Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: LqK0uSL53bkumma9JZlld2KsQFLmNuCImXtOZzBbVNI=
Subject key identifier: A9:69:74:56:AC:4F:D9:52:91:8D:4F:C7:B6:AD:1E:95:97:F6:11:61
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 01935764D9AA9315DF7D0725F31EA97F2225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 1042
Signing time: Sat 23 Nov 2024 05:00:47 +0000
Manifest this update: Sat 23 Nov 2024 05:00:47 +0000
Manifest next update: Sun 24 Nov 2024 05:00:47 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: LvFrrGaboSxEi3wV8uh/Xmv4d6fkhdhrnUSQyV+Q6/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:d9:aa:93:15:df:7d:07:25:f3:1e:a9:7f:22:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: Nov 23 05:00:47 2024 GMT
Not After : Nov 24 05:00:47 2024 GMT
Subject: CN=a9697456ac4fd952918d4fc7b6ad1e9597f61161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:b2:57:16:84:75:c1:a4:48:70:cd:c1:b0:
57:5f:5e:17:94:f4:8a:ed:9e:4b:6a:fc:6a:3a:c0:
5e:c0:d2:fa:a4:40:80:0e:3a:52:c3:50:d1:d0:cf:
4b:e8:36:b3:eb:0a:61:66:e0:28:ad:35:9a:5d:99:
c4:d3:4e:60:0f:fa:33:52:f8:d0:28:20:4c:9d:d1:
b1:4d:6f:83:7b:d4:ed:a8:36:0f:c9:85:c7:10:9a:
16:61:80:b5:88:32:12:60:bf:4e:14:07:62:96:82:
7f:ab:04:c3:21:a0:2e:b5:e9:b3:fd:b3:82:e9:25:
14:93:1f:4a:58:ab:17:d6:20:6c:3d:53:85:40:ea:
22:8a:75:9b:d7:72:8e:5d:d3:70:b0:9b:05:9f:fd:
59:18:ff:86:75:c5:2b:4a:f7:00:3b:7a:39:b8:10:
e7:20:0d:a8:9f:1e:51:8a:b3:4e:ba:b5:d5:e3:d2:
e5:a6:88:68:57:20:5d:b7:cc:b3:f5:68:68:a5:4b:
8f:5f:5f:ec:ef:dc:24:08:74:cd:cb:97:02:f5:20:
a4:00:1b:7d:fc:83:13:f7:64:67:62:db:01:de:d0:
0f:da:1e:f4:b7:9a:8f:66:cd:c9:21:71:cb:37:b8:
d1:bc:cb:4f:8c:dc:30:93:5f:11:06:65:e5:83:aa:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:74:56:AC:4F:D9:52:91:8D:4F:C7:B6:AD:1E:95:97:F6:11:61
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ef:c4:7c:17:e2:1d:11:fe:9e:0e:3e:4c:54:86:20:9f:39:
df:e2:96:78:c8:4d:e7:f0:f2:93:05:6d:c0:28:3f:a5:28:77:
05:92:3c:07:66:aa:2d:68:3a:e8:f6:ae:03:49:65:5e:e3:65:
5d:57:7e:55:41:c7:0b:a8:17:69:d6:5a:7b:1d:1f:21:a8:fb:
da:59:85:45:75:69:36:f5:37:c4:9c:c5:c9:a4:26:19:9a:7d:
d8:42:8b:16:a0:f3:20:86:a7:c1:e9:7d:ee:c3:6e:93:19:3c:
62:b4:d5:be:6b:b2:2b:0d:33:ee:01:dc:72:43:46:cf:2c:b8:
c8:d2:b2:57:85:1c:bf:9d:99:33:e2:f3:24:a2:85:df:2a:a4:
a8:7b:70:dc:e3:dd:49:36:39:fa:1d:52:11:9b:45:59:81:fd:
17:76:05:4e:09:cf:3d:6c:41:7a:e9:5c:bf:31:9e:f4:f7:e1:
e0:e2:e4:34:67:d2:96:2e:0b:b1:d5:c2:99:43:0a:21:b2:dd:
40:cc:f5:52:f4:7e:fd:f6:3f:42:6f:7e:6d:1a:64:8b:24:9c:
f2:43:c8:37:d2:ab:2b:c3:84:61:d0:98:ca:2b:f6:52:8d:cb:
a7:7e:e2:a9:e5:c4:92:fd:a8:61:35:e1:f2:81:4f:e1:61:f0:
25:99:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:31 2024 by rpki-client on console-fra.rpki-client.org