Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: 1LXE02YzooI843EopFdLPnt8cJ2WHSbDtKndzoM0wmY=
Subject key identifier: 63:87:5A:8B:61:16:E2:4D:F1:AB:03:33:0F:A3:F7:B6:2C:02:F5:42
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01935689CBFB543CF1D4FCF83F4F295D3967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0A72
Signing time: Sat 23 Nov 2024 01:01:31 +0000
Manifest this update: Sat 23 Nov 2024 01:01:31 +0000
Manifest next update: Sun 24 Nov 2024 01:01:31 +0000
Files and hashes: 1: Q9pveRz-wv7HZ-QvQ-d_1s7P-P0.roa (hash: kb9Qh9OnPpsW5NMEf/tWS/tgpgFcrUZe/Kq31oP3Gl0=)
2: UCqxCGFVhMNhcAx5MGg79_QwVaE.roa (hash: I2TcnwRx9O0c038hZuzpceMT2cVhqIH/JiyZ6Da6f78=)
3: hY1tcjYpv1vzar1uc13nY4sXqdQ.roa (hash: 08sKAcFdNVJus7MWgIpE65RP6QXRza+V2m9oi67eUwk=)
4: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: pBGv4U//KedekRVUG8+7cXCnQ8zl/xJvHVT3BDHUhAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:cb:fb:54:3c:f1:d4:fc:f8:3f:4f:29:5d:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Nov 23 01:01:31 2024 GMT
Not After : Nov 24 01:01:31 2024 GMT
Subject: CN=63875a8b6116e24df1ab03330fa3f7b62c02f542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:6d:43:c4:2c:6b:20:1d:5d:a1:a7:a7:7c:
34:48:df:4f:a2:3d:d3:1c:e9:7e:bb:c4:22:2d:79:
9e:62:8f:9e:b9:a1:82:d0:0b:fa:6c:10:3d:95:e3:
b2:95:85:d2:a8:8e:e8:48:55:4b:0c:0e:c2:2e:0a:
fc:21:38:2b:9b:31:9e:ed:c8:29:5a:81:0b:5a:7c:
f6:8f:59:b9:1e:4e:ac:44:ed:88:cc:e3:f5:68:5a:
42:bd:f1:f0:a1:bc:7f:0a:59:0b:3b:80:0d:d0:7f:
02:a2:23:60:79:14:3c:48:e9:b9:e3:af:0d:f6:38:
ac:77:ca:3b:11:b9:ea:3a:5b:69:f1:cb:71:cc:3f:
3a:fa:3f:3c:e1:f1:c1:6d:7f:fe:63:81:0c:9c:5b:
eb:27:9c:6b:73:3f:50:c9:2f:e9:e7:c5:e4:dd:32:
2a:2a:0e:9d:6e:38:1b:fe:0d:07:51:7b:f5:75:e9:
53:da:21:ba:dd:ea:a0:62:b2:5c:18:b1:89:6b:76:
fc:71:00:39:59:ff:32:13:d0:2c:df:38:49:a4:5b:
f5:17:d5:01:18:d2:a4:f5:c9:59:b2:c4:a0:a6:b1:
ad:e1:a1:87:d9:db:09:57:56:b3:7b:b3:c2:c1:8e:
98:df:ab:09:02:55:8d:1b:9d:17:0d:76:a9:e7:a3:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:5A:8B:61:16:E2:4D:F1:AB:03:33:0F:A3:F7:B6:2C:02:F5:42
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0d:81:95:d9:45:c7:76:da:f6:a4:fd:88:d0:4f:02:b7:e0:
03:c9:5b:50:00:7d:7e:c7:99:02:74:88:d6:fd:e1:b8:07:0c:
25:2c:65:4e:f3:67:3a:39:b5:87:d1:ce:eb:d7:61:06:34:4b:
fa:44:09:02:15:05:bc:e7:c5:05:11:e1:be:fc:1a:b8:26:3a:
22:5a:fb:e1:16:fe:bd:04:bc:4f:36:9e:a0:52:73:b3:c8:f8:
f9:32:43:a4:f0:2c:45:fc:b2:1c:c2:ad:74:0b:c2:1a:39:85:
37:64:98:16:bd:db:55:4d:5b:a0:cc:46:96:a7:e0:13:10:55:
e4:e6:64:d3:ce:73:42:d0:5c:78:4a:18:d0:e1:19:06:0e:88:
5c:63:8a:f0:0b:5c:d7:92:7c:5b:4c:49:4b:f4:d0:fe:e9:2a:
b2:12:fd:3a:5e:60:ab:39:ca:3d:2a:18:fa:c4:ef:b9:5b:fd:
ff:d5:c4:61:74:ec:b4:4a:7f:6a:47:98:f2:53:38:c3:e7:17:
d8:ee:ee:85:13:e0:8a:8b:cb:13:cb:7e:dd:2f:a8:82:20:80:
ec:65:4d:36:bc:b8:97:62:48:ba:cc:19:48:08:b8:dd:67:67:
68:12:89:22:ac:56:22:cc:e8:90:89:01:ff:ea:6d:04:6b:77:
54:35:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:08 2024 by rpki-client on console-ams.rpki-client.org