Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: PAshE39ILVcT2uDHSVZd4G3FOSvo9zSv2i5/1H4jyXk=
Subject key identifier: D7:42:3C:80:51:E4:59:4B:C4:56:A3:41:2B:C0:46:ED:B3:DA:4D:A2
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0194BA8481C4E3F026140FC460AFE27B2C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 09F1
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: 3o/FxRf7wBEeXazL1B79ybvK0rxtmgZg0BBB0EXGgaw=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:81:c4:e3:f0:26:14:0f:c4:60:af:e2:7b:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=d7423c8051e4594bc456a3412bc046edb3da4da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:3b:6b:fe:fd:da:31:fd:28:3b:f9:41:18:
f4:8a:42:67:43:ea:89:7f:28:62:28:9c:34:c1:36:
71:ce:07:f3:53:21:87:7b:7c:4d:34:58:38:47:54:
31:a1:c0:4f:7f:00:32:1f:ce:27:f2:e1:6f:42:7f:
20:fe:cc:e0:56:13:c2:65:82:a4:fb:0d:1d:3d:ea:
ac:8a:14:6d:37:7d:7f:6f:4e:ed:75:f5:86:2b:e7:
ab:d8:30:3f:14:85:71:49:6f:7f:8b:3a:20:e3:ee:
76:07:94:31:13:e2:2f:8c:4a:c1:25:49:0a:85:7d:
a2:06:15:56:7a:88:5f:81:64:58:09:02:58:6b:99:
9b:bf:5b:bb:94:1b:36:65:fb:c3:4f:12:6a:99:8d:
0d:b9:9f:d6:9e:84:c6:f1:41:bd:a1:a3:7c:97:43:
5e:55:ee:0a:4f:31:c6:31:09:d8:e5:af:90:b2:c9:
36:a8:46:bf:49:9c:67:93:2a:82:e2:74:82:56:3f:
50:05:0c:25:1c:65:f9:95:11:4a:40:c5:3a:5e:8b:
69:e7:8a:46:d3:05:02:c5:d5:3e:2f:b6:f4:45:1c:
07:d2:9b:66:0a:04:d1:e8:cf:d3:96:e0:d0:0b:f9:
87:c0:97:c5:27:50:03:d0:4e:16:ba:22:ee:9f:44:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:3C:80:51:E4:59:4B:C4:56:A3:41:2B:C0:46:ED:B3:DA:4D:A2
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:54:6c:aa:12:98:72:07:dd:98:d2:5a:37:3e:70:16:47:
16:85:e5:f9:f2:33:08:29:e8:aa:ee:a2:ff:d3:a6:7d:b4:d7:
9a:3b:df:b2:47:7f:db:58:53:13:06:cc:c8:b7:6a:5f:02:74:
6c:d5:c4:e9:af:34:66:4c:84:0a:6a:af:37:cc:76:b7:5f:e7:
ee:41:e1:d8:d7:4a:ba:7a:96:53:c5:0f:2c:9c:24:8f:7d:97:
3f:1a:ae:0b:b4:d3:38:81:ad:8b:90:f0:a5:82:e9:37:48:e9:
01:76:ba:8c:b4:dd:4d:4f:1e:fc:8f:78:12:6d:fd:d4:36:25:
e4:e8:75:39:bf:27:2d:cd:f3:8d:c3:16:c4:22:43:c0:48:94:
c8:64:be:c1:65:86:a8:41:27:1f:d5:03:45:96:f0:88:d9:de:
3a:e5:1a:53:58:d0:51:e7:4d:68:26:fa:e5:c1:2f:03:4b:75:
37:e3:42:18:0f:53:f3:ca:c2:01:68:33:14:89:d8:f9:72:11:
92:be:f0:ed:db:31:c6:63:60:e0:47:f5:80:3a:64:45:4a:ac:
9a:a3:31:98:41:7f:b8:19:c6:de:09:ea:03:e0:d3:2d:c0:8b:
54:d8:78:a6:dd:c5:c0:26:de:bf:70:b0:d9:85:4d:36:c0:52:
ee:30:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:33 2025 by rpki-client on console-fra.rpki-client.org