Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: NWZEqfbS602v7Zwo4cwHOtGo7L93oRyCQBJ+ZGAdoOc=
Subject key identifier: D0:3F:94:E6:B0:DE:F8:27:6A:5A:EF:AF:29:3B:7D:3E:00:3C:DD:E7
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 0193568979090835CEC550F86847FDE8D657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 0F55
Signing time: Sat 23 Nov 2024 01:01:10 +0000
Manifest this update: Sat 23 Nov 2024 01:01:10 +0000
Manifest next update: Sun 24 Nov 2024 01:01:10 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: kPplxo/Xt7eiE8eh5N7stXDqP9HpJ073Y+41Y16arRg=)
2: IDZ3zAcfEPYAW1n6JNz7dHyIIgc.roa (hash: /qjhxYat//PDNXtvAVmfESvFTcBOFuFblShVjVaTPMs=)
3: Q41Bh49j8x0Af-AolPps_Lyk9UA.roa (hash: c7nudvfhvDMN6k28jSggayeWQx0ztUGba2F28gZAKY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:79:09:08:35:ce:c5:50:f8:68:47:fd:e8:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Nov 23 01:01:10 2024 GMT
Not After : Nov 24 01:01:10 2024 GMT
Subject: CN=d03f94e6b0def8276a5aefaf293b7d3e003cdde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:b4:7b:3c:bd:1c:d5:97:81:d2:a1:35:43:
a5:4b:81:1e:af:44:52:2e:c0:55:61:a8:8a:57:a3:
18:c5:61:15:44:d1:da:c8:5b:4f:4e:aa:82:cb:23:
e6:be:60:98:74:55:82:ee:5d:a9:a6:fd:fd:f9:a9:
80:d7:19:1b:4e:f4:b0:8c:c6:a1:73:29:87:81:09:
bd:06:59:be:82:e1:14:18:9a:16:36:98:1b:7d:55:
ed:d4:fe:63:6e:df:a5:10:58:7a:fb:54:7d:a0:49:
a4:94:a5:ef:43:02:00:c1:80:f4:a2:84:16:8e:94:
ea:71:11:8a:5d:b9:75:11:f1:ce:f9:81:bd:b2:66:
12:41:62:64:1a:79:50:4a:1c:49:34:70:7c:05:8d:
3d:e2:2a:b7:94:79:e9:9a:b0:b0:9b:45:5f:f8:5c:
3e:5c:51:52:b0:49:07:e5:89:b4:8e:52:92:1e:59:
74:06:a6:ba:2b:92:4a:a9:cd:41:c5:6f:71:15:c5:
3f:62:b0:95:6e:84:b5:3d:5f:78:ea:2a:0d:cf:2a:
65:b3:23:cc:7b:08:ca:13:79:d2:a4:fc:39:3d:54:
2a:01:65:59:85:69:b3:6b:f4:67:31:50:1f:59:a3:
b3:8f:5c:e0:e3:29:52:9e:e8:8b:1c:f9:13:21:c9:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:94:E6:B0:DE:F8:27:6A:5A:EF:AF:29:3B:7D:3E:00:3C:DD:E7
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:db:97:f5:d9:49:40:95:b9:3d:eb:19:9c:6a:2f:d4:4e:
77:b4:6f:de:ac:10:02:39:c9:fc:f3:f3:2a:9d:86:cd:4e:1b:
93:3f:37:b7:a1:71:75:25:6b:22:16:d6:d4:bf:44:4b:14:68:
f2:0e:c5:25:b0:0e:36:8b:8d:3a:1a:96:52:20:18:6d:7c:9c:
b1:cb:b1:05:6e:9a:22:0f:e7:ca:cb:7b:1c:e4:25:c6:a6:ae:
b0:5f:4a:06:68:17:9f:90:da:5a:83:fb:a9:9b:d2:b1:9d:a2:
dc:11:6b:8b:6f:10:6e:2a:f7:a0:4a:65:72:c8:c1:67:b4:f5:
7e:37:e6:79:3b:70:91:f8:61:84:65:c2:e1:ab:83:ca:16:7f:
8c:fe:2a:86:87:7d:68:1c:78:73:9e:12:ca:88:c4:48:78:67:
3b:8c:f0:cf:93:2f:c4:6d:75:50:ce:56:8a:bd:cc:01:0f:03:
16:2a:12:ab:ce:b5:76:d1:92:9f:15:3e:aa:49:7d:bc:cc:0a:
0c:26:9e:24:87:13:9d:19:ba:64:f0:36:56:17:33:57:06:88:
c0:ff:31:30:76:f3:5f:65:0a:00:31:2a:27:97:46:2d:ed:94:
89:df:f3:ed:51:f3:2d:00:2b:c4:63:7d:b7:2a:2e:7b:34:07:
6b:23:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:58 2024 by rpki-client on console-ams.rpki-client.org