Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: SXkcUnEiQ9q0NTL3WZA6lcMU7COwbwsUTgph1FnRpxA=
Subject key identifier: D0:2C:62:22:59:79:5B:D1:90:2B:18:CD:4A:35:7E:21:B8:65:EA:00
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019351623DBC2085F12D4B88D7CD7B1D475B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1043
Signing time: Fri 22 Nov 2024 01:00:12 +0000
Manifest this update: Fri 22 Nov 2024 01:00:12 +0000
Manifest next update: Sat 23 Nov 2024 01:00:12 +0000
Files and hashes: 1: 5qZ7I9Kufanq75jOcjRJZlrY3Ek.roa (hash: K5SgwzdTTouaFH9/uBL4vQcjOQsjXL9XPkbIMuIHKMk=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: UxXIQS96O2fv9Krb9Cq+yBC517DAEKQEFv0Tz4mS9ek=)
3: KgXJh7l1LSW0ffz2tr5qblPqQvs.roa (hash: UbRRPoQzvBqn5L2Zq+IrNZ+EiABOsl3IxlpHzg/zrLM=)
4: LNaFovXEEUjxdoHg1fLCjM-NQx0.roa (hash: NNyIaNGcvOablfmmGfZD6uBrRNwdo6jnA6mKC9kz608=)
5: dtsQxqYL_0700mEtpS_0XOPZO-c.roa (hash: 1TsJR+4CguEWBtk8XTOrs1nFVKtTheqSsjvjsKu1PO8=)
6: kr5rL_Z7xsvhkEk_AIK7NK733io.roa (hash: kP8Z7liCyjHZObvjEztxyEQ5NDI4DJIMCK6U5iDa9TM=)
7: kvoCVYau2SsIS6Fo4Cw7IR4eGsA.roa (hash: +jRiIXqFHvtP9cVVKZ3imTx6YEbNShDDzldAvGcqDXE=)
8: nlDHQkn-DIYxrxjTGwo5Vktb-uE.roa (hash: DeHqdIwA2dfTmwITCQp1QdRUBcnBHFOJtmQBPv1RXRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:3d:bc:20:85:f1:2d:4b:88:d7:cd:7b:1d:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Nov 22 01:00:12 2024 GMT
Not After : Nov 23 01:00:12 2024 GMT
Subject: CN=d02c622259795bd1902b18cd4a357e21b865ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:b9:06:20:47:01:68:6f:58:55:8e:5b:4a:
0f:d5:c8:88:9c:35:58:48:91:ff:d1:5f:bb:51:e6:
3e:0e:7e:9b:02:89:d7:12:bd:ff:a4:92:10:38:ac:
6c:9c:63:e5:77:db:21:f4:6d:9c:1c:c5:01:4d:c2:
79:4c:a4:ad:ab:43:e4:77:ab:04:9e:f6:94:04:94:
a4:09:fd:5e:60:13:6d:1f:10:4c:6b:3d:97:1d:08:
aa:d6:6a:05:ef:f3:29:44:ea:73:19:95:7a:0e:0c:
7d:f7:31:d5:04:81:bc:e8:5b:96:6f:b5:b6:6e:1e:
95:ba:38:2f:70:9c:d5:12:2f:74:2d:f4:1b:b4:c0:
80:02:40:da:68:88:44:62:5f:f7:c1:8f:f1:df:25:
db:a7:89:76:7a:bf:61:2e:d7:5f:e7:07:57:d5:2b:
dc:db:17:9f:e5:ad:a5:20:37:c2:f5:63:a9:9a:67:
45:e0:51:4a:55:56:fc:0a:29:ec:56:73:07:48:11:
bb:41:20:10:c8:cf:53:d5:c0:db:fa:2e:e3:76:ee:
c4:c4:46:26:b3:4c:d0:f2:49:ee:00:9e:6d:0a:d1:
5d:88:a6:43:23:72:77:85:0f:5d:5b:2a:94:1d:67:
12:2e:9d:60:51:e4:eb:93:88:45:5b:8f:f6:26:83:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:62:22:59:79:5B:D1:90:2B:18:CD:4A:35:7E:21:B8:65:EA:00
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:40:0b:67:ee:07:79:c1:54:7a:31:71:bf:20:b3:cf:fd:ae:
f9:31:cf:ae:17:11:6a:46:fd:47:98:83:e2:2f:61:f3:40:e0:
3e:34:ab:33:2a:c1:ea:9d:8a:5f:9d:96:4d:84:b7:42:31:29:
d0:73:a8:3b:fd:82:89:0e:08:9c:68:d4:21:1a:63:0a:91:bd:
f1:f2:77:26:9a:44:6d:c3:8a:4e:1d:e8:33:56:4c:10:33:64:
d2:20:86:23:5f:fb:cb:56:f9:35:12:7c:b0:a4:e1:ff:5b:fe:
50:cb:33:6b:54:a6:c4:a7:05:41:78:da:1c:8b:4b:8a:46:67:
13:7f:c2:60:10:91:95:22:f3:09:5e:46:04:15:03:84:2d:16:
d1:f9:b2:28:dc:12:cc:03:46:d2:6c:df:b7:cc:7c:49:4a:7f:
a0:e3:6c:fa:64:18:4c:eb:ef:ce:33:2c:94:05:be:d8:ea:96:
9a:de:ca:45:41:0d:5a:85:99:a8:ba:49:7c:0d:f0:85:f9:51:
3e:0d:67:1b:aa:94:49:f8:20:7e:a5:80:2a:a0:b4:6a:5c:df:
8b:70:0b:49:ef:50:99:83:de:48:64:76:81:46:ac:b1:57:53:
79:57:51:79:3a:a2:d1:8f:9f:72:dd:12:64:41:5d:f5:9a:75:
91:7a:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:06 2024 by rpki-client on console-ams.rpki-client.org