Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: hi7JviPseuFSOoOuw2Agsd8+tj989+z3Qk4juOxhgCY=
Subject key identifier: 76:7F:BE:46:6C:53:48:22:BA:B4:47:EA:8F:B7:F6:56:A5:E2:8E:00
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01935877AFD9BB921F600A201AE9CCE90365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1252
Signing time: Sat 23 Nov 2024 10:00:58 +0000
Manifest this update: Sat 23 Nov 2024 10:00:58 +0000
Manifest next update: Sun 24 Nov 2024 10:00:58 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: pD+4B0bi9hK+xG7aPZHi68tsD4YsownYNNv2EM0yvfk=)
2: PCdukw-JvVX1FynLGOG3nN8ymx8.roa (hash: VUEmvkQZON+5usYPOzSWGJCQ90VypnHNjSOoSdjD46U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:af:d9:bb:92:1f:60:0a:20:1a:e9:cc:e9:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Nov 23 10:00:58 2024 GMT
Not After : Nov 24 10:00:58 2024 GMT
Subject: CN=767fbe466c534822bab447ea8fb7f656a5e28e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:7e:51:a7:3a:76:02:70:d8:f9:4d:f5:a6:
78:71:73:e5:3d:ee:66:92:48:ed:43:89:5e:f6:1d:
a6:06:67:0a:63:7e:e3:f7:70:a3:7b:fa:f5:7d:6d:
1c:d2:63:5a:c4:2d:95:0b:fb:da:a0:43:29:51:1b:
25:4b:9d:6b:04:68:59:28:dd:d1:57:16:fe:4f:78:
15:ae:26:54:23:6c:d5:d8:60:5c:ca:ec:1a:a4:01:
96:cf:01:19:c5:ff:14:b0:a6:7e:90:55:57:96:00:
83:97:e1:0f:cc:ec:0d:a0:6d:6b:50:4b:56:75:77:
e4:13:97:bc:82:37:67:87:e8:c8:23:a2:ce:b8:fe:
13:8f:55:4f:dd:4e:3a:ef:95:6e:4a:d6:87:5f:75:
65:20:5e:17:1c:e4:3e:02:ea:f2:12:98:2c:38:29:
ca:d2:40:94:16:96:58:bb:8c:26:90:2e:5f:42:10:
cc:13:55:47:84:d8:e9:b3:92:3e:92:1a:f8:c0:4c:
81:7f:75:47:fd:30:bd:22:7c:0f:2b:55:2c:df:46:
a7:20:eb:94:6e:fd:a2:ca:e4:36:c4:d2:6f:8f:9a:
f4:11:df:97:aa:02:16:e6:8e:0d:18:af:a0:e2:62:
57:b2:31:42:7b:a2:57:84:d2:91:2a:66:ed:2b:b2:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:BE:46:6C:53:48:22:BA:B4:47:EA:8F:B7:F6:56:A5:E2:8E:00
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:39:76:e9:98:9a:70:3e:e9:a4:04:95:a3:ef:a9:bc:a0:
4d:71:e4:7a:5c:68:c4:bd:36:59:82:ca:5f:38:64:12:46:d4:
6c:2d:d9:28:67:56:4e:20:d6:b8:b9:f3:94:da:f8:43:1d:9b:
9c:db:8a:c1:8f:17:1e:05:98:07:a4:99:18:f3:bc:3a:89:13:
3e:48:9b:e1:bd:86:ba:44:cb:36:61:05:59:e7:09:c6:f5:c2:
eb:66:ae:43:71:a4:f7:21:ce:ef:5a:5b:8c:34:b0:fc:ce:5d:
c5:76:9c:49:6f:3d:81:11:8f:e3:ea:e2:20:9a:40:ea:ac:41:
14:a2:17:c3:ee:e1:b4:62:e3:5a:f3:e7:9a:52:fe:a0:13:7f:
68:39:d0:62:cd:7d:c4:71:78:54:dc:0e:e9:07:fd:f3:33:b4:
47:7e:81:92:eb:cd:24:f3:32:e9:91:06:b8:ce:52:ca:e0:4f:
24:68:40:32:52:9e:b6:9e:d6:70:66:3e:0c:a8:49:43:fd:0c:
3d:66:65:e0:e7:7b:e6:bb:a4:47:3b:a8:24:68:50:ff:77:4d:
f5:91:6d:b5:7c:1d:89:0a:ec:48:7c:06:c4:bd:f2:95:77:81:
84:b9:af:3c:4d:af:f8:16:55:15:55:d3:cf:77:19:e6:17:1e:
a8:50:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:47 2024 by rpki-client on console-ams.rpki-client.org