Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: bp4aPEO/Gb1Fh0L4WllJXyOckRxheE63l0U+JhEJyEw=
Subject key identifier: A2:D7:4C:93:6D:A2:26:00:6A:7D:2B:08:40:A0:57:BA:E8:86:D6:33
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 01936BC8FDAF35BC2DD516E4583D4DEE9E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 04DA
Signing time: Wed 27 Nov 2024 04:02:34 +0000
Manifest this update: Wed 27 Nov 2024 04:02:34 +0000
Manifest next update: Thu 28 Nov 2024 04:02:34 +0000
Files and hashes: 1: g9iebDI-mUxz5x8NF8Eb1vWfFB8.roa (hash: jZPerGGBtxVY6b8fozmUX2EkYA+3OvgP0zX7L30nMYs=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: ELvPFle4ek50CFyRk/GSVzUpAOkR3YN9XZih0xHKWew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c8:fd:af:35:bc:2d:d5:16:e4:58:3d:4d:ee:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Nov 27 04:02:34 2024 GMT
Not After : Nov 28 04:02:34 2024 GMT
Subject: CN=a2d74c936da226006a7d2b0840a057bae886d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:dc:4f:16:46:c0:66:0a:06:c3:d1:6a:9c:
82:66:98:d9:4c:fb:42:6e:69:a1:96:d6:d5:93:7f:
5a:d3:f8:e1:4d:d6:24:f4:35:ff:55:d0:8b:12:e0:
e8:30:55:8f:14:3d:b7:6f:69:e9:fd:08:30:c8:03:
26:d9:c8:b1:f3:b0:42:0b:0b:b5:74:62:1a:84:ba:
4a:de:49:5b:87:80:52:6a:b6:13:4e:5a:b2:ba:18:
aa:e5:aa:cd:7d:57:a6:14:0d:2a:a0:f8:70:d4:bf:
97:f6:09:b8:47:a1:87:4b:7f:3c:b9:3c:bf:2d:75:
5f:04:bc:83:25:34:dd:7c:4f:63:57:b3:9b:9a:d0:
06:2f:27:73:54:07:c3:b5:5a:b3:54:ce:7f:80:58:
d2:dc:6b:79:8e:7f:e9:02:4b:1b:d2:3b:37:e4:e9:
de:6b:3f:0e:bf:70:1a:c8:bb:f9:6f:89:ed:c4:01:
bc:0d:ef:bb:2b:6c:62:9f:25:3f:a2:d9:72:e6:3a:
b8:c3:d4:ff:0a:d0:de:a4:33:9b:c4:ac:1e:70:84:
fd:c6:c8:ae:e0:5e:65:3f:1f:a7:91:c9:e9:51:21:
4f:66:39:7b:c4:34:07:fa:41:e0:4d:98:06:c1:ea:
e0:57:5b:64:7e:26:b5:71:28:3a:55:a4:9c:f5:4b:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:4C:93:6D:A2:26:00:6A:7D:2B:08:40:A0:57:BA:E8:86:D6:33
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:0c:9c:d3:bc:ec:d1:99:70:1d:6a:7d:a3:f2:76:aa:37:
c0:b5:65:80:dd:8b:32:bf:b3:50:a0:4b:42:5d:78:33:a7:ea:
e4:cb:fa:5f:7f:41:d4:9a:1e:51:be:ad:f2:30:78:86:8c:e3:
1f:58:67:6d:3a:97:73:3c:c0:78:4b:0c:c5:20:82:08:de:53:
60:e4:be:62:a6:49:6e:0b:b5:7e:a3:5b:92:bc:ba:75:71:79:
05:06:70:57:f0:b7:47:5c:0c:a2:b3:a2:96:ce:a2:00:eb:9c:
fc:13:ad:d9:27:d7:37:45:79:48:fc:93:e8:35:5a:54:1b:40:
7b:38:a4:61:f7:0b:fc:17:60:39:37:9d:9a:06:4b:bf:c4:68:
3c:93:d8:f2:5d:08:90:7e:be:5f:60:a1:c9:1b:15:2f:d3:cd:
9c:b6:31:50:69:fd:7d:9e:55:e4:e2:8f:e7:b1:d8:ac:e5:21:
e4:f0:3d:5c:4e:fc:e1:90:dd:a0:b3:a1:c0:05:c0:89:a4:37:
9a:7d:7d:6e:38:4e:de:50:9b:81:2c:17:51:3a:24:1b:90:db:
2e:7f:ed:f8:b4:16:e8:7e:c8:f1:ed:5f:c6:7f:86:02:37:ac:
dd:f6:f3:9e:0f:3a:3c:04:b6:a9:24:4a:38:10:ea:11:3d:50:
1f:44:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:00:12 2024 by rpki-client on console-ams.rpki-client.org