Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
File: h0IrQhcvXKW3uV5HkMXb08YqakI.mft (raw, json)
Hash identifier: 0J2ggb/BhMn9y9EMFuANSWTVqywOidjceX0km4GaJqA=
Subject key identifier: 9E:9C:B4:25:B9:4D:08:6E:8B:42:1C:6F:95:37:BE:38:AC:4F:D4:87
Authority key identifier: 87:42:2B:42:17:2F:5C:A5:B7:B9:5E:47:90:C5:DB:D3:C6:2A:6A:42
Certificate issuer: /CN=87422b42172f5ca5b7b95e4790c5dbd3c62a6a42
Certificate serial: 01935764F8E39FEAEF95CD39CF2182D45B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0IrQhcvXKW3uV5HkMXb08YqakI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
Manifest number: 01C2
Signing time: Sat 23 Nov 2024 05:00:55 +0000
Manifest this update: Sat 23 Nov 2024 05:00:55 +0000
Manifest next update: Sun 24 Nov 2024 05:00:55 +0000
Files and hashes: 1: h0IrQhcvXKW3uV5HkMXb08YqakI.crl (hash: 9miAGaLzLr5FsSlQWtuOfSjNYfd2zC09SI/SOXbWpd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0IrQhcvXKW3uV5HkMXb08YqakI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:f8:e3:9f:ea:ef:95:cd:39:cf:21:82:d4:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87422b42172f5ca5b7b95e4790c5dbd3c62a6a42
Validity
Not Before: Nov 23 05:00:55 2024 GMT
Not After : Nov 24 05:00:55 2024 GMT
Subject: CN=9e9cb425b94d086e8b421c6f9537be38ac4fd487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:1c:ba:fd:67:a6:8a:5b:fd:b9:d9:5e:93:
43:35:6b:14:b7:c6:14:f6:c0:f1:79:7a:25:0a:1a:
c6:f6:8f:e2:e6:8b:90:d1:13:92:cf:c8:2e:9b:e9:
a1:46:0b:73:3f:17:95:31:c2:cd:74:e4:fd:c8:7d:
14:86:fa:ec:9d:83:5a:45:bb:1b:e6:ce:6a:9f:5a:
58:90:77:6f:82:55:9a:2b:c4:cb:36:bf:00:33:be:
37:83:19:40:c9:04:26:66:6f:e8:a5:d2:99:78:80:
5a:2c:f7:a4:db:98:10:03:93:3a:ec:82:5a:9b:b9:
90:ab:14:f1:0d:5e:03:30:05:29:65:2c:1f:a6:df:
34:8b:44:30:06:03:86:04:db:85:2c:7d:df:2e:db:
0f:4d:da:25:a0:4e:fc:41:90:84:db:76:b4:3c:fd:
6f:49:c0:d6:3e:92:80:71:a6:40:58:99:13:6e:b1:
db:d6:81:de:04:ab:19:4c:6f:11:30:9a:ea:04:2b:
a6:25:97:30:fc:f3:91:d5:b9:2f:93:ce:c8:0f:b3:
0a:cb:db:d8:37:6c:f1:98:99:59:67:73:58:ad:ea:
06:51:89:40:d1:58:fe:35:13:11:19:63:b1:27:d5:
67:c9:80:f2:20:0c:73:99:72:44:00:ff:48:45:26:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:B4:25:B9:4D:08:6E:8B:42:1C:6F:95:37:BE:38:AC:4F:D4:87
X509v3 Authority Key Identifier:
keyid:87:42:2B:42:17:2F:5C:A5:B7:B9:5E:47:90:C5:DB:D3:C6:2A:6A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0IrQhcvXKW3uV5HkMXb08YqakI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:80:40:fc:ea:b2:48:5b:ce:54:70:ba:41:4e:12:d3:84:
df:1c:16:53:f6:48:dc:bb:05:0c:d2:1a:31:b6:4d:09:30:76:
4f:9e:90:d3:89:e9:7f:e1:89:00:11:ed:43:db:2f:1a:f5:a2:
6d:5d:7c:06:a9:a8:20:92:95:bf:63:b4:d2:64:09:a2:d3:2e:
ff:8e:43:c6:47:12:9c:58:d0:24:c7:08:1e:48:92:fa:45:db:
ee:46:ff:6d:16:47:3a:86:22:7e:65:8e:79:b0:31:37:4e:87:
fb:f6:4d:69:ca:3c:5d:b8:46:8b:c2:59:fb:ae:7e:ae:d8:26:
75:3c:41:15:11:c1:c9:41:07:39:1d:0e:6f:64:e2:89:d9:bd:
25:db:dc:49:82:91:54:c0:90:c5:da:56:6d:e2:80:1e:23:fb:
a9:e8:62:78:1d:aa:2a:c4:c0:d3:d5:0d:f7:61:20:de:13:0a:
70:94:ad:d0:8c:00:11:08:eb:0b:87:dd:55:e8:de:36:6a:70:
88:b8:1a:4a:b8:1c:bf:22:d9:7b:21:17:b2:f1:cd:8b:3b:cf:
f1:bf:7c:51:dd:39:64:dd:50:ea:57:6c:16:b1:ba:96:14:9f:
44:32:a4:48:c4:61:a6:3f:a9:54:4b:50:18:81:75:c8:bb:7e:
16:93:30:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:48 2024 by rpki-client on console-fra.rpki-client.org