Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: udaDyefFq90cA0IsJmFSDy0R6bIsMU1nyj/54yqsoz8=
Subject key identifier: 97:2E:A1:9B:68:24:3B:A6:0A:6A:76:1C:0F:24:F8:C5:46:EB:2D:F3
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 019358092A1B0993787A86E5CEBBEA77C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 1029
Signing time: Sat 23 Nov 2024 08:00:15 +0000
Manifest this update: Sat 23 Nov 2024 08:00:15 +0000
Manifest next update: Sun 24 Nov 2024 08:00:15 +0000
Files and hashes: 1: V8mKElAdzp2QC2oAo44uMeAA-qc.roa (hash: 2OwkYfjwl+pdOAnJfJ84BB+uTY6jaVSAqVMovSXwiYA=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: TIKBUASBagAeV6+WqkZqv9BM1R6zLbnUbH10bh1w0vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:2a:1b:09:93:78:7a:86:e5:ce:bb:ea:77:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Nov 23 08:00:15 2024 GMT
Not After : Nov 24 08:00:15 2024 GMT
Subject: CN=972ea19b68243ba60a6a761c0f24f8c546eb2df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:46:2f:9c:71:15:38:ef:ba:81:09:81:fc:
3b:6f:fa:6b:53:b4:55:59:98:79:ac:85:9c:22:1e:
cc:85:43:a0:e2:33:53:b2:1a:85:dd:a1:e1:a5:23:
0e:c7:07:fb:ea:de:c2:e9:e2:8e:a9:0d:0b:ce:eb:
b2:21:5a:8f:82:b5:43:78:2d:21:7c:5b:ac:ba:b0:
77:0a:ee:27:6a:d8:e6:c8:ac:64:af:0e:ae:b4:e8:
8a:8a:55:b6:f6:c2:60:85:74:54:92:55:0d:94:c5:
73:3c:8a:bd:c3:2f:2d:d4:43:c9:ab:09:bd:93:16:
21:65:e5:84:28:a1:1a:01:e8:e1:4f:ed:25:04:a9:
53:7e:78:06:dc:fe:4f:2a:a2:33:69:19:ec:cd:4a:
28:e2:eb:66:8a:17:5d:e4:71:bb:5e:b5:94:31:fe:
6b:9d:68:6d:3a:6d:3a:85:33:88:a7:60:66:06:2a:
15:bc:e3:1d:10:27:b1:c9:d1:bf:83:7a:c3:63:be:
dc:a9:ec:de:fa:4a:c3:90:7d:01:55:6f:c5:1b:5b:
e3:15:fc:dc:4b:4a:94:d1:02:f3:93:96:15:e7:c9:
68:a2:b6:fe:ca:6e:3d:63:2e:6f:11:3f:d4:32:3b:
7f:c3:60:82:7d:8e:9c:e5:00:15:6d:07:4f:68:48:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:A1:9B:68:24:3B:A6:0A:6A:76:1C:0F:24:F8:C5:46:EB:2D:F3
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:cc:1e:99:a7:fe:82:68:1a:29:bf:41:94:11:df:28:36:
fc:cb:53:03:e0:7b:84:9c:9c:a4:37:e6:26:b2:fa:8a:12:97:
28:6d:07:d2:66:45:33:5d:18:2a:42:17:5a:ed:79:c8:79:48:
d1:40:4e:27:46:39:2f:55:96:6e:59:a2:8c:fa:72:18:b4:22:
96:20:fc:f9:ea:14:b0:80:8f:95:c6:3e:ca:5e:46:2b:47:c8:
1f:27:06:6d:32:2e:2a:a2:48:a1:a4:dd:7e:af:02:f7:f8:ea:
ab:a4:b9:1c:17:23:f1:ee:e0:80:f9:a1:35:d6:8c:98:b1:91:
1c:9c:e4:e5:19:98:76:99:e6:b5:0a:e2:c1:28:1a:1d:7a:71:
49:ee:f6:14:8c:1c:11:e7:07:b2:db:30:20:0d:f7:97:9f:4e:
dd:70:d4:7c:b8:46:36:c9:f6:5c:09:3f:bf:c5:4f:a1:d0:10:
8f:b2:eb:b6:ba:3d:7b:c3:8d:a9:2d:8b:36:34:2e:d6:07:26:
ab:4c:b5:8a:3d:a0:b8:50:08:06:7c:48:ff:a6:5e:d1:c2:22:
91:46:b8:fa:a2:12:f0:82:ff:ab:32:bb:89:c2:3f:da:04:2e:
7d:3d:4b:b7:82:87:58:cc:05:dd:fc:a1:1d:0c:2b:c1:58:9e:
af:90:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:52 2024 by rpki-client on console-ams.rpki-client.org