Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: NR02cIfk8Z9L0RVQOPlulDPMqQgUYDZXFhT32WPWr7E=
Subject key identifier: 8D:21:52:E2:BC:F3:87:A6:A4:47:A8:80:61:B9:F5:B5:3F:47:F7:1D
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0193557692534E971CBD53EA0FEB3674AACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 014A
Signing time: Fri 22 Nov 2024 20:00:54 +0000
Manifest this update: Fri 22 Nov 2024 20:00:54 +0000
Manifest next update: Sat 23 Nov 2024 20:00:54 +0000
Files and hashes: 1: OaUbixlXG3OJBvGCRVJ5CqcLE_8.roa (hash: H1FSKkUHV5QpczsTiLn0qYDoQGUZS/Grh45R7txDBqM=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: GRYkKjN5Cgvg89cziBy4FVxbsEVvh/RG5iRRfjUH8NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:92:53:4e:97:1c:bd:53:ea:0f:eb:36:74:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Nov 22 20:00:54 2024 GMT
Not After : Nov 23 20:00:54 2024 GMT
Subject: CN=8d2152e2bcf387a6a447a88061b9f5b53f47f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:68:20:70:8e:19:cc:53:1d:29:25:9b:1e:
58:50:a5:86:26:b9:bf:46:ff:4c:bf:51:08:71:b2:
dc:1c:47:a2:6e:b4:fd:d6:2a:ca:e8:a6:89:ce:67:
98:0b:38:78:e2:6c:76:2f:33:c9:43:f4:83:71:cb:
44:d3:ce:80:3d:96:de:8d:75:5c:87:40:34:29:ec:
fd:30:6c:05:c2:17:b5:5e:79:72:6c:cc:33:30:ba:
4d:b9:7a:c8:6e:45:b6:af:d1:e9:de:f2:d8:17:f7:
6d:a1:0e:ce:38:be:86:08:d4:8f:33:15:b1:63:56:
ee:56:b4:95:95:c8:81:c1:40:af:4e:2f:13:4c:14:
7c:36:aa:5b:44:e0:bb:e0:de:65:8b:a7:f2:65:01:
e2:2b:59:6d:82:d5:4d:fc:db:4e:67:11:e8:be:02:
19:9a:e6:5e:73:84:fe:19:87:81:56:dc:cc:b9:d8:
14:c0:18:97:c6:b7:af:89:90:60:14:16:48:51:e8:
ee:0d:88:a3:f4:1c:98:60:1c:86:cd:da:07:8e:a3:
4d:10:97:81:5e:71:cd:1c:ba:80:9f:9f:49:d3:0a:
76:b1:2b:3d:df:a2:d1:f0:38:b8:f9:33:a8:bc:34:
d6:c8:2d:fd:47:a0:24:64:21:e4:e9:38:c7:82:58:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:52:E2:BC:F3:87:A6:A4:47:A8:80:61:B9:F5:B5:3F:47:F7:1D
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:79:da:06:69:36:4a:ea:73:24:3d:6c:b2:50:d4:66:e3:
a2:8f:cd:92:00:ed:fb:67:7c:40:bb:0c:39:3c:c3:1c:63:fb:
cb:19:2c:65:b2:b8:cd:8f:0a:3b:9b:35:9e:a2:36:49:7e:a3:
7b:31:4a:53:4d:d8:a8:1b:2f:d6:3e:da:87:e7:d3:9f:58:31:
64:1e:e8:37:d8:22:68:e1:fb:e5:d9:e2:43:d1:e2:c5:8f:28:
6d:43:1e:1b:83:f6:0e:ee:2e:69:9c:e2:26:8e:41:b5:b1:16:
c0:f3:14:b8:c9:3e:ad:6f:60:4b:f7:ff:21:9a:b6:07:d8:1f:
f8:72:67:e7:4e:da:5a:f2:35:81:11:e5:5f:3c:03:2f:61:22:
44:ac:13:55:98:fe:fc:dc:ea:e2:ec:16:52:13:64:d9:a8:21:
5d:63:5d:ff:80:96:53:78:db:db:5b:85:74:d4:e9:f9:38:6b:
07:17:3e:b8:f1:ee:6c:87:1f:81:8f:e1:1b:93:8e:77:b3:42:
40:75:09:c6:eb:f3:66:7a:12:8c:c5:b7:18:04:bf:4b:39:25:
3e:3b:45:6f:fa:f1:11:87:8c:80:6b:8a:e5:b6:e1:a9:79:45:
28:8c:82:d3:6f:e6:02:35:42:fc:68:70:e4:2b:12:cf:89:ca:
b8:6a:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:49 2024 by rpki-client on console-fra.rpki-client.org