Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: wqCD8rUJMEUIpl8t3YfKZZePaJwFaBkkLFYJN8adVes=
Subject key identifier: 02:0F:F1:A3:1C:C1:50:CA:EE:87:E0:58:6D:80:AB:2A:E5:08:8C:B2
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 019357D2E78F56FF8CDF2FF8D262A639F2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 0B30
Signing time: Sat 23 Nov 2024 07:00:59 +0000
Manifest this update: Sat 23 Nov 2024 07:00:59 +0000
Manifest next update: Sun 24 Nov 2024 07:00:59 +0000
Files and hashes: 1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: lnLv0gJoUcfOu7KrOnAmqZS0SYuAZ5PLnd2jIw3bhaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:e7:8f:56:ff:8c:df:2f:f8:d2:62:a6:39:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Nov 23 07:00:59 2024 GMT
Not After : Nov 24 07:00:59 2024 GMT
Subject: CN=020ff1a31cc150caee87e0586d80ab2ae5088cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:69:d8:3f:e5:e4:7d:aa:ca:69:74:27:ee:
1b:52:7b:5d:40:9b:85:df:ed:7d:e0:8f:51:e6:78:
14:13:a0:e1:76:b8:15:7e:89:79:f0:43:72:48:63:
39:22:e5:55:13:00:99:59:cb:ec:b9:ae:b6:94:dc:
61:59:a5:91:db:97:54:ef:d2:2d:93:8f:41:4b:95:
07:a0:a7:e9:e0:66:7b:3a:d3:ff:c7:a0:8d:75:3b:
b8:ee:6e:3f:d7:a0:40:d6:44:1e:38:96:6e:df:9e:
b5:2e:0b:d7:a6:6e:02:81:6d:95:39:62:e4:e0:ce:
76:e9:da:0c:98:4a:fa:82:f0:70:fc:fa:e9:10:da:
db:1e:f7:b6:3d:c5:70:52:a5:56:fd:23:11:c2:13:
b0:ad:55:49:ff:69:6d:ae:17:4a:04:7b:cf:1d:e6:
b0:7a:c9:f1:f5:7d:10:76:b3:08:c5:62:9b:3d:26:
75:58:1f:a5:89:5c:a2:1d:bb:09:23:f8:3f:63:ae:
04:60:48:af:d4:69:d3:b0:23:54:4a:88:13:f1:23:
c8:7e:04:7d:30:a6:a6:fd:be:92:89:a4:8b:0a:73:
9d:a4:5c:66:48:9a:a6:2f:0a:34:9a:29:c5:9d:62:
da:af:b3:ce:6f:1c:59:7a:9c:ce:38:77:5a:11:d4:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:F1:A3:1C:C1:50:CA:EE:87:E0:58:6D:80:AB:2A:E5:08:8C:B2
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:a3:68:8e:07:c0:3d:a8:6e:d4:bb:b8:83:93:ff:60:4f:
24:99:6f:a9:95:ab:27:ba:01:6d:5b:6f:b5:2d:70:aa:82:4a:
28:b0:73:61:32:33:02:3c:be:91:bc:65:7d:9e:b2:ca:df:2d:
fd:ba:21:41:14:1c:2d:07:77:1f:42:5e:64:17:5d:0d:42:5d:
36:86:7c:0c:ef:66:a2:5e:43:f2:31:3e:5a:01:44:3e:cd:e3:
cf:99:48:89:ae:8b:21:3b:07:4a:f1:84:86:a7:7e:f6:b0:d8:
56:bb:5c:60:ad:f1:46:78:8d:0d:cf:57:f3:d9:8f:09:03:44:
af:83:26:36:1a:b0:41:63:8d:8f:b3:dd:f4:de:c7:df:01:8f:
41:e1:23:36:14:a9:db:4b:09:e1:f7:bb:77:f7:8e:76:c7:2c:
51:fc:60:b5:4a:55:65:c4:3c:73:6b:c6:f7:ac:a8:ef:2f:2d:
1a:27:86:14:66:d7:35:77:c5:3a:09:f5:8e:67:0b:91:63:49:
f7:07:5a:ab:40:36:2c:08:63:c6:ff:14:a8:ea:46:b2:46:36:
b8:5c:fe:46:07:79:38:ef:df:1d:5c:5b:01:47:d5:4a:5d:b4:
44:4a:ac:60:52:1c:6d:4e:76:e4:62:6a:7b:14:76:db:e0:5c:
f9:68:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:38 2024 by rpki-client on console-ams.rpki-client.org