Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File: iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier: ExWHCoyAAvVuleNtRQWuNgRb+CHdwM8EiOE+3lAyD4s=
Subject key identifier: 49:93:C2:6A:C7:1B:59:B6:9B:73:8F:8E:52:6C:1D:21:A9:CE:57:9F
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 0193572DDA708CB3F5B07E311617CBBCEB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number: 0FA5
Signing time: Sat 23 Nov 2024 04:00:43 +0000
Manifest this update: Sat 23 Nov 2024 04:00:43 +0000
Manifest next update: Sun 24 Nov 2024 04:00:43 +0000
Files and hashes: 1: 0NUMWy_NR9r5aMfnYJoau7vLeoY.roa (hash: FJP/9zLYhLfa1of3o49um6b82q4o42A/6rPboeHAUgs=)
2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: aF3QCiBdCBMMCARzBbLSmAgq/j+eCR7/Lcivkv+Yk0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:da:70:8c:b3:f5:b0:7e:31:16:17:cb:bc:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: Nov 23 04:00:43 2024 GMT
Not After : Nov 24 04:00:43 2024 GMT
Subject: CN=4993c26ac71b59b69b738f8e526c1d21a9ce579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:67:5d:1d:97:9a:22:61:bc:f8:76:ac:57:
2e:25:a3:b1:f9:4d:31:15:f0:58:11:b5:a5:b2:18:
dd:1d:ac:08:ac:93:1a:c5:ea:8b:cc:3f:23:8c:49:
eb:d1:2b:83:44:84:a3:c5:f3:e5:23:bb:48:c5:42:
c5:a6:4c:d4:e0:b6:ba:7f:8c:3c:7e:c2:c2:b6:f7:
2e:e7:6c:09:a1:5c:00:f4:4e:5c:80:f5:22:17:35:
78:94:7c:f7:f4:ee:af:69:ea:1f:1f:05:95:e7:75:
f2:8b:e2:65:73:da:c0:29:32:47:56:5b:35:3b:be:
c8:69:2b:15:20:4d:6b:52:f7:ea:46:73:ee:8e:12:
e5:30:c9:25:63:2a:23:f8:57:5f:03:5f:3d:97:ba:
4a:65:55:57:b9:32:19:d3:7e:01:ae:97:ae:76:0c:
cd:27:ca:be:b0:c5:7b:c5:9f:5b:6e:5a:81:cf:ab:
e9:50:e3:0e:a7:84:a1:2f:ca:54:f1:43:15:d5:38:
19:a4:c6:92:0b:85:be:3e:0e:94:29:9c:9d:bb:46:
9f:c2:4e:a9:25:7e:7f:e2:ae:fc:af:24:8d:ba:23:
a1:96:64:33:f0:c0:04:64:10:3d:8f:d2:d1:32:4d:
f5:14:2f:fb:66:44:bf:cd:71:b4:0a:5c:7f:8e:63:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:C2:6A:C7:1B:59:B6:9B:73:8F:8E:52:6C:1D:21:A9:CE:57:9F
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:c6:86:97:20:68:b0:8d:a4:a9:2a:73:a3:44:e1:b8:76:
96:a9:72:09:b4:cd:f0:42:a3:81:ba:af:45:10:ce:27:19:a9:
d6:85:3d:78:3a:5a:5d:0f:ba:4f:09:e9:9f:50:28:55:d9:d4:
60:3b:05:d8:67:7d:b0:b2:8d:2d:7c:e6:55:0d:38:7a:61:e4:
ed:6e:c6:af:04:e7:de:94:e4:52:8a:4f:a0:6b:84:e8:6a:45:
f5:c4:6b:d7:df:a5:75:8f:cb:62:f3:55:29:26:d3:80:1c:7f:
51:d3:a3:a4:b3:ef:d5:78:bc:1d:33:9e:8f:bf:61:35:4f:ce:
01:14:b2:13:05:82:4b:a1:1d:f7:08:45:4d:7a:56:ce:f8:58:
73:c5:52:8b:b3:46:4f:02:7c:1a:e9:49:37:ee:e6:8d:18:38:
1a:3d:ff:31:34:c2:50:32:c7:bb:0a:a2:dc:03:3d:a5:5a:13:
e6:46:c0:ad:d3:1a:17:c7:2e:4e:46:f7:eb:ef:f4:53:f6:6f:
f0:d1:a9:63:7b:67:dd:58:ae:71:48:d1:14:25:11:3c:a2:29:
9e:fd:64:5a:87:ea:83:e1:50:a8:1b:2b:90:49:fe:62:6b:0e:
c6:4e:fb:6b:01:f3:31:d5:da:36:5a:cb:cf:1a:76:6b:f7:97:
cf:9d:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:16 2024 by rpki-client on console-fra.rpki-client.org