e7:af:51:c9:02:a2:65:d0:81:c8:91:c9:
27:1d:a9:51:a1:24:fe:34:f0:bd:52:92:aa:22:42:
ff:71:15:53:bb:b4:b9:c6:87:69:4b:33:cf:08:01:
4d:01:08:b6:c4:b5:d5:b8:99:ba:3e:db:d8:dd:7d:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:EE:BD:5A:4B:B1:A6:5F:44:7B:AA:11:29:7E:56:2C:0A:F8:BC
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:de:8d:f1:81:dd:b9:b6:09:47:7a:88:58:82:34:57:6f:04:
29:11:20:bd:84:92:31:f2:d0:8c:d9:6b:12:4f:81:44:41:56:
d5:20:cf:bb:7d:fe:fe:2f:05:56:4d:f3:be:33:86:46:d0:74:
3f:a5:24:49:cf:ff:03:42:a5:75:39:90:82:8c:18:f0:62:e7:
7d:be:8d:60:15:29:d3:44:f9:f8:21:aa:cc:ab:0c:8a:54:ef:
4b:b2:f1:00:9f:b9:01:2b:87:79:65:06:d4:15:50:42:d8:af:
e6:81:d6:81:b5:48:e4:d7:7b:1a:0f:8b:d5:ac:cd:e4:92:b2:
00:44:51:22:3c:e0:96:8b:dc:fc:c6:8c:fc:f2:10:84:d6:fd:
b3:e4:c7:79:2b:cd:85:51:87:e8:dc:e7:55:29:6a:7d:90:7f:
ae:36:68:c3:94:80:2a:8e:b3:84:69:5c:e5:75:c7:8b:34:d7:
4b:a6:d2:a9:34:c8:d7:b6:d9:f6:c4:22:29:7b:ad:dc:4f:ce:
a0:0e:73:6b:08:f2:94:ad:68:8b:35:df:5d:aa:44:ee:64:40:
ed:31:d1:15:bd:32:bd:39:82:00:26:6b:26:0c:4b:a1:45:88:
5e:a7:ce:03:23:fd:ef:56:70:bb:d9:78:e2:ef:88:9d:de:0a:
01:43:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----