Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: delqn/4/hE5LeS6XXstKvHLO2aaNI+XVHaO6dYCckhs=
Subject key identifier: D1:24:C6:CD:44:34:68:F6:6E:FB:1A:90:CD:9E:0E:08:0A:F6:45:51
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01936AEB7AD213C2DB96216D9C237830D182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 00:00:37 +0000
Manifest this update: Wed 27 Nov 2024 00:00:37 +0000
Manifest next update: Thu 28 Nov 2024 00:00:37 +0000
Files and hashes: 1: 1-ReZPvkOTztKGt2-CNXGke3bqJc.roa (hash: ECK/xuj47qhMTL8iymR843T5yiByEH1iFt/jomjPejc=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: 5o48oMlSYlQtXXRPb2bXTeSTGB/THe+4q9VMS0DY9XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:7a:d2:13:c2:db:96:21:6d:9c:23:78:30:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Nov 27 00:00:37 2024 GMT
Not After : Nov 28 00:00:37 2024 GMT
Subject: CN=d124c6cd443468f66efb1a90cd9e0e080af64551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:e6:22:93:8c:33:71:05:b0:ee:09:48:ea:
9d:fc:5d:8b:02:ec:29:dd:48:b6:38:0e:93:5c:15:
b3:ad:ee:b2:5c:93:2c:b6:6b:15:b1:73:3d:50:ed:
a6:40:d6:f5:a5:5f:86:f5:1b:d7:25:dc:b4:81:f1:
75:98:b9:a2:e6:d5:05:56:2e:18:cf:e6:55:43:b2:
9d:6f:c5:6f:27:d4:c0:79:b3:31:7c:be:a2:c9:77:
14:65:64:ee:26:44:50:30:ef:97:fe:04:ef:94:c9:
e5:13:e9:4c:fe:8a:fb:6d:16:8d:13:f7:f8:4e:22:
2a:5d:af:47:18:b5:0c:07:79:10:b6:ae:2c:44:35:
e1:51:ec:08:99:6a:7c:85:4a:e6:65:df:ae:27:da:
4c:af:95:d0:63:85:ac:e1:39:cd:33:ff:8a:c5:65:
d0:b3:af:35:15:87:04:4b:b6:34:1f:5c:97:13:5f:
b5:3d:29:81:55:47:67:a1:5e:88:04:9c:49:98:75:
b2:38:4f:b2:9b:84:e5:ae:a8:87:da:f4:c4:04:8f:
34:96:7e:62:33:1e:bc:8d:c3:41:a5:e1:9a:4f:50:
3a:79:ce:29:54:e4:55:ee:0d:6c:c4:cc:80:b2:5b:
18:50:9c:74:46:48:0b:82:a4:30:cf:5f:12:31:4c:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:C6:CD:44:34:68:F6:6E:FB:1A:90:CD:9E:0E:08:0A:F6:45:51
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:2d:9c:f5:24:07:28:19:4c:f3:da:eb:af:df:41:ac:fa:
c8:04:27:3e:a2:ad:0a:1c:87:1a:de:c2:e4:52:0a:f5:42:92:
f4:81:35:97:3a:9b:43:36:e0:f8:9c:d5:61:1a:0f:3c:48:01:
24:68:4e:49:1e:39:cc:6e:4a:e7:2b:9e:fe:e7:fa:2f:ad:5c:
04:f1:ab:1e:e6:8c:d2:df:2e:73:27:d6:78:87:8c:a0:79:d4:
c5:7d:04:92:57:8f:23:a0:2e:45:4c:9f:30:d0:a9:a6:a9:0d:
b9:b6:7c:b8:a2:98:cf:33:70:4d:fd:a0:b2:f1:6b:7b:af:17:
87:2c:a6:34:c3:76:f1:d8:c4:47:3b:6d:03:59:9c:92:9f:19:
36:a4:e1:a5:73:60:9b:20:91:8a:fd:5a:4b:a9:c9:04:76:88:
1a:df:2f:f7:83:c2:1c:9c:59:df:c8:5a:01:24:90:7c:00:59:
50:82:92:1b:f7:01:e7:a0:f8:47:88:d5:80:87:a6:37:f3:3e:
f1:2b:0a:95:6f:f3:d7:1b:03:90:6e:40:f3:ce:13:76:13:cc:
94:f7:9d:a1:50:dd:e3:57:ac:41:8e:38:9a:6f:35:3f:ba:30:
01:08:6a:6a:77:7e:01:16:9f:3c:94:c1:4a:1f:66:72:e0:ab:
a0:e3:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:21 2024 by rpki-client on console-fra.rpki-client.org