Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: lPDu8PDCBi0XL4S5hkIztQoP0N2J9QGPveLks2xqdMc=
Subject key identifier: B1:C5:61:49:D3:BE:E3:B7:4C:A3:97:E6:7F:B9:71:71:5D:F3:64:9F
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019358796C158E9BF01A1F0E822CD10D03DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:02:52 +0000
Manifest this update: Sat 23 Nov 2024 10:02:52 +0000
Manifest next update: Sun 24 Nov 2024 10:02:52 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: XI0BekHT9EQ+yGeVrdSLk9wxHXSrWwZVM7ZnFD8pC7w=)
2: heohusEttl4_OnVAv1RZpDdyc3Y.roa (hash: D0LwisBEwtwUrAxZ9Ht/sbCXzPzX52fAdh1edI1RNX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:6c:15:8e:9b:f0:1a:1f:0e:82:2c:d1:0d:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Nov 23 10:02:52 2024 GMT
Not After : Nov 24 10:02:52 2024 GMT
Subject: CN=b1c56149d3bee3b74ca397e67fb971715df3649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:57:b5:c2:4f:d7:2e:38:8b:67:b3:44:af:
b5:16:cf:22:d6:34:59:e2:6b:b7:a3:99:25:b7:e3:
ba:84:7d:de:55:df:55:53:de:58:5b:fe:d4:d8:0c:
53:2e:b1:65:1f:aa:8e:7d:b5:ed:c4:37:c8:38:1e:
14:88:b7:bb:3f:65:7e:7b:cd:14:aa:68:ad:39:df:
10:7f:48:9c:7c:a7:fc:e8:78:e7:00:73:20:f8:ed:
a9:3e:16:7e:93:6c:c2:ed:ca:b3:f0:62:f3:5e:c6:
d6:3a:7f:08:c8:55:5d:13:19:91:f5:aa:c3:33:88:
44:75:c7:cd:78:4d:44:4a:f2:8f:1f:63:70:1e:4f:
d7:86:63:cf:bd:b4:2a:35:83:70:a0:58:e9:4c:37:
64:5d:99:d1:24:bc:d5:1a:a3:d1:40:89:dc:23:83:
d4:a8:f6:93:15:34:9c:01:14:44:6c:13:41:03:f4:
3f:55:54:ac:83:18:5f:fe:85:7b:c3:0e:d4:c9:46:
d5:20:f6:54:28:a3:58:ce:d0:66:0f:73:96:88:f0:
fb:ff:fb:8d:89:e0:32:cd:62:19:0a:dd:c6:be:b4:
83:0a:64:72:58:36:83:57:61:9d:09:0e:74:56:c1:
02:87:73:6b:f9:46:55:e3:00:68:fe:96:53:95:db:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:61:49:D3:BE:E3:B7:4C:A3:97:E6:7F:B9:71:71:5D:F3:64:9F
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bc:53:36:68:9f:0f:9f:0c:f1:35:40:5f:fc:a5:f4:2c:50:
ef:3b:1f:9e:2b:c7:1f:b6:e0:bd:8c:09:f3:ac:f5:5b:29:4a:
cf:16:f5:87:d7:b0:b0:b5:2f:28:07:3e:18:6e:0f:5f:f3:06:
ec:50:ce:17:97:39:b5:f8:04:05:5b:ee:05:17:1e:61:e8:50:
ea:1e:18:39:b0:3e:18:29:08:92:56:a2:11:57:9d:9e:82:e2:
b3:36:4d:3f:b2:b8:be:17:69:d0:fd:eb:8f:e0:51:c8:a6:67:
81:dd:65:76:9c:57:ee:73:82:98:05:2f:54:1c:c3:de:d2:46:
e8:37:e4:a8:2f:2e:03:a3:88:9c:be:0a:ce:de:73:63:89:ec:
46:cf:1f:8f:f7:a6:61:42:48:12:61:3e:48:3c:47:bc:1c:ec:
41:cb:2c:19:3a:ae:e8:59:71:93:9c:2c:58:92:28:01:7b:b2:
5c:e8:d1:13:29:93:cf:37:62:48:2f:43:52:2c:1f:9f:b6:82:
62:ea:eb:9f:9d:b5:9e:32:36:62:85:5a:e3:96:0a:6e:7e:f8:
e9:c5:f0:d2:a1:d7:a0:f5:a4:22:87:22:f7:66:a3:20:3d:91:
5c:5d:97:c0:23:40:c9:3a:b9:0c:68:3a:5f:2e:51:d8:bd:15:
83:c6:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:11 2024 by rpki-client on console-ams.rpki-client.org