Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: 1s7b3h2EzQZ2h+ugat3GLUDl78KUAgNZNyue+LkMfEU=
Subject key identifier: DE:60:A3:78:12:2A:95:76:44:FC:FE:14:9F:BC:DA:3D:A6:6F:DE:B1
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 019358AE1BC53ACD57FA55256186A7E946C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 11:00:25 +0000
Manifest this update: Sat 23 Nov 2024 11:00:25 +0000
Manifest next update: Sun 24 Nov 2024 11:00:25 +0000
Files and hashes: 1: 1fC1USIc3nMhxjIrBCzxEw1RVUA.roa (hash: Hn3dW0MLUwSc2faNJ+3wTZvi8fg5spn1zeuuu6PlbEs=)
2: F5OHoiTs9h--km0BC2H3q6JvdGw.roa (hash: zBsrid19skdNCuL5AmKEaVkUpOBfZpsE4VVX/3/+lhU=)
3: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: NcotYbY0kaQPttf8Kw+eo4CwWYVqSYvF8TShgEgcuiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:ae:1b:c5:3a:cd:57:fa:55:25:61:86:a7:e9:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Nov 23 11:00:25 2024 GMT
Not After : Nov 24 11:00:25 2024 GMT
Subject: CN=de60a378122a957644fcfe149fbcda3da66fdeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:7a:fe:ba:24:0a:5a:a7:1f:4b:8e:4d:4b:
f9:13:c6:09:58:24:dc:39:58:e9:02:fb:64:40:c6:
80:57:a4:7a:a9:a9:61:e0:eb:70:8c:6d:96:3d:01:
0f:10:fe:3a:c6:69:9f:dc:f8:4b:11:15:cd:ab:44:
62:03:dc:e9:3e:d3:28:89:47:98:b0:75:f3:ef:99:
2c:23:27:76:21:8c:10:12:15:e6:21:65:fb:f5:a3:
5c:dd:3a:9f:72:d0:a7:63:f5:b3:ec:44:3b:a5:1a:
46:ec:2c:32:cd:f2:0d:f5:13:30:38:97:c8:98:f5:
60:e3:3f:7f:37:1b:ea:36:fc:51:d2:3c:9c:05:15:
8c:49:b9:0d:94:4f:e1:6d:98:fa:e3:9d:6f:74:7d:
07:71:58:51:3e:e1:df:34:4e:f3:9e:82:45:0a:ef:
30:ec:04:2a:eb:a5:5b:06:de:82:8d:19:14:c1:95:
34:24:98:5c:a2:5f:9f:ef:d4:1d:8b:f9:94:74:7a:
0e:d1:0e:d9:ea:0f:74:50:3d:1c:f1:41:35:d1:f4:
aa:54:a6:2c:49:5d:03:69:a8:ea:27:01:5b:f7:1b:
2f:88:d9:dc:5c:12:db:a0:36:7a:9d:7a:f4:78:22:
12:c1:11:1b:03:9a:d7:14:a6:ba:57:43:09:e3:51:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:A3:78:12:2A:95:76:44:FC:FE:14:9F:BC:DA:3D:A6:6F:DE:B1
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:85:24:7b:2e:89:6c:99:4c:f2:b2:a2:d0:9a:bc:cd:dd:2d:
a7:7c:89:bf:69:8b:dd:ca:f9:bd:f5:f0:19:39:c4:eb:94:cf:
be:2c:40:8b:01:1b:d3:49:83:f9:a0:1d:d8:38:34:6e:0f:3b:
65:b8:67:3d:fb:42:a0:24:e9:65:84:15:88:cf:17:43:7b:1a:
b4:c2:d2:99:27:4e:a2:9e:bf:25:88:2a:e7:64:d8:8f:5f:68:
4d:b1:c2:74:a7:c9:92:22:9e:6c:de:5a:e0:59:a6:28:68:49:
d0:24:06:a2:63:1e:e7:7e:6b:d7:d7:9b:74:bd:ad:b9:e7:ce:
df:ba:0f:01:a7:45:c8:37:c4:51:f0:b7:85:e4:dc:27:a9:be:
52:db:d2:42:b2:59:9a:31:32:49:8f:95:6d:83:c4:6f:d8:90:
9c:c2:aa:e5:f3:52:31:46:c1:7c:49:f5:b6:b0:f6:0d:1e:6f:
e0:b6:3d:ef:75:f0:a4:1e:5c:d0:57:4f:d1:71:b2:5e:eb:8f:
da:71:0b:17:65:75:77:ca:8c:cb:41:58:15:3f:9a:66:5f:d0:
f7:d2:1a:af:21:f7:c5:df:e8:5c:aa:a4:43:10:e2:f7:4e:b0:
d5:48:a9:3d:89:a5:e6:2d:0f:34:c6:96:c5:50:07:3a:e5:33:
76:73:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:06 2024 by rpki-client on console-ams.rpki-client.org