Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: XBs1ucN+viQ487CMfAZRjmWqWPqYtmdrt4thz8vob8A=
Subject key identifier: B0:AD:F0:53:99:93:60:DF:2B:8E:64:32:2F:74:A6:66:93:B8:F9:55
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 019357D2BC3823BB6E7320A3E3B7B5D38082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 060A
Signing time: Sat 23 Nov 2024 07:00:48 +0000
Manifest this update: Sat 23 Nov 2024 07:00:48 +0000
Manifest next update: Sun 24 Nov 2024 07:00:48 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: 09KFtYjWzOW49kVqmP1gi0X8u9aQcmW28KvAJob4lwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:bc:38:23:bb:6e:73:20:a3:e3:b7:b5:d3:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Nov 23 07:00:48 2024 GMT
Not After : Nov 24 07:00:48 2024 GMT
Subject: CN=b0adf053999360df2b8e64322f74a66693b8f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:ad:f3:ee:c1:c7:97:27:b2:30:cb:9e:87:
c6:7a:3d:0d:2c:bc:a5:60:69:aa:74:7b:76:b7:8a:
45:c7:7a:09:67:14:b3:9c:70:27:68:25:2e:7d:09:
47:8c:44:a0:ce:86:06:3a:fb:bb:29:f2:c0:04:35:
d0:c8:70:57:92:fa:3d:37:ae:d5:7d:ef:da:68:05:
d1:da:e5:5f:10:2f:29:3f:56:58:ef:0f:4c:0e:17:
13:e3:85:98:8f:f3:40:1c:2e:7e:b5:11:8f:6c:91:
61:1e:51:80:6e:10:e1:ad:fc:23:00:88:bd:d0:ce:
ae:2a:e2:f1:30:70:f9:1a:1d:37:f6:85:48:d4:85:
43:a2:00:64:06:0c:f1:72:1f:cf:7f:ee:2b:7b:1a:
d1:b9:e7:1c:91:ab:63:0f:26:49:39:e1:36:30:a2:
0e:f9:1e:2f:94:3d:68:30:07:a9:c2:f2:3f:35:79:
cf:07:2c:b9:5d:7d:0f:15:8a:32:49:40:b5:6a:09:
a8:63:c3:b8:60:ba:b8:e8:8a:61:99:71:87:37:7b:
df:1f:fd:7a:d3:3c:da:c2:2c:d7:f3:1a:f0:df:ae:
75:54:ee:2d:5d:6a:9e:a2:8f:4c:3b:96:88:66:40:
23:9f:11:0b:b1:4f:fb:fb:01:49:0b:4d:d1:6d:ce:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:F0:53:99:93:60:DF:2B:8E:64:32:2F:74:A6:66:93:B8:F9:55
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:f1:90:30:f5:88:0e:07:7a:5a:07:20:e5:27:6a:f5:d3:
62:40:6d:54:c9:ac:6c:8f:58:32:80:e7:6f:e0:c2:1c:33:89:
64:b3:25:12:0f:95:7a:78:43:d5:a4:01:7b:99:58:97:cc:d0:
f0:6a:3e:38:dc:7b:c2:3a:16:07:4c:a0:e7:bd:c9:09:7c:44:
dc:5e:54:4f:27:9b:d9:a2:02:1f:31:cb:05:b1:9b:66:eb:28:
b9:ec:cb:c9:5d:70:3c:f4:65:b0:1f:1e:06:b7:51:5d:ed:60:
5b:c4:27:78:00:f9:ac:43:dc:f2:35:da:45:b4:2c:12:88:83:
39:b4:fc:14:85:c8:de:4c:57:97:3c:4d:85:cc:e9:23:c3:a8:
20:3c:44:bb:5d:ec:be:19:62:a9:17:dc:c1:f3:e6:e2:52:ce:
bc:63:56:0c:96:2a:0a:57:03:3f:14:ba:2d:4f:e5:04:40:32:
d7:56:f6:27:40:ac:af:cf:68:22:bd:6c:20:c6:3f:2b:08:eb:
de:52:56:71:e6:4d:93:af:45:a9:46:a5:3a:aa:7a:e2:71:8e:
06:af:3e:98:6b:eb:fa:7e:78:73:47:45:9e:e9:e5:b0:64:65:
a2:c0:f9:fe:12:6f:e7:33:85:7b:be:6a:9d:65:01:63:fc:fd:
82:85:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:57 2024 by rpki-client on console-fra.rpki-client.org