Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: Qr7GPoM82A1ra6GHLLic6z4r8JbWscgmLSBU12pnnQ8=
Subject key identifier: 35:61:A0:FB:22:18:60:B6:FC:B5:CA:83:4F:26:D6:3C:16:B3:E4:7D
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019369D983C98603D09F16825E0C80804DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 130B
Signing time: Tue 26 Nov 2024 19:01:22 +0000
Manifest this update: Tue 26 Nov 2024 19:01:22 +0000
Manifest next update: Wed 27 Nov 2024 19:01:22 +0000
Files and hashes: 1: NWUpw3H2bLMYbgpHt2BQm4KIE6w.roa (hash: 5vd+SerNiKbR52eigMiFhR+81s17+dm+SCcn0CKCfKI=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: YtzoAQ5+WiasXm2swGlLIoNND8x+VDwofgq5qnIG69E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:83:c9:86:03:d0:9f:16:82:5e:0c:80:80:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Nov 26 19:01:22 2024 GMT
Not After : Nov 27 19:01:22 2024 GMT
Subject: CN=3561a0fb221860b6fcb5ca834f26d63c16b3e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:a1:1d:62:18:fa:9a:b6:ad:61:b3:97:13:
5d:ae:9f:15:09:2d:b0:b3:b1:a0:ef:f8:65:18:d6:
aa:a2:cf:bc:f9:65:e1:97:3e:26:57:fa:06:46:ff:
fd:ce:ef:3b:be:dc:30:10:04:b9:26:2d:ab:49:0e:
92:2a:c5:db:c7:98:f4:0c:28:a8:51:66:da:14:c3:
64:4e:30:2d:e0:bc:fd:b5:e8:20:08:59:d4:c2:9e:
4a:fe:ec:77:65:be:ad:e0:68:22:29:03:de:99:bf:
91:a2:4f:9f:57:38:26:4c:0b:09:25:0c:a0:6c:8a:
39:73:4c:27:6c:55:0a:67:c1:b5:c9:d4:68:54:d5:
8a:0e:09:9f:64:05:72:44:fa:df:ce:a5:2b:b2:6e:
46:55:a8:db:19:1e:46:ec:ce:a2:0d:ba:ce:87:05:
a2:09:75:8e:42:38:f3:21:af:d2:69:5a:55:fe:b8:
be:b6:6c:41:81:fe:3b:88:b3:77:c5:a8:b1:b8:63:
24:93:17:ee:fa:aa:01:cb:cf:3c:19:b8:70:08:10:
0b:6a:d1:ea:cb:aa:65:50:92:91:43:e0:de:16:1d:
b4:21:d7:6b:58:e8:4f:9d:fc:38:76:85:ce:ff:d6:
e6:01:db:71:f4:8b:60:02:3c:4b:2c:22:55:cf:0a:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:A0:FB:22:18:60:B6:FC:B5:CA:83:4F:26:D6:3C:16:B3:E4:7D
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:88:0b:42:f9:b8:32:d3:88:a2:23:50:d8:7b:37:1d:4d:45:
e1:69:37:82:09:ce:8f:da:6c:d1:e9:be:17:00:13:ff:eb:77:
7b:10:c7:f0:52:68:00:d3:b8:84:22:01:fc:ef:cf:9e:82:b5:
29:56:c6:b5:a5:b3:d5:f2:68:6a:33:b9:be:a0:72:f5:4b:59:
44:61:95:ca:fb:2f:03:58:2f:46:ea:72:39:72:de:2d:d6:ab:
59:15:18:f1:89:8f:46:af:88:64:63:80:39:3c:c0:eb:e6:53:
85:e0:18:50:f0:bf:2d:fc:74:50:1e:1b:f2:74:a8:15:89:a6:
62:01:cb:48:5b:48:a8:17:c2:0e:3e:75:eb:88:37:0e:b4:9b:
56:46:f7:ff:95:b0:9a:48:97:ec:41:ac:84:80:86:a0:a1:de:
d9:8d:26:87:aa:9f:79:2c:7a:72:0f:b9:d7:e9:e5:b0:60:3c:
3b:bb:cf:fb:56:e0:c0:0b:0f:65:f8:91:6c:a2:27:88:d8:ad:
3c:75:f6:e3:f1:82:22:d0:63:c5:10:12:f3:ce:bc:60:d6:41:
d2:84:61:7a:08:1f:da:37:71:de:4c:dc:b5:4e:dc:b5:df:27:
77:e2:ab:73:83:30:bd:89:2e:3b:74:0c:fc:ce:d6:4e:ab:7b:
18:46:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:13 2024 by rpki-client on console-fra.rpki-client.org