Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: kns1IHd0kP6WmEPlVMh0yg/AvJbWyOo8FDeYubIQqv4=
Subject key identifier: 9D:67:96:3A:A3:6C:75:F1:6A:17:6E:36:0F:06:5D:B0:EA:3B:3A:37
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 019352AE2AE9BD49DD123D6A0BBD196AFA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0A40
Signing time: Fri 22 Nov 2024 07:02:46 +0000
Manifest this update: Fri 22 Nov 2024 07:02:46 +0000
Manifest next update: Sat 23 Nov 2024 07:02:46 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: ZAGvkxb108Jx4KtRuWR7w1RGtuhEHnU1gM7BPPC8U74=)
2: hAfbQOX5TITFcttqIul2Xgit7Wc.roa (hash: 0Eb6W8xJTJm4DqH7xVOV0U3FrbtfkdB1sFAnG7qW3fg=)
3: yCvmEb_k9jqfpmxKScsdu0ukXQo.roa (hash: STE6R8LxRHdLstxqSGEOZBWnOgMySPMmqMZCSShLv8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:2a:e9:bd:49:dd:12:3d:6a:0b:bd:19:6a:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Nov 22 07:02:46 2024 GMT
Not After : Nov 23 07:02:46 2024 GMT
Subject: CN=9d67963aa36c75f16a176e360f065db0ea3b3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:bd:bf:13:01:bd:5d:f8:56:27:30:58:a5:
b0:d4:6d:c5:21:a1:56:c9:74:84:ed:92:51:f1:a8:
21:1c:86:d0:f7:56:44:81:e6:e3:be:99:1c:c5:bf:
e1:07:72:cb:ea:8f:0f:20:6b:ef:e4:4a:ac:24:b2:
0a:eb:35:58:75:d7:08:34:54:4c:bd:03:f7:9e:1e:
5b:e5:49:58:9e:8b:92:20:69:9b:75:84:26:e8:36:
98:56:f0:2d:bd:83:ed:e7:1f:34:12:7d:f2:90:24:
ca:15:86:4c:ce:35:67:34:58:4a:c6:4b:16:a6:77:
77:fd:9c:08:cd:23:5a:fd:38:54:d0:eb:2d:f0:0e:
37:91:0d:f0:82:c9:42:b1:5d:89:ea:95:32:4f:c4:
98:ea:b9:96:10:e0:05:70:a3:4c:8c:72:a7:53:b6:
b6:89:d2:5b:d1:53:4b:40:76:7e:8a:e2:b5:3e:6b:
cf:18:12:65:df:d6:59:69:9b:c7:0e:2d:bb:24:90:
71:3e:60:ff:49:85:c2:57:f2:b0:b5:2e:67:d1:a4:
a8:69:11:f1:6f:2e:1d:d4:81:57:a9:29:6b:52:2c:
ae:a6:e3:68:58:f4:06:12:68:61:d4:68:4d:b9:fb:
58:6f:4c:ec:a2:91:f1:b2:63:68:47:94:f2:28:f9:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:96:3A:A3:6C:75:F1:6A:17:6E:36:0F:06:5D:B0:EA:3B:3A:37
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:60:05:a8:88:19:18:ac:30:f3:b8:e6:bd:3c:df:6d:07:ab:
36:b2:83:dc:57:34:57:ce:d6:c4:ef:0c:8d:50:9a:01:b1:61:
3b:e2:fa:2d:de:67:25:6a:d2:8c:e5:ae:88:5d:ee:e8:b6:44:
4c:6e:df:02:7d:51:02:d5:b5:d8:84:06:0f:7f:32:df:7c:03:
69:1d:91:0b:a0:3d:5f:3b:9e:2e:7f:c9:aa:5c:bb:96:33:b7:
e0:f0:b6:5f:de:88:59:2a:15:f4:b2:c1:c4:c1:3e:09:4a:ff:
f0:46:94:41:81:65:c2:dc:34:60:7b:8e:79:24:e9:7c:dc:52:
9a:92:f4:e5:79:5a:41:03:00:8c:51:ea:b6:3d:7d:c3:04:a0:
c6:0d:a9:0b:86:5a:32:f9:f3:22:a7:95:9b:3c:8c:d9:76:8f:
0c:3b:e8:03:14:31:89:58:56:b2:6e:df:cc:a3:31:25:c3:03:
03:16:61:54:3d:f8:95:e7:2b:11:cc:ad:79:d9:77:85:64:83:
c1:6f:6f:4b:2c:fb:4b:35:00:56:9c:d3:1c:f3:23:bf:b2:b3:
56:af:77:c3:60:60:a4:17:5f:7e:97:7a:e0:5f:95:8f:94:18:
ee:cc:23:16:bc:1d:e9:00:d3:69:f3:8d:00:36:8b:f3:c9:18:
df:e0:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:43 2024 by rpki-client on console-fra.rpki-client.org