Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 4W4UcsZ2OdiGkKK2j2Emt/i3/OwMEHH7ZRwV/hlDWDY=
Subject key identifier: 3D:5C:B8:4D:17:CA:40:72:2B:EA:4B:4A:BE:16:AD:91:EF:F4:1C:45
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0193579BB31C010FAA1884868381A83936D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1378
Signing time: Sat 23 Nov 2024 06:00:41 +0000
Manifest this update: Sat 23 Nov 2024 06:00:41 +0000
Manifest next update: Sun 24 Nov 2024 06:00:41 +0000
Files and hashes: 1: DzojaLJ5vaIlrDO9vw-pk-RtVtU.roa (hash: f9quenUvHqfWUu1Tqaq0gP2iW+A8MHrE/K5mtGxlrzY=)
2: eK5GtGLtjaw7ISgy5Up7rZ3ouAE.roa (hash: PH0pYZWAyIVlmvm7TwosaiXNCaZJhdfuRYifQVTFM4s=)
3: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: XR0smSQV30gVkkQUP9jHiJ/sy2ekJhUdXuTLut4BZ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b3:1c:01:0f:aa:18:84:86:83:81:a8:39:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Nov 23 06:00:41 2024 GMT
Not After : Nov 24 06:00:41 2024 GMT
Subject: CN=3d5cb84d17ca40722bea4b4abe16ad91eff41c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:ea:ff:39:54:37:48:db:fa:a5:dc:c4:15:
7c:c0:ee:fc:a5:ff:df:78:1f:fc:f3:13:67:0c:4f:
7f:26:06:28:51:cc:bf:c3:bc:50:dc:fe:6f:c8:68:
65:c0:52:21:68:76:fd:72:85:17:b7:e7:d0:c6:0d:
0d:e1:99:98:dc:55:14:0b:4a:90:ec:00:3a:78:21:
29:10:cc:b6:25:07:16:d6:90:00:7f:b0:b3:f0:d7:
de:02:57:c7:5c:9b:b1:6d:bb:96:78:12:a3:b3:9b:
1c:2c:05:e5:f9:2d:66:83:ac:41:9d:84:59:7d:c1:
d2:c0:48:05:b3:98:eb:7a:8c:89:ee:0e:1f:4b:e3:
7d:39:21:fb:94:38:72:5d:da:5a:4e:f3:a0:16:79:
77:db:b2:9b:8b:ee:f1:94:c0:81:29:d6:60:5c:dc:
dd:2d:1d:03:25:ca:a6:49:0d:ab:f3:d6:64:a0:68:
28:4c:4f:9b:fa:09:9a:a6:f0:ff:f9:ac:94:ce:4a:
ef:59:13:d7:3f:c2:45:93:7f:82:c4:e9:4b:07:2f:
da:7b:4d:bc:1c:0b:be:ed:e0:d5:a5:e2:d3:97:6b:
3f:07:95:e4:31:17:fc:28:75:db:ae:55:74:e1:0b:
c2:b5:f1:a1:c5:bd:3d:ce:18:9e:e0:c9:ae:e0:13:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:B8:4D:17:CA:40:72:2B:EA:4B:4A:BE:16:AD:91:EF:F4:1C:45
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:06:91:0d:14:e2:99:52:40:aa:c5:ed:ed:3c:ea:41:5d:8d:
02:d0:fa:5a:bc:91:96:15:cf:af:3a:bb:3a:2e:0a:bb:36:9b:
e0:d5:d4:8e:e4:03:fb:a9:9e:19:b4:49:04:95:85:8d:5f:ad:
f8:7f:06:d7:ff:c2:66:1e:2a:e9:c8:7c:d1:92:cd:60:06:21:
52:d7:7b:23:48:0e:0a:33:e6:80:af:85:aa:ae:80:55:e7:f3:
a7:53:65:e0:8e:75:b0:cf:b2:08:1c:a9:84:8d:7e:69:80:5e:
36:e8:82:84:dd:ac:55:21:83:bc:5c:46:df:93:74:60:9c:7b:
53:31:06:db:e9:62:f8:a0:49:6a:8d:99:f1:f5:7a:a1:e0:85:
18:84:08:40:82:6e:5a:df:9c:be:d2:d2:52:13:10:78:24:86:
6c:9d:e2:b4:48:c9:37:b6:4a:9e:73:38:66:d3:97:94:15:42:
3d:18:6f:a2:e3:aa:2f:35:6e:67:1a:bf:57:74:05:f7:ce:5a:
96:d2:7c:16:a3:f6:09:92:1b:a8:02:16:d8:96:d8:5c:f8:39:
42:9a:a2:dc:02:01:e5:9f:83:88:89:00:3b:5d:78:ac:7e:69:
63:d4:95:14:79:0f:d5:f6:a1:d1:ed:87:7d:61:4b:6e:1e:80:
67:68:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:01 2024 by rpki-client on console-ams.rpki-client.org