Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: 3BHaZWwmcwQ4BGf4rbfPKhXC3kMPCiK5hmXGl9NjgmE=
Subject key identifier: 60:3D:D0:6D:F6:22:44:F9:39:98:82:E8:C5:65:BA:19:67:D3:78:33
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0193520724C902AF3E548F5144C4BA91D56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 04:00:20 +0000
Manifest this update: Fri 22 Nov 2024 04:00:20 +0000
Manifest next update: Sat 23 Nov 2024 04:00:20 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: N/eCJ+5f1aO8fMufu4q/8+GME3EBOXrll8Mgf1V/zU4=)
2: w2ISO6UBr0Jj2m9QThqbaB-v58c.roa (hash: 42SWRxYwJOie5xt+8ZQa5qOdvJwXJD8mg2o+XG9DlWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:24:c9:02:af:3e:54:8f:51:44:c4:ba:91:d5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Nov 22 04:00:20 2024 GMT
Not After : Nov 23 04:00:20 2024 GMT
Subject: CN=603dd06df62244f9399882e8c565ba1967d37833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:32:ba:41:3c:31:ee:04:6c:94:e6:91:16:
15:55:c2:33:4e:18:6d:75:ca:9c:90:8d:21:50:53:
92:69:2c:08:f6:e4:ef:f1:27:7b:90:96:42:04:0f:
8e:8a:14:56:3b:18:2a:a4:05:82:6b:42:d1:17:d4:
a9:e2:52:a8:59:2a:1e:0f:7c:ed:21:cc:87:f7:8c:
28:12:4e:e7:ba:5d:ec:88:18:c8:c4:2a:66:62:e4:
9c:21:7f:d6:e9:28:6d:5f:40:5d:2d:21:61:26:9b:
3b:98:9f:46:c4:06:b4:4e:8f:b9:cd:e5:fe:ac:49:
91:68:09:29:a5:53:af:0e:20:a8:37:fa:ca:4f:32:
61:03:0f:cb:d4:b4:b0:34:8e:4d:7d:7c:7a:4d:e1:
5b:95:e7:f9:ec:b5:a1:ee:81:d0:e0:4f:f3:33:c9:
f4:ba:9b:0f:d9:8a:3e:cf:89:53:29:8c:33:e1:25:
84:59:b5:b1:09:dc:32:69:35:3c:46:4c:6c:a4:a2:
64:43:8e:47:76:21:be:93:ad:7e:43:97:b9:34:ba:
72:5a:6f:10:3b:3d:24:dc:30:a6:c7:d9:ed:52:ed:
3a:dc:3a:08:ec:3c:ab:b2:19:12:40:ff:8d:f8:14:
4a:df:47:15:29:e6:1d:e7:e7:7d:1d:64:ef:a4:90:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:D0:6D:F6:22:44:F9:39:98:82:E8:C5:65:BA:19:67:D3:78:33
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:72:2b:5e:8b:c7:36:72:7e:6c:c7:15:e9:73:63:2a:9c:
7e:c1:9f:53:b9:8d:28:aa:13:c8:14:09:20:6f:76:8f:77:a0:
3f:17:9b:33:60:bd:13:8e:e1:21:76:3c:91:56:20:d5:c5:25:
d6:5f:fa:34:3a:ae:0f:44:ae:0a:d6:30:96:1d:c7:ea:b4:3d:
d3:8d:42:1c:0b:15:3f:15:80:9f:a5:bc:14:b9:b8:42:e4:1d:
ff:31:c5:e5:e0:35:e3:79:91:50:0d:af:8f:6a:a1:ba:2f:6b:
5d:a7:86:a4:fc:cb:fb:21:0f:59:04:9d:c8:45:4e:0f:4c:09:
cf:13:e8:8a:e2:e1:43:d6:0c:0b:50:a4:b2:c6:d4:f9:20:d2:
ab:e4:d8:44:5b:51:a7:26:e1:ee:6a:c3:8d:b3:b1:23:58:96:
b5:80:25:8d:8f:8f:db:3e:33:07:a9:c6:2a:fc:d4:45:bd:c9:
da:7c:d1:0e:75:f1:46:db:3b:9f:8d:ef:b0:f1:57:93:b7:36:
76:0d:bc:87:b3:77:33:07:1d:4f:0a:62:1d:5c:17:32:aa:ad:
64:a7:30:3e:cc:be:a3:5d:1b:37:db:5c:1c:35:33:77:be:2d:
73:f6:38:1c:61:b8:ae:77:c0:93:c0:a0:4e:77:16:5b:bc:97:
d0:01:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:46 2024 by rpki-client on console-fra.rpki-client.org