Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json)
Hash identifier: bWu+0viJYBAIOlpoOAl5lh03hI7iDii16rlhsbm/v80=
Subject key identifier: 79:E5:30:EB:81:2C:19:85:97:C4:AC:11:2C:51:CC:4E:7F:15:BF:F4
Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Certificate serial: 019369D8FC6A559944C3B7DC5DD5F2C5B769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
Manifest number: 0396
Signing time: Tue 26 Nov 2024 19:00:48 +0000
Manifest this update: Tue 26 Nov 2024 19:00:48 +0000
Manifest next update: Wed 27 Nov 2024 19:00:48 +0000
Files and hashes: 1: Qo26hAuZVKofm9C4NGQXxVJP7eo.roa (hash: GLXRlSu4YCkQp5Ptizp62PJX97Bp1u+C1AlHtGCqGfE=)
2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: boY8oFZWp2UkaSGXTw6Cx4JVnS169U5qTS3kgUH/Roo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:fc:6a:55:99:44:c3:b7:dc:5d:d5:f2:c5:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Validity
Not Before: Nov 26 19:00:48 2024 GMT
Not After : Nov 27 19:00:48 2024 GMT
Subject: CN=79e530eb812c198597c4ac112c51cc4e7f15bff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d7:2e:ff:69:ba:b9:97:8b:76:41:89:6a:ed:
73:04:86:8c:c9:39:b0:e8:f8:2a:8b:08:24:44:30:
92:e3:c2:c7:38:b5:e9:f8:9b:a8:2b:ba:5e:ec:43:
d9:3e:ae:52:a5:7e:2d:92:ee:23:81:3d:03:ec:db:
a4:99:3f:16:20:4a:1a:aa:68:67:d9:84:7b:93:38:
f3:cc:b0:d8:68:e5:83:98:b0:31:53:8b:75:2d:d4:
85:0e:68:55:54:be:93:fb:6d:40:f0:1d:ff:8b:c7:
d1:37:70:42:f0:5d:36:e6:a0:22:b2:f4:85:4b:28:
f3:c2:a7:dd:a7:0e:aa:7a:8f:80:51:43:4f:3a:f6:
c7:eb:2b:41:b9:36:3f:06:67:3e:6d:38:96:f5:7b:
d4:54:ab:7e:c2:98:2a:a4:11:0e:8d:f5:2d:02:5c:
5e:17:d2:cb:9e:c0:dd:83:b0:df:4f:32:0e:5f:cf:
ed:66:68:f1:6b:11:fe:31:c1:60:7e:26:6f:4a:c7:
1a:4d:7c:45:5e:81:1b:9c:a3:db:be:bb:d9:84:d0:
77:55:fd:bd:d3:c6:26:52:9f:da:30:16:99:c2:73:
c0:f2:75:88:75:17:39:ed:b8:a2:5d:e3:e0:de:d1:
53:ce:9c:c5:db:db:ec:ab:3e:e2:4f:ed:b0:c7:c7:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:30:EB:81:2C:19:85:97:C4:AC:11:2C:51:CC:4E:7F:15:BF:F4
X509v3 Authority Key Identifier:
keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:f8:a7:68:ba:79:0c:06:fc:20:70:e5:df:85:14:49:44:
e4:88:a1:1d:8d:7e:da:cb:34:ff:8e:d3:70:a5:6c:97:5b:7d:
c5:d1:a2:1c:ba:da:f6:96:7d:11:f0:81:07:a2:17:5a:08:4e:
68:35:54:97:f9:5d:fb:88:5f:9e:7e:3d:e0:54:88:4e:be:36:
38:e7:91:16:cf:a6:be:fb:29:dd:78:93:26:ca:fd:11:9b:03:
9c:a9:f2:28:8c:51:fa:38:4c:d3:49:87:15:4b:1c:60:fa:27:
87:28:40:b3:dd:7d:54:23:4b:3b:e9:e1:9f:2e:53:ba:14:ce:
fd:df:13:a1:87:d1:a0:dd:23:02:72:68:f7:11:20:b3:ee:2e:
85:54:9b:fd:53:86:9f:68:00:57:fc:23:6e:24:c5:08:51:eb:
ef:5f:28:8e:ca:f9:6f:6a:1f:dd:74:e0:26:88:5e:38:11:ae:
28:02:2b:da:02:64:3f:14:95:2c:b9:c2:c0:99:fd:4e:ff:64:
4b:a0:0c:a3:1f:28:01:11:fa:ef:36:31:a8:c0:b5:33:58:ec:
fc:71:fe:75:e5:6c:b8:8a:05:6b:fa:27:f3:a2:d8:2b:f2:d5:
61:d3:d3:33:a7:bb:50:ed:00:19:cb:b3:32:b4:5d:5c:61:74:
02:a9:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:51 2024 by rpki-client on console-fra.rpki-client.org