Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: lCd3OZvXq8c6kFdLq4/tCbw1URfiUNgO6OG2BS1nSmI=
Subject key identifier: 11:56:E9:51:E5:20:36:8D:46:70:DE:63:68:37:00:70:AA:C5:7A:18
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 019356F72EE4ACF06E789B0BD47220513420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 03:00:59 +0000
Manifest this update: Sat 23 Nov 2024 03:00:59 +0000
Manifest next update: Sun 24 Nov 2024 03:00:59 +0000
Files and hashes: 1: 1-ogiMYdUwhA3NbLbzLbslTn5lvo.roa (hash: mmr83i53+H6V6akCFDy9o8e9MzuIooFMGwSh3G9uLs0=)
2: D83icq4Y-22TLbd4uxl-PGrKfq8.roa (hash: cUw5VC6bbIxB++KvaTJzVREi6M9YA6aXwQHf9YV849I=)
3: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: gPbxsyt6h4VHoosdJJeXGA5BGITbUtaVvUkOI3xDn1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:2e:e4:ac:f0:6e:78:9b:0b:d4:72:20:51:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Nov 23 03:00:59 2024 GMT
Not After : Nov 24 03:00:59 2024 GMT
Subject: CN=1156e951e520368d4670de6368370070aac57a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:00:67:2d:ea:04:6c:79:db:ee:72:cb:6c:
52:1a:a0:6e:6a:cc:7e:50:a9:6b:f8:27:ba:fb:9b:
cc:50:9b:58:c8:1c:11:eb:a7:f6:c1:d1:bc:f6:d9:
b1:03:9d:c8:cb:77:05:ec:fc:43:18:55:91:3e:0f:
64:5d:6e:12:43:06:96:84:bf:0b:8b:1e:5c:54:a1:
e8:79:ab:3c:ab:5c:9b:ed:e6:f5:e8:1b:a9:b8:2e:
58:ca:15:b8:30:00:46:f1:28:b7:45:fb:48:a5:db:
b0:2e:d4:72:2b:78:c0:cd:c0:08:e6:84:5f:56:b1:
17:f0:00:51:16:9e:09:39:f7:f0:b8:de:66:1d:12:
ce:4c:44:ef:25:39:b9:fe:4b:c0:a7:78:08:4a:61:
8e:d8:da:90:10:94:1d:80:64:98:43:b3:c4:63:24:
04:a9:38:88:07:72:d5:67:6c:ad:6a:24:df:1f:59:
10:af:31:91:29:b3:bf:8e:59:2e:10:43:7d:34:e0:
52:ea:0a:dc:bd:8a:6a:9e:9d:3f:41:a7:15:d1:cc:
fa:94:aa:c9:0e:74:3e:30:cf:61:a7:f4:ef:37:60:
ed:cf:45:a7:22:84:a6:d6:73:5a:0c:93:87:ae:7c:
27:b3:3c:4a:cd:56:c2:45:95:7d:5b:7e:aa:bb:b1:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:56:E9:51:E5:20:36:8D:46:70:DE:63:68:37:00:70:AA:C5:7A:18
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bd:2d:6b:04:20:9f:93:33:3d:0c:f1:ca:9d:f3:d7:18:d2:
d5:eb:bf:d5:a2:f4:cc:79:2a:5e:b9:ad:05:77:bb:d5:28:70:
ab:31:2f:d3:dd:2b:7a:0b:ca:ef:fb:f0:94:29:b2:68:55:39:
32:8b:1f:16:59:6d:e7:48:56:4a:4d:d0:e3:16:1b:b4:a2:55:
be:ec:75:40:33:b1:87:68:4e:bb:8e:1a:a6:f7:b4:33:4e:ea:
60:45:93:c1:1e:01:a5:52:95:d1:19:49:b3:e0:a6:e7:d6:e2:
02:6f:ee:70:17:48:47:84:1a:8b:22:63:5c:27:ff:f8:64:a2:
1f:43:72:a6:86:2e:43:07:ce:d8:fd:51:a2:37:28:81:ba:17:
83:cb:c9:8f:e2:b2:9b:ab:52:61:1a:78:dd:dd:4b:18:7a:76:
54:c4:fd:62:18:9c:88:3d:70:39:0c:f0:bb:60:e5:f2:85:24:
85:b0:87:16:c6:79:a8:d0:de:43:c5:57:88:be:f3:05:33:70:
ef:b2:2f:92:1f:f7:d0:48:30:bc:5d:7c:39:d6:c5:70:7c:15:
e8:fc:26:b1:fc:ec:6d:45:dc:d8:bc:64:fc:00:27:a7:1b:62:
8a:97:d3:a6:f6:36:8e:14:31:9b:e0:c6:36:14:35:41:3f:e4:
58:59:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:28 2024 by rpki-client on console-fra.rpki-client.org