Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
File: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft (raw, json)
Hash identifier: TlsLx/0yrlTq3kQzwTQe94AWTtyJvQs51qi3KeqjlMU=
Subject key identifier: 29:76:AB:5A:27:C0:CF:D0:28:69:B2:37:0A:62:A1:A7:A1:80:9C:91
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 019365FD6277EC7A60CFA509B56DE643617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 01:02:04 +0000
Manifest this update: Tue 26 Nov 2024 01:02:04 +0000
Manifest next update: Wed 27 Nov 2024 01:02:04 +0000
Files and hashes: 1: 1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl (hash: oRNGc80/gjxLFcbpF/aOId1QhOnr7R23/MoQGIF7kgY=)
2: A4Ihi_3QDYsSS-rrEGwDkAzVPuM.roa (hash: yfjFFIfSn24mcZgRZ4oh4OfJGDrsQekqXA1iQ2k7Ybw=)
3: doSeYfzhL5sitToOsDMi1HF-xko.roa (hash: qS/Sna2aIZbvUQp8TlVTPxOhDXoS6ZIkiwLFsr6cd4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fd:62:77:ec:7a:60:cf:a5:09:b5:6d:e6:43:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Nov 26 01:02:04 2024 GMT
Not After : Nov 27 01:02:04 2024 GMT
Subject: CN=2976ab5a27c0cfd02869b2370a62a1a7a1809c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:ac:27:01:cf:f5:19:a0:7c:8b:79:4f:a5:
8c:90:a9:c6:5f:86:42:8c:55:58:ab:ae:15:8b:6f:
4a:a6:74:6e:74:18:27:1c:79:d3:3c:b4:75:98:16:
bd:5a:69:2b:f1:52:cd:8b:47:e2:c9:31:8e:65:91:
db:c3:ed:65:6c:1a:66:ba:b6:bd:44:9d:db:04:03:
6a:85:05:2f:ee:ef:01:c6:a0:fd:57:e8:1c:6f:00:
c7:c3:53:46:f8:2c:03:ba:cb:70:1e:04:bd:5c:a6:
ac:e2:e6:2f:63:a7:37:61:12:3f:64:44:33:78:c6:
72:3b:9d:c7:14:81:fc:b1:5c:72:38:71:3d:3c:01:
63:28:c3:ff:bb:62:e3:05:ff:2d:7b:0a:fb:34:fd:
a1:30:22:d2:d0:3e:02:0d:b0:08:77:6c:a7:1d:08:
4a:22:ca:61:29:45:7a:1e:e5:92:5b:d3:1d:9b:0c:
29:ec:ba:c2:b1:6e:fa:43:f0:88:11:87:59:87:cf:
28:49:23:75:f5:93:5a:e8:34:07:d7:54:3b:e1:02:
e6:93:f3:55:0c:96:02:9b:6e:81:32:8a:60:89:44:
17:00:b7:7c:02:8d:68:8f:fd:22:72:7d:3f:e2:8d:
59:3c:3b:f3:93:07:b0:2a:49:fe:12:6c:2d:31:e9:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:AB:5A:27:C0:CF:D0:28:69:B2:37:0A:62:A1:A7:A1:80:9C:91
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:13:d7:e0:6b:5d:cd:0a:78:68:d9:2c:92:83:ce:1e:01:
21:af:6f:d9:a2:30:b3:1a:06:be:aa:8d:4b:96:0f:0d:5a:73:
37:95:39:1d:a6:74:2b:e1:4e:f0:64:d1:d5:17:82:83:ff:d4:
b2:c7:58:1b:98:24:3a:d6:dd:ad:11:a1:89:76:1e:c1:38:64:
cc:2f:88:0e:43:e5:86:4c:dd:7e:9b:1a:38:3d:8a:bc:a9:06:
b1:23:57:4d:36:13:8a:41:ff:5b:1e:aa:ac:e4:7c:07:a5:77:
d1:df:56:49:b8:0f:61:80:a3:c4:23:47:71:f8:54:ab:43:11:
29:e3:55:bf:bd:bf:5d:e3:38:9e:79:be:a5:66:16:99:2d:d4:
ee:e2:ed:ea:28:c8:9c:aa:42:f1:d6:72:3f:d5:9e:c3:36:34:
ae:52:57:71:ad:22:86:0d:51:0d:1c:64:44:37:06:dd:1f:36:
4e:de:4c:98:d5:98:ee:01:d9:8a:7b:89:bd:ce:3d:85:e6:aa:
d5:33:a3:a5:11:14:fa:92:3c:a5:f6:e5:ca:9a:a1:8c:32:19:
d6:58:0f:ac:14:8b:36:ab:3a:85:2e:72:e2:6a:5d:14:19:19:
a8:6c:94:c3:d4:22:64:e4:85:54:75:81:6e:a9:3c:f9:47:87:
e1:ec:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:14 2024 by rpki-client on console-ams.rpki-client.org