Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
File: MyKga0bwavI_geFYiJUKNgY-vNk.mft (raw, json)
Hash identifier: CLaLPfJ/8TKeXxfId3SngHoMe2zbQMv0JXY4gPn3d8g=
Subject key identifier: 65:B1:50:40:EE:13:77:F5:35:B7:D1:C5:81:98:2E:C1:E8:32:31:C7
Authority key identifier: 33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
Certificate issuer: /CN=3322a06b46f06af23f81e15888950a36063ebcd9
Certificate serial: 01935508C98F3FA1CEEB64F87E8F802D1644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
Manifest number: 1033
Signing time: Fri 22 Nov 2024 18:00:59 +0000
Manifest this update: Fri 22 Nov 2024 18:00:59 +0000
Manifest next update: Sat 23 Nov 2024 18:00:59 +0000
Files and hashes: 1: MyKga0bwavI_geFYiJUKNgY-vNk.crl (hash: SCu9h2EVNOxgbT36OnqwjZKXGWiNogCGgMq7CnIsi/Q=)
2: nX2385KcCQLZXSrlpPPerBCcSMU.roa (hash: AV4G0N4RXdLiN9fEZjV8s4fnNsK6aIoA3Lwva+2vcck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:c9:8f:3f:a1:ce:eb:64:f8:7e:8f:80:2d:16:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3322a06b46f06af23f81e15888950a36063ebcd9
Validity
Not Before: Nov 22 18:00:59 2024 GMT
Not After : Nov 23 18:00:59 2024 GMT
Subject: CN=65b15040ee1377f535b7d1c581982ec1e83231c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:55:4b:16:19:5a:b2:72:da:54:9a:c3:aa:
ca:f0:c0:d4:79:fe:c5:3c:f0:e2:a0:e6:f5:1a:1f:
5c:de:42:19:99:f7:57:f1:90:b2:a7:cf:f2:13:3c:
9e:28:36:e3:14:f4:21:b1:34:b8:c1:6b:cd:f1:40:
e1:d6:e6:d8:66:34:c9:66:13:cf:37:7b:69:cf:70:
65:8e:18:c1:3c:c6:ef:e5:e4:40:b6:5a:c3:78:71:
9f:77:e5:f2:fe:ec:8c:f2:e8:66:00:dd:ac:71:a2:
81:a5:f7:f0:c7:64:e3:f3:d4:4e:b5:1c:e9:56:33:
53:86:39:8c:14:ce:e4:3d:ca:c1:24:ee:68:70:bb:
1f:ea:f8:b1:af:00:bd:0f:db:de:34:38:59:88:f4:
a8:02:9c:cc:b0:ad:8c:bd:0c:02:ba:d4:fb:12:bd:
99:1e:10:7e:3a:95:3a:c4:51:75:93:23:df:cd:37:
2b:94:34:74:74:f8:1e:27:23:2f:1c:75:3d:10:ad:
41:59:c3:8e:f2:71:93:84:42:72:f8:e5:d4:24:b2:
08:0f:55:1f:d1:1d:9d:d4:fd:16:06:31:2f:bd:9a:
7e:b2:fc:5f:fb:c2:ea:63:b2:76:17:69:b8:0d:9b:
c7:51:12:72:6b:9e:7f:23:ff:f4:73:72:e4:f9:f1:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:50:40:EE:13:77:F5:35:B7:D1:C5:81:98:2E:C1:E8:32:31:C7
X509v3 Authority Key Identifier:
keyid:33:22:A0:6B:46:F0:6A:F2:3F:81:E1:58:88:95:0A:36:06:3E:BC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKga0bwavI_geFYiJUKNgY-vNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03282e-0208-4df7-83ce-69cf3ff2c36a/1/MyKga0bwavI_geFYiJUKNgY-vNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fd:da:bd:1f:aa:f2:67:8e:e3:ba:29:b3:fa:ff:8a:da:9d:
7b:42:14:60:e1:b1:f8:0e:81:71:89:13:7b:68:d1:43:4f:65:
fe:fd:26:77:0b:a3:aa:2c:f9:6e:8e:10:a1:e2:47:10:38:2a:
08:31:57:4d:4a:8f:7d:a5:21:be:65:e4:d8:a1:74:1d:65:5a:
bc:81:8a:54:ed:21:8f:5e:ba:19:d2:e7:74:90:b5:6b:92:ec:
19:45:ff:13:e3:b5:af:c5:93:14:66:d6:74:7e:f1:3f:c1:54:
2b:36:3b:3f:14:21:90:92:3f:c5:9e:6e:43:b2:d5:f7:43:b4:
e8:82:56:b7:16:cd:99:80:ad:b0:b6:c4:35:b8:bb:6f:09:f0:
4a:d2:e7:55:78:22:59:7b:55:f0:a4:68:bd:9e:4c:30:3e:b1:
bf:ab:39:6c:7e:72:ec:6b:88:d9:ed:e6:4f:19:b4:17:de:ac:
33:14:96:69:85:21:a7:15:7a:b2:ce:ab:fb:cd:09:1d:e0:c5:
89:68:eb:d4:a1:bd:d3:91:10:ae:0b:50:d5:e1:29:23:d8:e7:
29:34:2a:c6:a8:d1:39:2b:88:49:61:d1:e1:65:a7:c3:dc:6c:
c8:2c:e1:e0:3e:87:b2:ae:e5:19:d3:0f:d5:4f:7c:c3:73:68:
3e:fc:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:01 2024 by rpki-client on console-fra.rpki-client.org