Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: vUTFW/zzvzAiMbvq3rw7dmZJ4686wPDiNFo/NYY1s5c=
Subject key identifier: 33:B3:77:AC:10:57:C1:3B:8E:48:BC:B2:A8:7E:CC:CE:CA:AF:2E:C4
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 01936632A3BDCBA41859299121EDA27DD5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0BDA
Signing time: Tue 26 Nov 2024 02:00:14 +0000
Manifest this update: Tue 26 Nov 2024 02:00:14 +0000
Manifest next update: Wed 27 Nov 2024 02:00:14 +0000
Files and hashes: 1: 9t7BRxbZO9ea05bnK3ING9oNfsE.roa (hash: 950TvVnnE1m0QAAb2JXbdK7X7a5dyF27FrWfpV4WykY=)
2: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: S2FYO84728s6ny58u183gEQk5prX3swu+p2wY5s4feM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:32:a3:bd:cb:a4:18:59:29:91:21:ed:a2:7d:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Nov 26 02:00:14 2024 GMT
Not After : Nov 27 02:00:14 2024 GMT
Subject: CN=33b377ac1057c13b8e48bcb2a87ecccecaaf2ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:12:06:e0:d5:d4:15:61:30:49:f2:f1:f5:
47:9d:62:db:3d:99:ac:4b:d0:18:0a:49:06:83:73:
cf:8b:54:3e:a3:71:44:ba:ab:39:9f:04:45:fd:0f:
6b:54:87:13:39:ee:f2:9c:87:72:ee:34:31:cb:2c:
75:fe:4c:59:a7:95:52:7f:d6:62:29:19:ee:bb:62:
b1:c2:0c:9a:23:70:c6:1c:a3:4b:9e:0c:06:ed:bf:
1f:cd:a4:97:18:13:1f:e2:19:80:47:b0:a1:ce:db:
0a:27:22:ac:5a:20:ee:aa:26:72:a0:54:7f:92:ea:
e9:04:0c:9f:82:49:d1:0c:30:c1:c4:b3:a0:9b:ab:
fa:6c:d3:1e:bc:c8:74:b4:5c:ba:e9:cd:79:63:19:
9e:7d:06:f2:86:ec:9f:7d:c9:ab:e9:ee:4b:a4:8b:
c7:14:f7:be:06:21:e9:b3:a4:7d:a8:b7:3a:8f:b3:
f2:c7:39:37:23:db:5d:c3:cc:b5:1e:32:f0:be:8f:
ad:f6:f3:ea:3e:30:90:74:d0:bd:b4:b4:85:ae:96:
ed:7d:a2:02:9c:70:86:1c:fb:6e:f4:db:39:53:34:
9b:b9:bd:bc:b8:1c:1c:46:48:2d:fe:e2:e1:3a:e0:
b5:fc:59:f9:ea:06:26:db:ae:e9:14:87:eb:d1:4b:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:77:AC:10:57:C1:3B:8E:48:BC:B2:A8:7E:CC:CE:CA:AF:2E:C4
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:33:ce:ee:1f:4f:fb:6b:24:0f:52:11:9a:03:d5:fc:b3:
76:65:2f:f7:bc:e5:3d:8e:ae:b9:43:bd:8a:c7:75:7b:d6:a1:
a0:85:6c:f5:aa:e7:2d:e0:94:37:22:bc:82:85:5a:e5:b1:17:
50:7e:62:d4:42:9f:1c:eb:68:4a:a8:48:3e:0e:8f:67:d8:c0:
00:7a:bc:62:ec:3c:94:fa:cb:64:85:c9:9d:f4:29:22:c4:d8:
91:bf:53:1d:f4:dc:77:61:a4:51:a0:ae:44:4b:88:7a:cf:4e:
53:f4:84:7e:58:b8:58:2e:28:22:ab:ed:80:db:c3:03:0e:46:
5d:6a:b4:30:93:e6:59:b2:8e:9c:1b:d5:01:5f:a7:42:c2:21:
73:03:b0:a0:f3:5c:2e:a5:cb:93:bf:81:ad:7e:55:09:73:9e:
47:20:ff:f1:04:19:7d:28:d2:28:3d:06:dd:59:31:7e:af:42:
9e:c8:e8:60:c1:33:c1:b1:10:2f:8f:99:05:83:47:32:ee:ac:
8f:9a:82:21:e0:77:27:de:22:14:5a:cd:7b:d9:38:d7:b8:e3:
91:1e:0c:6e:5e:d3:21:82:98:96:00:0a:f6:35:e2:2d:92:d3:
0a:39:12:17:97:79:22:79:79:a4:d6:16:6e:55:6f:c6:0e:91:
49:50:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:36:47 2024 by rpki-client on console-ams.rpki-client.org