Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: GWtXUuV3mtZunlbkZZDlQnOjb4v0r1KEn24eguKxfVY=
Subject key identifier: 6C:69:CC:23:21:80:D7:AF:07:EC:20:F8:FB:3F:6C:10:8D:C8:D6:DD
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 01936AB4976644516F3B83D8B0C371D075CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 100D
Signing time: Tue 26 Nov 2024 23:00:40 +0000
Manifest this update: Tue 26 Nov 2024 23:00:40 +0000
Manifest next update: Wed 27 Nov 2024 23:00:40 +0000
Files and hashes: 1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: SqAUaDrhdq/tVGSAwZ94K7zbmn3/weD6Frgt1+3ZwQA=)
2: aSlgO2I7aRf7YQ4ppCmYk_xSm_E.roa (hash: FisyP0elcar9KtTZlaA8jzoQUv03sbcvXhbWbCqLt3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:97:66:44:51:6f:3b:83:d8:b0:c3:71:d0:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Nov 26 23:00:40 2024 GMT
Not After : Nov 27 23:00:40 2024 GMT
Subject: CN=6c69cc232180d7af07ec20f8fb3f6c108dc8d6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:66:09:e7:be:15:cd:9f:74:6b:9d:d7:d8:
96:73:ea:4d:84:88:c3:28:ce:f0:d4:cc:5a:7b:aa:
ef:7c:72:90:20:99:86:9c:ec:8e:45:62:75:d7:be:
02:62:93:29:80:7f:b1:84:5b:b5:31:d9:a5:4e:29:
fa:42:99:78:ac:a6:dc:7a:83:3f:b7:d5:75:9b:f1:
5c:b7:72:95:6a:f0:89:4b:13:33:0e:c3:0c:a6:f2:
cd:ab:35:c7:95:ea:1b:2e:51:1a:7a:93:b5:1a:9b:
c0:57:49:fe:7c:04:c9:87:7f:58:0c:71:22:ca:3d:
e5:6d:8c:f1:24:48:96:69:01:7c:80:ef:c7:b1:4c:
bd:10:fd:fe:6f:da:eb:6d:2c:e4:05:93:49:c7:5f:
a6:8b:94:3c:ca:a0:d4:fd:c7:02:db:c4:64:d5:25:
4a:f8:dc:a1:ec:ef:56:31:91:5a:53:6b:b0:a9:7f:
44:8e:4a:61:c9:21:42:d8:c4:2d:cc:df:23:b5:cb:
41:51:61:3f:12:d0:22:fc:5d:a6:5e:90:fc:4e:66:
13:91:57:6a:b6:63:93:df:e4:04:df:b3:c5:31:92:
6d:65:0f:79:54:8c:e3:3b:a0:e7:6a:39:cc:84:2f:
c4:02:9a:69:22:39:23:61:16:9d:2c:e5:e4:52:8a:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:CC:23:21:80:D7:AF:07:EC:20:F8:FB:3F:6C:10:8D:C8:D6:DD
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:41:7b:6e:7d:c4:ea:0f:1a:bb:3b:16:9e:e8:de:0f:0d:
7b:f9:66:5c:ff:ea:30:32:a2:09:03:25:a4:87:9b:5b:d4:7d:
db:ab:08:bb:cc:32:cd:fc:f7:de:ad:7c:93:f2:7f:a2:90:24:
1f:ef:4e:17:d5:80:fa:f7:de:de:4d:c3:a2:e2:b1:92:f0:5e:
70:41:5c:e4:6f:c6:35:d1:8b:33:c6:f9:57:4c:39:36:df:0a:
2a:46:38:0e:13:a8:9f:ca:9e:d1:0c:68:2a:57:be:bf:ac:97:
8c:8c:32:da:7a:ea:e4:cf:39:08:a1:12:97:1d:27:45:b7:eb:
b5:a2:4b:4d:b7:9f:79:82:af:91:8a:32:44:13:78:9c:ac:bb:
14:96:63:10:12:bb:40:51:87:b9:03:f6:14:da:36:ff:a6:bc:
53:e7:c9:2c:47:68:78:3a:9a:66:79:f7:05:a3:14:ae:9a:dc:
04:d8:22:64:a3:ab:69:48:88:69:e7:8e:d4:3b:8d:b0:5f:39:
3a:a3:5b:bb:39:9d:ee:e9:3d:d7:3d:5b:58:16:a5:71:87:73:
a8:8a:f3:40:6b:b3:c7:70:e2:01:7f:e1:84:c8:be:2f:52:ed:
02:54:2e:ae:a1:a6:7c:ed:d0:62:17:34:2a:6f:3f:d3:06:75:
17:b5:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:04 2024 by rpki-client on console-fra.rpki-client.org