Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: oE0YP/Wx9aF+39VSvciyMR084jEwP8IQglRz4K4+c/A=
Subject key identifier: 92:BE:16:B6:B4:E7:B5:34:B3:1D:7B:E2:FE:0D:D6:E9:F8:C5:46:AF
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 019355AD6B6EA04BFCCE58D8559EB576761B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 1302
Signing time: Fri 22 Nov 2024 21:00:48 +0000
Manifest this update: Fri 22 Nov 2024 21:00:48 +0000
Manifest next update: Sat 23 Nov 2024 21:00:48 +0000
Files and hashes: 1: Bpc0lpa789Lt-u0hpbkd7L8ep2s.roa (hash: GCDA3BLDxT0IHY6JGFpb9rN58vOZpESDgi/5yB51vp0=)
2: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: GheJUrgTnDPPqMw6hTljftIviHaJAVPPYZ/UTWpX0rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:6b:6e:a0:4b:fc:ce:58:d8:55:9e:b5:76:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Nov 22 21:00:48 2024 GMT
Not After : Nov 23 21:00:48 2024 GMT
Subject: CN=92be16b6b4e7b534b31d7be2fe0dd6e9f8c546af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:1c:fe:49:a1:c6:f8:b3:aa:d1:ee:d9:3c:
b0:90:81:ad:c8:4d:fa:53:22:0e:b4:1d:be:f8:d5:
39:c5:d9:fc:a4:99:39:88:97:7d:e4:f5:88:6b:7b:
90:03:62:b0:23:d2:bb:3a:81:cf:21:81:ab:22:9f:
fd:74:85:a7:4e:82:77:70:95:86:a7:33:f0:c7:0a:
ef:45:33:0a:16:fd:83:10:d5:29:8f:2a:df:02:02:
df:3c:96:73:f6:69:11:56:26:23:5d:be:f8:17:9c:
10:93:93:b7:e4:5c:0e:77:f4:7c:72:75:7c:40:76:
65:5f:f0:a4:37:97:e9:d7:67:90:36:fd:9c:98:e8:
da:b7:cd:b8:3b:5b:47:7b:f4:9a:55:56:c4:ab:df:
37:c1:2b:29:a8:b7:04:3f:d1:8c:50:f4:cf:cd:ef:
a5:84:37:89:b6:cb:b9:87:0d:95:75:d5:9f:6d:db:
4e:55:04:aa:e9:27:17:0f:9a:96:c4:43:ea:f4:bc:
fb:fe:83:1d:7e:41:37:e6:21:53:7c:46:59:7b:b1:
40:30:6a:85:1c:f6:9d:f8:ec:6a:9a:e9:46:2e:c8:
65:8f:ab:76:34:7b:33:e4:41:d1:90:e6:6c:19:45:
1e:93:a6:96:ee:ee:a4:cc:00:75:a9:a7:e8:b2:61:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:16:B6:B4:E7:B5:34:B3:1D:7B:E2:FE:0D:D6:E9:F8:C5:46:AF
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c9:5a:9e:f5:d0:5f:95:f4:28:69:4a:e2:ea:a7:e0:53:af:
ba:ea:1e:88:b9:fe:4c:c1:0c:7b:49:ea:20:73:d2:b4:86:96:
91:b6:10:75:10:82:fa:64:14:0c:f6:f2:8e:78:4f:b3:52:82:
70:26:c6:29:cb:60:fc:a3:3d:c4:ee:95:ab:42:6e:ad:5d:4a:
81:7d:80:98:e2:35:c7:ff:ac:28:33:0e:ea:63:95:70:25:45:
eb:af:1e:ff:fc:7a:7c:65:06:c5:68:41:09:a3:a2:86:a0:d5:
bc:58:f6:38:ce:4f:1b:5a:d3:93:bc:18:e4:ed:6c:a6:61:27:
bc:2a:d3:99:eb:20:28:81:4d:e5:91:fa:aa:9b:93:64:5c:c5:
43:5a:44:2e:ef:e8:6d:d0:a2:85:09:10:cf:3c:cf:4b:4e:30:
f1:0b:41:da:27:97:5c:1d:b1:32:4e:06:d1:3f:30:68:f9:52:
09:9b:89:b2:a7:36:7e:52:0f:97:44:96:07:79:cc:ab:0e:78:
40:7d:f9:45:f9:5e:56:fb:8f:99:9e:98:0c:97:3c:27:fd:9b:
bf:39:28:81:30:84:82:f2:ae:70:6b:78:d8:0b:67:9b:10:25:
bd:d5:2f:f0:4b:bd:b5:d6:3f:ea:c4:28:f3:f5:85:68:47:1f:
57:87:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:00 2024 by rpki-client on console-fra.rpki-client.org