Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: B9fhNnovRCBS1snB+ah4WyqTgKusDWM21rAy0yubegw=
Subject key identifier: 3E:17:66:53:AE:96:2C:E3:52:F6:07:8A:DA:B2:D2:06:ED:BD:C2:E3
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 0193584030392C0FF10660DDCBCEA0EC0A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 09:00:21 +0000
Manifest this update: Sat 23 Nov 2024 09:00:21 +0000
Manifest next update: Sun 24 Nov 2024 09:00:21 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: gK1GlLRNtsgZNnNadEKFcK0MPklFzpy9B4q65QYFnpw=)
2: tdLkRsWrS9fMjkASVL6QS25G53Y.roa (hash: SE/oRzq3URYvs6LUcUBnZoqQZfiX1NqwE7KJvkFsZm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:30:39:2c:0f:f1:06:60:dd:cb:ce:a0:ec:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Nov 23 09:00:21 2024 GMT
Not After : Nov 24 09:00:21 2024 GMT
Subject: CN=3e176653ae962ce352f6078adab2d206edbdc2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:5f:f5:0e:15:54:dd:4c:c5:24:b6:81:33:
ac:04:96:0b:cd:e8:12:5d:2a:8e:0c:5a:72:e1:f5:
1f:c6:62:fa:1d:55:5b:cd:ea:29:d6:34:0f:fd:6e:
06:b3:33:06:81:0a:97:96:c5:09:48:3b:e9:f1:70:
a4:12:35:31:21:dc:91:a2:3a:41:6f:93:80:3b:25:
60:d2:25:7c:dc:02:50:18:b0:bf:5b:cd:0e:de:cf:
0b:a0:86:92:12:00:a1:a8:c6:b5:b3:c9:34:d2:08:
99:c7:c0:f8:70:9d:75:38:ac:40:8b:71:87:9b:71:
43:89:40:51:b2:19:ed:9e:e8:f6:a9:e5:d0:fb:ec:
e2:36:53:f8:61:63:8a:6b:81:f0:2e:17:b6:81:86:
9d:fc:56:dc:54:c8:e1:67:d6:24:3f:22:75:4d:99:
f6:6d:3f:9b:94:ba:4e:5a:0b:72:2a:a3:2c:3e:b7:
31:5a:d5:d6:ae:77:19:04:18:fd:67:c6:aa:76:80:
b6:a8:da:d5:96:3f:d4:a7:ab:b8:61:b5:1d:44:08:
0a:df:45:f8:d4:8f:0c:f6:c5:a1:24:c1:46:ec:f8:
1c:cc:2e:49:7d:ed:ba:14:5a:81:13:8f:dc:ed:42:
6b:e4:48:59:16:4d:cf:73:43:1e:8d:f4:6f:e6:c9:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:17:66:53:AE:96:2C:E3:52:F6:07:8A:DA:B2:D2:06:ED:BD:C2:E3
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:8c:a0:48:6f:c8:4c:23:d4:8d:75:fb:df:8d:a6:eb:9e:
d6:35:b2:d9:67:97:68:09:e1:63:37:ce:3d:73:da:9a:3c:26:
a1:30:79:75:f7:30:4b:3e:b1:b9:d4:86:d7:4b:1e:2e:27:ad:
58:80:58:63:85:07:59:bd:1a:d1:ca:80:1a:56:c1:41:82:0a:
22:77:c7:e3:5c:77:86:48:fc:3b:d7:7d:71:e0:23:f5:bd:7c:
b3:68:67:6c:7b:ca:dd:8a:1f:a1:85:14:fa:79:02:d1:00:2f:
38:9b:81:37:18:da:d6:8d:29:15:65:7a:b7:d7:a4:76:c3:7f:
6f:26:94:c7:18:44:0d:93:e9:c2:bc:8f:fb:80:5d:76:25:1c:
37:09:6b:c9:4d:bc:e9:72:93:18:e9:18:55:d8:21:78:3b:c9:
26:12:01:5f:c9:0f:a9:13:f3:fb:34:7e:86:02:38:24:f7:8f:
fe:7b:d2:5b:f9:c7:3a:8c:8b:0f:d1:e7:7b:f6:f4:dc:20:45:
60:ce:82:f8:11:7d:0f:c8:2b:ff:95:39:e0:d7:26:94:b0:aa:
03:9f:3f:cf:4d:a9:68:d2:44:1c:4c:14:43:a8:c9:de:07:85:
d1:cc:7f:87:42:24:9a:1b:7e:5c:e9:c6:9d:dd:04:e8:21:e2:
be:68:3e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQDA5LA/xBmDdy86g7AowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjQxMTIzMDkwMDIxWhcNMjQxMTI0MDkwMDIxWjAzMTEwLwYDVQQD
EygzZTE3NjY1M2FlOTYyY2UzNTJmNjA3OGFkYWIyZDIwNmVkYmRjMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpf9Q4VVN1MxSS2gTOsBJYLzegS
XSqODFpy4fUfxmL6HVVbzeop1jQP/W4GszMGgQqXlsUJSDvp8XCkEjUxIdyRojpB
b5OAOyVg0iV83AJQGLC/W80O3s8LoIaSEgChqMa1s8k00giZx8D4cJ11OKxAi3GH
m3FDiUBRshntnuj2qeXQ++ziNlP4YWOKa4HwLhe2gYad/FbcVMjhZ9YkPyJ1TZn2
bT+blLpOWgtyKqMsPrcxWtXWrncZBBj9Z8aqdoC2qNrVlj/Up6u4YbUdRAgK30X4
1I8M9sWhJMFG7PgczC5Jfe26FFqBE4/c7UJr5EhZFk3Pc0MejfRv5snLrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4XZlOulizjUvYHitqy0gbtvcLjMB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFWMoEhv
yEwj1I11+9+Npuue1jWy2WeXaAnhYzfOPXPamjwmoTB5dfcwSz6xudSG10seLiet
WIBYY4UHWb0a0cqAGlbBQYIKInfH41x3hkj8O9d9ceAj9b18s2hnbHvK3YofoYUU
+nkC0QAvOJuBNxja1o0pFWV6t9ekdsN/byaUxxhEDZPpwryP+4BddiUcNwlryU28
6XKTGOkYVdgheDvJJhIBX8kPqRPz+zR+hgI4JPeP/nvSW/nHOoyLD9Hne/b03CBF
YM6C+BF9D8gr/5U54NcmlLCqA58/z02paNJEHEwUQ6jJ3geF0cx/h0Ikmht+XOnG
nd0E6CHivmg+CQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:32 2024 by rpki-client on console-fra.rpki-client.org