Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: Jc0EE6rF+I9U9FGdSLSz1A5I1IQSmlvPANvBmIu2CHo=
Subject key identifier: 62:2C:24:46:FA:C2:C4:80:C9:5D:A4:16:7A:43:CC:1C:EF:52:FB:B8
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019356F67C7043603AE2CCA3AC569E5684D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 03:00:14 +0000
Manifest this update: Sat 23 Nov 2024 03:00:14 +0000
Manifest next update: Sun 24 Nov 2024 03:00:14 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: aX0judH2WIZNdawJPJSBCKfBlA8Q8pQ/HC9vyo0OX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:7c:70:43:60:3a:e2:cc:a3:ac:56:9e:56:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Nov 23 03:00:14 2024 GMT
Not After : Nov 24 03:00:14 2024 GMT
Subject: CN=622c2446fac2c480c95da4167a43cc1cef52fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:e7:d7:f9:7a:c4:27:9b:de:32:14:5d:06:
9e:4d:29:32:1e:3f:5c:05:67:f4:ea:da:01:95:3c:
66:cb:52:dd:92:d2:5a:9d:3a:ce:10:50:d0:9b:44:
82:d1:3e:44:d2:96:a4:ab:95:54:dd:39:44:c4:f8:
9a:ea:11:f1:25:68:c1:f7:94:c4:22:4b:59:26:b6:
ce:40:72:17:81:3a:36:e1:9f:b4:69:5a:79:76:8f:
c9:97:36:2a:0e:0c:59:53:55:ce:a7:58:ea:1c:88:
b4:18:6f:45:74:78:e5:10:78:16:30:a9:d3:d1:30:
a9:25:56:8e:f5:14:94:96:42:60:42:55:7c:25:50:
47:cb:2f:b7:01:83:9f:f0:b4:bb:3b:23:48:73:f9:
14:27:4b:a0:45:23:f2:5a:ae:5b:4b:cf:85:39:ab:
23:50:bb:57:71:1f:4d:a3:d1:48:4b:8c:2a:89:dc:
39:30:67:9e:c2:53:ad:d1:32:b8:7d:80:42:88:d6:
7a:e5:61:4a:0b:ea:6e:67:af:32:49:ab:83:8f:17:
46:11:99:ea:a1:36:5c:ad:3a:89:8d:ca:6b:4a:34:
ff:90:72:68:aa:b9:29:b7:7b:8b:37:fb:9f:c4:34:
28:c5:5c:ed:46:1d:2b:d4:64:34:e2:92:74:30:11:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:24:46:FA:C2:C4:80:C9:5D:A4:16:7A:43:CC:1C:EF:52:FB:B8
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:11:05:1b:6e:6b:1b:60:59:8f:84:dc:f3:da:78:58:2b:
5b:f5:dc:9f:76:ab:4c:f1:3b:00:b0:96:4a:9c:52:aa:1a:c9:
04:c7:54:66:86:86:bc:15:16:7f:91:78:dd:ef:e6:7e:6c:41:
f6:ed:4b:e7:5d:d8:00:c0:99:9c:8a:cc:01:a3:dc:f8:ff:26:
7b:b4:2c:2c:67:0d:ef:99:33:4a:8e:62:56:8a:87:5d:d5:97:
be:c3:32:b3:ea:be:f7:52:71:cc:a1:b3:8e:04:9c:93:e9:b7:
25:97:13:b7:55:fe:f5:94:e1:9d:b4:ad:41:38:53:01:bf:62:
54:a8:89:94:6f:b9:2e:46:b3:e8:74:24:e9:c4:4c:ae:fa:8f:
e2:d2:9e:49:dc:b3:e9:09:23:8a:59:93:ed:51:b6:da:3d:b4:
45:8a:87:68:83:89:ca:31:23:d1:85:66:86:99:74:ae:0f:42:
26:4f:fd:73:40:b1:29:51:f9:c5:5f:cc:5d:11:22:d8:dc:6b:
e7:12:a5:fd:5d:79:af:15:f9:e6:27:f3:ff:af:a6:7d:10:e9:
83:ac:8e:91:19:10:73:47:ae:65:08:4e:4e:87:73:1c:58:b0:
ea:08:77:7f:b8:e2:66:d7:3d:15:02:97:7d:11:1a:f2:a4:51:
8c:f0:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:22 2024 by rpki-client on console-fra.rpki-client.org