Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 3dbEwIBLIQ+ulYQzKP5MMdTsL9dobGcukNAChwmUKIs=
Subject key identifier: 97:81:6D:23:FE:9E:61:A3:D0:95:25:54:34:A0:4A:77:B5:44:FD:75
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 019357D2B2348DE8DE6DC0FA00ED952C3C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 07:00:46 +0000
Manifest this update: Sat 23 Nov 2024 07:00:46 +0000
Manifest next update: Sun 24 Nov 2024 07:00:46 +0000
Files and hashes: 1: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: MsYlCg4ZRME9QPk/lMM4Yi3rVeWVln8EXyf5TVjgB1A=)
2: w0maLiytibCuE006Ei_urYqziCw.roa (hash: 1/15JI54wd3OZtFF+Rv+Npj8jebFpoagQ35e4Ghap+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:b2:34:8d:e8:de:6d:c0:fa:00:ed:95:2c:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Nov 23 07:00:46 2024 GMT
Not After : Nov 24 07:00:46 2024 GMT
Subject: CN=97816d23fe9e61a3d095255434a04a77b544fd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:2c:e3:ff:bb:61:bd:be:a9:b2:7c:d6:c7:
30:75:00:0b:d8:af:96:e7:b4:07:f2:dc:43:20:27:
b0:36:42:68:22:d0:f3:c7:32:c8:48:4e:ca:fb:4d:
ac:e9:19:01:2b:b1:9b:07:cd:7a:2e:6a:06:da:2a:
47:43:4e:0c:a2:98:9d:75:75:83:d3:b4:68:1b:f6:
e3:da:a9:ab:69:23:78:36:7b:d1:2e:69:20:56:42:
b1:a5:0d:68:65:85:cd:0a:68:0a:f4:ba:c0:e3:43:
9f:88:bb:a7:41:9d:28:70:9f:ab:c7:47:05:56:7b:
3d:1d:f1:7b:57:64:98:86:89:ef:67:2c:cd:1b:da:
9f:51:ab:98:e8:a3:ca:ee:84:2e:86:35:2a:6c:eb:
f8:40:04:73:75:ba:59:0a:4c:18:12:78:13:dc:4f:
92:da:1e:8d:42:86:78:cc:ac:64:98:21:03:aa:7d:
cd:56:06:5c:a0:85:22:d8:4b:f8:3e:cb:19:ee:2a:
3a:e1:aa:1c:4e:2d:7c:7a:38:ae:4d:91:fc:cf:b5:
e5:77:e5:fb:c2:49:5e:a2:18:d0:65:27:85:d3:a5:
e9:3d:24:11:32:2e:62:25:0c:e5:0c:3f:61:73:0a:
a4:e3:09:62:dd:8e:b5:03:82:a7:d2:fb:58:3e:be:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:6D:23:FE:9E:61:A3:D0:95:25:54:34:A0:4A:77:B5:44:FD:75
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:bc:54:90:eb:45:8c:7e:0e:3b:3a:f3:9a:ec:d6:51:f7:
a3:d8:59:dd:02:d3:19:90:72:66:bf:b7:3b:1c:95:6c:0a:9e:
9e:73:25:98:ab:77:36:1c:cc:e6:fb:df:c2:03:3f:55:c7:f6:
d9:10:93:67:a5:ed:47:10:d4:0f:c1:61:7a:fd:a3:cf:47:b4:
f8:34:4e:00:e4:f0:e2:46:38:e2:a9:35:20:d2:42:a4:f6:37:
c5:8a:c0:d6:e9:26:fc:68:49:c8:0c:54:bd:e2:8f:4e:cf:49:
39:2f:c7:0a:e1:4f:8a:e5:d7:85:7b:e4:01:a2:2c:25:5a:ed:
60:6d:b8:ae:99:7a:c6:61:bc:3b:49:08:50:a3:97:82:75:bd:
be:96:1f:5f:41:f3:ab:28:00:a0:42:49:1e:dc:1e:d7:fa:7b:
54:f8:b6:c4:70:89:ea:a5:89:60:90:5b:fe:ca:0d:0a:ab:d7:
83:27:e7:36:b1:29:6e:7a:d7:8b:0d:a1:1d:78:be:c8:34:9c:
67:b9:7f:35:16:71:8a:af:13:51:45:f6:a7:e8:1b:05:13:35:
c5:6d:4e:1d:c7:02:ee:d5:91:a2:1f:13:36:8a:3f:34:fd:be:
3c:8c:7d:42:01:cd:78:e4:62:5e:70:bc:04:5a:6d:9f:97:a5:
b6:ce:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:31 2024 by rpki-client on console-fra.rpki-client.org