Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: +Ol/RNOHhTmcvUn5i4Hhewu3VI0/PMSeJdAoA31sWs0=
Subject key identifier: 59:C4:10:FF:FE:B7:C0:19:C9:D2:56:1F:12:61:57:EC:13:24:AA:EC
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019357D2326C6465C2DDEDD90A9068A3EFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 12A2
Signing time: Sat 23 Nov 2024 07:00:13 +0000
Manifest this update: Sat 23 Nov 2024 07:00:13 +0000
Manifest next update: Sun 24 Nov 2024 07:00:13 +0000
Files and hashes: 1: 0W3WJ9T3_fIpLKmvIwu3m71oMj0.roa (hash: 4rZTrWCBPGrMHPFbcMJUHYf1m65fycVKByntwM/Ht60=)
2: EWLEyVHhes6TOIJQ5cLvq5QyyYM.roa (hash: x8E0CftNWbRt5hozQir5SHPu1qQWGnT3OFyf2s2OkMQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: yxkBL2pNf2lC5mL/YBy+iSpgjzuE9uXXE17CGPFXJ5g=)
4: zwngkprKv9dWhJJtPwhumKEnFlI.roa (hash: IDNDPK/ym9YiJyYsBdhkd9KNjhkPgqOXskuzDxjjZUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:32:6c:64:65:c2:dd:ed:d9:0a:90:68:a3:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Nov 23 07:00:13 2024 GMT
Not After : Nov 24 07:00:13 2024 GMT
Subject: CN=59c410fffeb7c019c9d2561f126157ec1324aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:6b:da:d1:b1:ca:96:fb:dd:08:79:b7:2b:
8a:11:7d:7f:a8:84:58:51:2b:94:1d:c5:82:ee:a6:
d0:c6:75:45:a0:98:c8:4e:a2:a6:97:c5:3a:2e:4c:
da:10:e8:39:3c:68:cb:3b:88:8b:c3:74:90:21:01:
47:4d:5f:84:b2:5e:18:fe:c0:86:49:8e:f5:df:b3:
72:23:ae:6d:14:6e:3d:f9:8c:5f:65:a3:e2:71:d6:
02:93:b6:99:fe:72:3d:52:cd:9c:26:7f:48:3b:e3:
02:de:d0:80:8a:b9:9b:d1:2e:c3:03:df:52:4b:24:
a4:a7:23:bb:f0:b6:31:36:96:34:9c:12:a4:08:e9:
a3:72:16:09:a0:ed:ed:6d:76:19:74:2b:71:33:a7:
8e:71:83:8f:db:a6:e9:60:97:8f:c7:d7:25:e4:cd:
4f:39:84:eb:24:d1:d3:ec:44:c6:b4:81:e6:c7:fc:
9a:01:a7:3b:78:2c:1f:2c:2c:69:57:56:a2:53:c0:
aa:f7:0b:a7:30:72:98:68:58:8d:f5:a1:90:b5:7c:
3a:25:90:b8:2c:0e:c1:05:70:cf:a9:98:e8:59:c6:
0e:ed:b8:4b:a4:75:5f:f1:63:f5:7c:71:25:f2:dc:
4b:80:fb:04:64:04:a2:81:ae:c9:2a:9e:ee:61:8e:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C4:10:FF:FE:B7:C0:19:C9:D2:56:1F:12:61:57:EC:13:24:AA:EC
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:54:3d:28:1e:91:39:ac:0c:68:85:bd:c1:79:b1:86:cc:
f4:d1:ac:fe:5e:13:71:10:cc:81:7a:e3:5a:83:60:45:fe:37:
6f:5b:23:f1:09:25:56:f6:12:01:65:e0:e7:90:4f:69:4f:fc:
80:90:43:53:3a:9b:f3:57:4e:b2:f8:9e:1e:ea:d3:01:a6:7a:
0f:e0:7a:ef:e8:b1:91:f8:e7:e1:85:23:45:bc:70:a5:25:79:
cd:14:3e:1c:3b:6c:7d:21:5f:2a:e4:cc:f5:69:25:26:f9:06:
24:60:98:13:99:75:59:55:09:65:e3:7b:e5:b3:c8:b8:2f:68:
6d:4f:19:e7:00:4a:f6:9e:cc:47:52:cb:55:92:56:c9:cb:f8:
5a:8f:70:aa:1c:34:b5:e7:bc:39:77:9e:1b:d2:6e:ba:69:fd:
fd:15:88:36:e4:67:d3:34:6b:aa:32:fa:9b:59:da:2b:02:cd:
bc:a0:5e:bc:da:cf:f8:dd:b8:96:2d:c0:96:88:88:f8:81:f4:
ae:72:4b:69:81:24:47:e2:db:d2:42:90:1b:7c:7f:61:8b:6c:
ad:aa:e8:17:09:0b:96:21:c7:c3:a9:cc:ce:46:a2:be:0f:c8:
0d:e9:0f:34:8b:ff:5e:1a:56:5d:fc:e8:ec:eb:08:9a:b1:10:
8e:e9:69:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0jJsZGXC3e3ZCpBoo+/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx
NzY4MWYwHhcNMjQxMTIzMDcwMDEzWhcNMjQxMTI0MDcwMDEzWjAzMTEwLwYDVQQD
Eyg1OWM0MTBmZmZlYjdjMDE5YzlkMjU2MWYxMjYxNTdlYzEzMjRhYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwedr2tGxypb73Qh5tyuKEX1/qIRY
USuUHcWC7qbQxnVFoJjITqKml8U6LkzaEOg5PGjLO4iLw3SQIQFHTV+Esl4Y/sCG
SY7137NyI65tFG49+YxfZaPicdYCk7aZ/nI9Us2cJn9IO+MC3tCAirmb0S7DA99S
SySkpyO78LYxNpY0nBKkCOmjchYJoO3tbXYZdCtxM6eOcYOP26bpYJePx9cl5M1P
OYTrJNHT7ETGtIHmx/yaAac7eCwfLCxpV1aiU8Cq9wunMHKYaFiN9aGQtXw6JZC4
LA7BBXDPqZjoWcYO7bhLpHVf8WP1fHEl8txLgPsEZASiga7JKp7uYY4AlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnEEP/+t8AZydJWHxJhV+wTJKrsMB8GA1UdIwQY
MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et
ODRlZTIyYTNlZTViLzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi
LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRRUPSge
kTmsDGiFvcF5sYbM9NGs/l4TcRDMgXrjWoNgRf43b1sj8QklVvYSAWXg55BPaU/8
gJBDUzqb81dOsvieHurTAaZ6D+B67+ixkfjn4YUjRbxwpSV5zRQ+HDtsfSFfKuTM
9WklJvkGJGCYE5l1WVUJZeN75bPIuC9obU8Z5wBK9p7MR1LLVZJWycv4Wo9wqhw0
tee8OXeeG9Juumn9/RWINuRn0zRrqjL6m1naKwLNvKBevNrP+N24li3AloiI+IH0
rnJLaYEkR+Lb0kKQG3x/YYtsraroFwkLliHHw6nMzkaivg/IDekPNIv/XhpWXfzo
7OsImrEQjulpjA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:12 2024 by rpki-client on console-ams.rpki-client.org