Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier: a7PgbS3hWOX1CXszKyRazGt0wjFX7Uh1XAX/ieTGUIc=
Subject key identifier: 13:3C:31:58:B4:0A:59:2A:73:FB:00:B4:BD:28:D7:D5:56:F1:B0:1A
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 0193568A166D11509242E5829138202ED859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:50 +0000
Manifest this update: Sat 23 Nov 2024 01:01:50 +0000
Manifest next update: Sun 24 Nov 2024 01:01:50 +0000
Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: ETKLe7Tq5pl/5avX9W/gUSzDz7lPJ2Y4OjZfY8Lrmog=)
2: udY2sbJt-uRqMVg-0S1_W1YwP3A.roa (hash: TutDCwnsEl0pUQ6XDxvpjMnfDS+Vt48gzzvIA4uZ5Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:16:6d:11:50:92:42:e5:82:91:38:20:2e:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Nov 23 01:01:50 2024 GMT
Not After : Nov 24 01:01:50 2024 GMT
Subject: CN=133c3158b40a592a73fb00b4bd28d7d556f1b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:60:fd:2c:3f:b1:96:92:a0:0f:c8:1b:c1:
df:ff:8d:50:86:71:c0:5b:ca:5c:b7:5c:c5:b8:00:
38:b9:c9:15:63:63:34:b7:4e:1e:58:3f:3c:b1:69:
3d:c5:65:4d:44:ad:a5:8f:0b:9e:a9:ea:91:34:c4:
cd:1b:a6:a9:a2:71:63:7d:93:69:6b:fc:f7:84:ce:
79:12:ab:2a:b6:f7:d8:43:16:c7:75:06:6b:81:df:
1e:82:88:97:89:16:5b:9c:77:ba:ef:a1:66:8d:f9:
be:75:ba:e3:c2:7a:43:3d:11:0c:82:68:b9:81:6e:
8c:9a:c2:ac:db:1d:e0:3c:81:88:d2:2a:04:ba:50:
29:f3:e1:2d:67:ea:46:c0:2a:8d:90:d7:95:65:1e:
ad:e9:9e:8f:30:4e:f9:25:25:90:c2:01:5b:4f:72:
6d:a4:f2:f1:27:38:29:26:ce:ef:74:48:8f:8f:24:
83:e8:5e:32:f4:2c:d8:eb:4d:2c:22:33:fb:2a:01:
b7:ea:35:07:12:c6:61:0d:02:05:0b:ac:86:0d:7b:
41:8f:1d:cf:d7:29:e9:94:ff:0c:83:50:df:49:89:
87:20:d5:ba:0e:21:fd:c0:32:12:b6:16:1c:79:1f:
16:61:5e:94:99:ea:fa:78:c0:10:06:41:6f:d9:e1:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:31:58:B4:0A:59:2A:73:FB:00:B4:BD:28:D7:D5:56:F1:B0:1A
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:79:83:cb:63:d2:97:9d:e7:46:cc:40:6f:84:ca:00:58:c2:
cd:48:bb:7f:79:3b:af:1d:a2:ba:5d:b2:20:cf:94:9f:8b:df:
e4:c7:4d:90:73:62:fc:4d:41:da:20:2e:b4:d2:98:17:8e:19:
99:b4:22:9c:1b:c7:36:b3:e7:a6:18:51:11:eb:53:ca:67:d2:
9f:d5:d8:77:84:26:95:cc:69:44:af:89:0f:0f:60:de:c0:f9:
02:9e:f6:2d:ef:c9:de:b0:09:a4:34:f5:f5:6d:e1:78:ca:18:
5f:ff:04:9d:f8:7b:75:9a:6d:fa:81:12:9e:5b:92:86:64:0b:
ca:cb:44:14:66:38:52:11:c3:4b:39:c4:46:66:f9:84:0e:a1:
f1:84:21:22:ad:a3:d2:e4:f9:eb:2f:2f:d6:46:8c:f3:7a:7d:
60:c9:c9:55:74:25:24:f6:04:a4:9d:1c:c0:31:7b:09:86:86:
61:c0:c7:d2:ca:af:24:d3:65:63:a0:c7:c9:a2:01:11:3c:d5:
87:1b:5d:ad:a5:3c:06:18:5f:62:f7:a0:ec:7f:01:2c:dd:9d:
b0:11:b9:27:62:ac:5a:05:e3:a4:46:70:a6:be:ea:6d:62:de:
9e:bd:f7:71:b9:07:d4:4a:b3:64:10:32:fb:85:16:a5:98:f8:
50:29:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:25 2024 by rpki-client on console-fra.rpki-client.org