Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: ElVEDBHDlGUkKLVJPtA/1Jncyivy8aV3/WIlbkQS5h8=
Subject key identifier: AD:8A:F3:21:7B:39:D2:F9:76:D9:BE:6A:C1:31:B2:EF:DD:44:7B:5C
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 01935207B4A38170BF0327BC926FAC03FC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 06B0
Signing time: Fri 22 Nov 2024 04:00:56 +0000
Manifest this update: Fri 22 Nov 2024 04:00:56 +0000
Manifest next update: Sat 23 Nov 2024 04:00:56 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: XTHykKcetXVbqdFj+PSjgD8n6dhrQu3nSL3ILHro/XQ=)
2: 1xws1cXml1eRMaWyT_6HPeP8eGo.roa (hash: 5fnBbjKQWkvOz52hJ7rwnbPQPhL73LjvNwUmNpDWGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:b4:a3:81:70:bf:03:27:bc:92:6f:ac:03:fc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Nov 22 04:00:56 2024 GMT
Not After : Nov 23 04:00:56 2024 GMT
Subject: CN=ad8af3217b39d2f976d9be6ac131b2efdd447b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:cd:07:9d:14:35:1a:2e:9d:46:1f:d1:49:
4a:13:13:8a:c6:42:8c:3f:96:d2:c4:d5:0a:35:09:
ab:e1:ce:90:fb:5a:71:9a:fc:0f:75:a7:8e:4a:fb:
e1:34:c0:88:dc:ba:c9:e2:b1:a0:53:6f:86:2a:4f:
7e:1d:4b:dd:5d:f3:b2:75:9d:f9:db:1b:ac:9d:81:
cd:23:3e:20:0a:73:63:da:af:4f:00:73:71:bb:e9:
a6:73:8c:e1:d1:24:38:57:08:7c:9c:ac:8e:99:48:
b1:12:d7:05:4d:f1:4c:24:f1:88:41:51:bc:c4:43:
0d:ac:20:fd:95:4a:46:76:ea:8d:cc:f8:0f:41:b5:
f6:2c:5b:16:8b:9c:96:16:a9:21:d5:26:39:22:7d:
43:67:8f:94:0a:c4:9d:e7:ca:25:ed:02:3d:62:fe:
c6:7a:c9:a0:b7:a9:c6:6f:9b:b9:76:85:17:82:ff:
60:28:14:ea:f2:51:34:84:30:05:0c:7a:df:ed:e9:
c3:bf:7c:5f:7a:d3:3c:b4:af:77:21:1c:6f:67:9f:
a9:b5:24:90:4d:c0:21:75:31:3e:8c:99:e3:8c:a0:
5e:df:47:b6:48:c3:f8:55:9b:d7:e6:61:63:ad:1d:
6f:5c:60:c3:bf:c2:50:86:b2:e6:4b:99:ad:64:96:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8A:F3:21:7B:39:D2:F9:76:D9:BE:6A:C1:31:B2:EF:DD:44:7B:5C
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:47:17:71:55:c2:e5:9a:d8:4f:ef:bc:e9:ed:bb:80:64:11:
0c:17:e1:65:b9:54:49:c6:5c:34:95:7e:9a:9b:e1:52:9d:e8:
7f:33:19:b6:4a:30:08:d7:45:ac:08:93:15:0d:84:60:33:63:
5e:da:fa:aa:72:53:a6:83:3a:b3:a8:82:a4:9a:66:f7:db:fb:
9c:05:fb:c5:51:04:df:82:01:39:f3:39:4d:c9:27:cb:1f:08:
6e:85:da:1a:fc:f3:4d:86:a6:13:3a:a2:ce:3d:01:fa:86:d2:
32:66:bb:dc:67:ea:01:ff:a9:f3:23:6b:84:62:bb:d4:e5:ad:
9a:02:79:44:59:79:69:c5:e2:20:32:44:f1:86:49:17:da:ec:
b6:69:44:93:85:a5:70:de:4d:c9:68:e3:57:0e:ac:58:95:1a:
a2:1d:34:0c:d2:11:04:05:f2:f5:08:68:75:c3:28:87:33:a4:
f3:71:bb:38:b6:27:9b:c6:ad:5f:ce:b6:24:f8:f5:3b:37:47:
b6:d6:32:1c:77:de:1d:08:92:95:72:9c:74:1f:54:fa:0c:cf:
9e:5f:e8:d8:35:41:5f:aa:3e:6b:0d:84:e0:a4:73:a3:3a:bf:
ee:1a:e9:e5:11:21:00:c1:ba:4c:d9:1e:47:fe:22:30:70:bb:
00:04:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:26 2024 by rpki-client on console-fra.rpki-client.org