Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: eqgDX1bKCjU2+X3dMw/e8JqjaGIQDhQBLrjaVNWM1vY=
Subject key identifier: DC:85:00:87:F7:F1:71:66:41:0A:B5:89:6A:4C:F3:13:0C:A6:ED:38
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 01936B2252EDB55B4CFD8F55CEC47CBE3E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 100D
Signing time: Wed 27 Nov 2024 01:00:31 +0000
Manifest this update: Wed 27 Nov 2024 01:00:31 +0000
Manifest next update: Thu 28 Nov 2024 01:00:31 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 2i1ukHW7deTN8IYeLsmjkSPF1XuM3JXhpbNtqYwmXM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:52:ed:b5:5b:4c:fd:8f:55:ce:c4:7c:be:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Nov 27 01:00:31 2024 GMT
Not After : Nov 28 01:00:31 2024 GMT
Subject: CN=dc850087f7f17166410ab5896a4cf3130ca6ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:d2:07:9e:d9:af:a0:a6:71:10:e2:6f:41:
58:2f:cb:cc:d7:65:83:8a:2e:37:a6:b5:0d:74:48:
cd:e5:f7:bc:96:6d:93:a3:21:f0:4c:74:ce:2f:f7:
20:05:01:0d:55:bf:59:7f:6a:fc:8a:9e:f3:f2:7d:
21:b5:08:66:a5:61:f4:d0:98:1b:ca:e4:5d:b8:a2:
84:7b:31:56:ef:4c:3c:da:fb:ac:d6:15:c8:d5:e3:
0f:0c:fb:86:c1:e6:cf:91:c2:c9:d8:14:bd:95:3a:
73:b2:1b:9f:59:63:c5:57:31:fb:4d:f5:2d:ba:e7:
d0:15:24:12:14:c7:1e:28:a6:b3:e8:87:dc:fe:bf:
cd:a8:90:0b:46:64:49:af:03:df:8e:3d:c6:d7:25:
c0:bf:ac:55:68:74:fe:05:ae:53:6e:30:e6:8a:3b:
7a:14:f9:3f:33:de:01:f1:b2:c6:14:1c:a4:00:0d:
ec:e8:9b:a7:44:4a:33:3e:df:c6:09:39:43:c8:13:
44:4d:23:e8:1e:17:67:49:a8:04:89:a6:59:11:1e:
48:c5:7f:4a:78:6e:ca:5e:17:fe:dc:90:52:de:c7:
f1:54:a7:d8:c1:a5:cd:22:7c:52:d9:b8:c6:62:a0:
5e:1d:6d:a0:f2:c1:90:1e:d3:85:ad:d3:18:3f:ec:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:00:87:F7:F1:71:66:41:0A:B5:89:6A:4C:F3:13:0C:A6:ED:38
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:e9:17:59:90:7b:e1:78:59:4e:16:82:4c:a7:9b:4f:81:
86:5c:0b:29:70:cd:13:61:92:d3:b7:ff:74:a3:08:15:a8:79:
a8:2c:5c:2b:eb:25:1f:98:c0:80:32:22:64:e7:39:8b:35:f7:
32:47:4a:be:81:f1:c5:eb:00:c7:29:a5:98:4e:b0:47:b3:bf:
e9:41:f1:b4:d6:fb:81:f1:6a:e2:d6:ef:3c:f0:d3:3e:9a:14:
f4:3d:7a:d1:60:50:e9:df:a3:45:f6:cf:ca:83:4c:87:a0:3a:
60:53:a2:7e:cf:3a:c4:30:0b:61:0a:59:7f:41:40:ee:3c:83:
9e:a8:ad:ec:bc:02:5d:ad:01:e9:38:94:6e:f1:3e:d7:06:85:
0d:40:f6:40:b4:c7:fc:39:0d:68:d4:86:ae:01:f6:85:42:49:
db:29:ab:90:f2:42:8a:07:f8:55:ef:ab:5c:c1:4f:f5:dc:79:
36:85:03:04:86:a1:06:6b:61:37:ce:dc:75:2a:2f:df:83:6d:
94:a3:77:79:48:42:80:6f:c8:60:7a:09:6d:a3:6c:f8:bd:49:
94:07:31:06:60:4e:b8:76:53:28:c7:32:8d:64:52:80:1c:52:
5b:97:ae:cc:3b:77:53:b9:85:70:4e:ed:19:c3:18:9d:76:78:
61:f8:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:42 2024 by rpki-client on console-fra.rpki-client.org