Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: F0wpT8ImtJMhCUyOQLqEag4OePulv4jSRqrPz4gPnhE=
Subject key identifier: 0F:A3:89:4B:C0:F1:34:11:E0:6D:C0:1F:96:15:4F:AA:81:52:2D:50
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019357649592266F640A5D36A8E968899A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0938
Signing time: Sat 23 Nov 2024 05:00:29 +0000
Manifest this update: Sat 23 Nov 2024 05:00:29 +0000
Manifest next update: Sun 24 Nov 2024 05:00:29 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: Qrw0ldE2ghCuCjidrOpJeEuHst2pDJqwUz/yJa82VVw=)
2: biRr1nBVb1l73p8VH29kCumDrYg.roa (hash: sxTrUaQnDN/cDyMLI6RfUjFhJJpMZI5NuezhUjmCZMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:95:92:26:6f:64:0a:5d:36:a8:e9:68:89:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Nov 23 05:00:29 2024 GMT
Not After : Nov 24 05:00:29 2024 GMT
Subject: CN=0fa3894bc0f13411e06dc01f96154faa81522d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:d1:60:f6:6a:be:6b:03:35:04:c3:93:cd:
d8:3a:db:41:e4:22:94:0b:72:e1:9c:0a:5e:4d:b3:
77:72:da:44:6e:73:d4:23:b0:b3:4f:5e:ba:59:40:
e7:35:53:ee:68:9a:e6:92:c2:9a:95:dc:a4:38:81:
cd:91:32:a0:6d:bf:84:b3:4a:05:4d:32:0c:48:ad:
8e:09:a2:ae:8f:72:c5:cb:51:24:0f:06:7e:35:32:
fa:f5:41:af:3a:bd:7a:a2:d6:6b:1f:78:b7:7b:fd:
ef:2d:ac:dc:ab:ec:95:25:33:40:88:ba:f5:fd:3c:
36:0c:03:83:e1:3e:58:eb:60:4c:b1:77:d1:8b:e8:
76:b5:f0:d2:3c:37:b9:1a:d3:29:12:b7:4c:43:c7:
b6:83:5d:28:e5:19:51:5d:8a:2a:d2:ac:8b:ee:97:
2c:bb:5e:3c:d5:91:fe:50:71:49:6b:c2:21:05:c8:
4e:9d:91:2a:54:a1:be:06:90:ac:8b:a0:d2:5c:f9:
9b:e1:a3:cd:5c:f9:2d:de:da:59:eb:90:f1:19:8a:
7a:24:0f:ee:bb:a1:5c:72:3a:9b:14:ad:f5:cc:78:
d3:8f:c2:e4:d2:63:23:78:a4:cf:c6:e2:aa:00:e2:
ec:b6:ef:c1:ce:db:df:35:ae:5d:f1:4b:0f:05:e7:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:89:4B:C0:F1:34:11:E0:6D:C0:1F:96:15:4F:AA:81:52:2D:50
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:57:3d:0e:61:18:7c:9e:e5:de:92:a6:9a:a9:e5:79:ab:01:
8a:51:bc:10:3b:77:d0:20:cc:cc:73:c1:45:7f:54:48:6f:e2:
11:c9:a6:c5:1b:3c:3e:2d:78:2a:e1:f2:6a:2e:85:2f:4e:32:
3a:27:e5:5c:9f:58:66:77:1b:6a:c6:72:bc:47:10:1c:62:f6:
6a:2d:fe:28:aa:54:7e:19:be:60:26:e6:95:9c:f4:75:f5:10:
02:a0:54:74:0a:59:92:81:ef:ce:ca:b2:dd:f0:4e:06:1b:af:
1c:4e:cd:07:d5:f2:37:4e:cd:71:4f:e9:75:93:e7:3a:ea:bd:
d7:e8:fc:a3:3a:aa:50:62:1b:63:11:ad:c8:69:dd:a8:69:d4:
63:59:16:d3:04:97:60:4e:c7:e1:21:23:b9:da:18:d3:de:78:
9a:68:1f:6a:90:76:45:84:f1:04:1f:2c:9c:ca:2a:d3:77:c2:
f8:e4:1b:ba:dd:d8:f4:03:86:79:be:10:6c:f2:8a:90:da:bf:
c2:bd:68:e4:d7:b4:2c:9a:f3:a4:b1:18:d1:48:a7:52:b0:ec:
3c:1c:df:6e:7c:a5:55:7f:0b:4e:98:68:fa:29:6b:d7:57:00:
e0:6b:a0:45:62:1d:08:97:7d:b3:fa:d0:d6:0d:41:54:43:a3:
6e:f4:9d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:25 2024 by rpki-client on console-ams.rpki-client.org