Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: 6Jw0CXOOT7stmXd+1jqGCkXJHnmXe3F/7B6FIwRzods=
Subject key identifier: D5:8E:3A:68:66:46:7A:D8:91:C4:64:1E:49:86:85:02:A0:22:D0:1F
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 019353F6191D63DFCB6C96F60AF0388E36B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 13:00:57 +0000
Manifest this update: Fri 22 Nov 2024 13:00:57 +0000
Manifest next update: Sat 23 Nov 2024 13:00:57 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: 3tGXL/UZoOE3z+hkhZFdDsOubQt3NzXDygd71Clgm5s=)
2: DJ3xsn4AGyOFLwibFH0SEtAtTTo.roa (hash: JIDzI5yhJyTqILByfLdhhO+DDMBoWyksm2EDpkJAl4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f6:19:1d:63:df:cb:6c:96:f6:0a:f0:38:8e:36:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Nov 22 13:00:57 2024 GMT
Not After : Nov 23 13:00:57 2024 GMT
Subject: CN=d58e3a6866467ad891c4641e49868502a022d01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:be:85:e4:46:fd:18:b7:16:25:ad:ff:ed:
a2:a2:ce:47:55:6c:3a:15:34:df:14:ca:f8:8b:37:
cb:ef:99:21:9b:e4:c3:4a:13:3e:a8:2c:13:94:8e:
4d:5a:55:e0:77:64:f6:78:6f:b6:9d:c2:db:82:33:
a0:4c:2f:fc:68:f6:25:41:91:8b:b3:34:84:e8:0a:
d8:92:c9:a7:12:40:74:76:31:d0:ea:44:c7:9f:68:
57:f1:f4:bf:8e:e9:4e:14:64:15:f7:32:e9:b3:67:
9f:28:4f:ce:e6:26:12:4b:03:c6:5b:3a:65:11:10:
e0:96:a7:05:84:e8:64:a9:8f:73:19:f7:33:a5:28:
f3:8f:f9:2d:c7:eb:be:eb:32:db:af:81:d3:2d:c5:
25:3c:6a:06:0e:0d:18:43:31:8f:23:55:5e:49:46:
a7:1b:09:69:8c:5c:cc:91:c9:c0:69:69:05:83:18:
b2:6b:9a:4e:0b:5a:1d:97:34:aa:76:74:8d:36:49:
9d:07:19:d4:4a:6e:76:a2:04:b0:14:29:46:12:51:
13:20:48:48:20:5f:0c:99:d3:cc:3e:54:f5:05:d6:
34:bd:e5:fd:46:9d:7b:40:93:93:5f:05:5a:b5:a8:
d5:a1:fd:4a:a7:5f:17:42:f9:03:35:f2:b0:df:8d:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:3A:68:66:46:7A:D8:91:C4:64:1E:49:86:85:02:A0:22:D0:1F
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:d5:29:ca:f1:8d:5e:9f:2d:8b:b8:f3:22:2b:07:92:86:
14:ed:1e:94:3a:3d:68:40:df:fa:64:77:c9:94:d9:55:62:15:
44:02:0f:3c:40:3b:54:53:b9:b5:9f:89:e8:6a:e8:fc:7b:bd:
14:02:8e:96:0b:1e:26:c7:55:6a:78:f2:08:46:8a:02:96:49:
1a:fb:ed:59:5b:14:1c:aa:51:74:8f:62:d4:db:90:7c:49:a0:
f1:de:38:55:0c:2f:96:77:bb:00:f9:65:5d:f3:64:f7:f6:f5:
d2:2b:d6:4f:0c:0b:d5:30:3d:ce:66:d6:b2:3a:e0:49:e5:6a:
91:fe:27:5a:0b:25:fa:3e:17:8d:4e:19:86:02:3f:77:4b:22:
42:cf:e0:19:0a:d7:16:a0:c0:9f:b0:6a:e1:94:7c:b2:f3:4a:
6d:ca:de:4d:c9:cf:04:36:f1:c8:3d:65:d4:c4:a5:00:db:41:
28:94:89:04:07:42:68:a5:4c:a8:bb:13:94:bb:9c:7d:26:29:
7a:f4:6b:7b:1c:da:2e:f2:80:df:9d:0f:5c:9a:d6:63:19:e6:
12:ab:75:df:44:71:3b:a3:95:b9:0f:1c:08:cb:14:98:f1:98:
98:d7:ac:2e:c3:f2:48:ca:ef:7d:3e:80:16:33:5d:e8:76:53:
bd:c9:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:14:56 2024 by rpki-client on console-ams.rpki-client.org