Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: 3ROXTMvyIfwumQI6iYw3kQIKwtAd+IHmqL4zQkjQZRU=
Subject key identifier: F4:75:E3:71:81:19:5B:E1:5A:78:E9:9F:71:B4:99:D9:4F:69:98:5D
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019355E457BEF729A16A4676E9ADD5978471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 0449
Signing time: Fri 22 Nov 2024 22:00:48 +0000
Manifest this update: Fri 22 Nov 2024 22:00:48 +0000
Manifest next update: Sat 23 Nov 2024 22:00:48 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: TPvFjWmtkydil//AfmvhlcDWPsa7XHq8FpGr/dOPbFg=)
2: am8hP4m0ND60Md7Nwew3bygO_KY.roa (hash: aRBGzYoECmVPIYmKOBs+x+eQMCfDNaC/NgoP29UC/no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:57:be:f7:29:a1:6a:46:76:e9:ad:d5:97:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Nov 22 22:00:48 2024 GMT
Not After : Nov 23 22:00:48 2024 GMT
Subject: CN=f475e37181195be15a78e99f71b499d94f69985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:c9:1f:cc:f7:2d:2c:ec:73:cf:d4:a7:97:
33:3a:43:d7:dc:02:9a:d1:72:3f:dd:29:41:d8:87:
8c:7a:ec:9b:14:de:f1:c4:e4:0a:7a:2d:3f:09:c3:
14:22:36:f8:56:b8:aa:9e:35:b1:f7:8f:1c:f1:c3:
fa:8e:0a:93:67:39:b0:70:b3:a7:44:f1:9d:98:b8:
ee:e7:14:f5:71:6d:59:01:1a:bc:ff:97:3d:f1:05:
b6:76:9c:ca:6e:34:f0:ca:9e:2f:16:60:f1:cb:bd:
81:23:96:b8:7f:f6:61:1a:2f:e2:d9:87:b8:30:cf:
1e:77:e1:6b:af:ec:45:21:c4:d3:be:a4:53:11:a8:
74:f2:b7:45:82:24:5e:a8:9a:1b:b6:6b:4c:dd:d1:
b0:18:64:4c:f1:58:63:1e:b5:ca:29:cf:02:e9:a4:
c5:3a:ef:b5:42:d8:26:93:df:f4:e2:60:ac:f7:ee:
48:2a:67:31:d7:d0:2a:d2:b0:f3:42:03:72:5f:26:
db:80:a8:c4:5e:c3:8e:21:6e:3d:21:fc:8f:9b:3d:
0d:0f:21:f1:4c:a1:ba:17:92:18:f9:92:ad:44:ea:
8c:66:48:85:a8:77:49:1d:49:85:52:24:30:73:04:
ab:24:f0:e1:d9:63:aa:41:a2:e8:1b:c1:ef:c0:da:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:E3:71:81:19:5B:E1:5A:78:E9:9F:71:B4:99:D9:4F:69:98:5D
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8f:cc:84:bb:96:b9:f4:60:41:c9:6f:61:79:9d:e8:81:e0:
32:63:d9:16:32:1f:5b:36:71:db:64:05:6b:fa:db:8c:bf:73:
8b:56:96:1b:26:1b:69:61:e6:ab:9d:55:f7:25:a6:75:cc:98:
f6:34:5a:2e:05:17:4e:a6:76:32:49:05:77:d6:f8:23:79:20:
4b:35:bc:b3:88:14:48:ef:54:67:57:ab:78:fb:c1:a8:d2:a0:
dd:0c:29:df:8d:d8:ee:eb:60:ce:aa:8b:71:a5:6c:45:a0:e4:
ff:24:23:82:79:3f:33:75:39:3b:ad:35:d7:d3:b1:da:2d:2d:
85:27:4a:25:78:42:91:c9:ce:b7:b4:7b:2b:1e:98:17:7f:ed:
26:63:83:70:95:be:45:34:fb:65:80:b6:15:8f:01:a9:d9:cf:
7f:99:6d:04:60:f8:b4:f2:30:a5:28:f3:64:4d:bd:b8:13:36:
60:9e:6a:be:45:5d:1b:ef:c6:45:f6:7a:e7:46:5b:d3:e4:cc:
3a:f0:64:f6:b4:ce:30:fe:57:bd:6f:d8:a1:dc:3e:72:63:aa:
7d:e7:1a:a9:b4:dd:f1:f0:13:69:90:48:11:dc:77:3d:d0:fd:
8d:8e:2c:b9:53:04:ba:ef:76:0c:67:a1:80:95:a4:d9:9e:2e:
e7:9b:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:37 2024 by rpki-client on console-ams.rpki-client.org