Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: 5DUWGvHlrkP5B9qnE/Gh/mr3inTRWlgsok8mSoO9IU4=
Subject key identifier: 5B:4C:B0:4F:A9:BF:A3:23:A1:4A:9C:A4:09:EF:3D:12:D0:10:AB:4F
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0193553F7CCD96219A0881637A89345C105A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 19:00:44 +0000
Manifest this update: Fri 22 Nov 2024 19:00:44 +0000
Manifest next update: Sat 23 Nov 2024 19:00:44 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: 6P9N9l7+rH/T9D47BUyt9SclGtM8gaUKDbg44XdRKNw=)
2: Ca0WFketL5hpuFocqhamKViUnT8.roa (hash: pgsuHNvSm3bCVnJtMa/zSfgMaoCv52BfvrtZrsFHnRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:7c:cd:96:21:9a:08:81:63:7a:89:34:5c:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Nov 22 19:00:44 2024 GMT
Not After : Nov 23 19:00:44 2024 GMT
Subject: CN=5b4cb04fa9bfa323a14a9ca409ef3d12d010ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:9f:d9:d8:c8:ef:9a:e2:a7:11:7e:3f:34:
2f:58:f1:e1:b2:b0:58:0f:86:62:e2:f5:ff:20:be:
1c:bb:0d:1b:fd:fe:09:b2:07:a0:72:d7:6d:a8:3c:
72:11:76:11:68:8a:ce:ae:91:a5:2c:06:56:e7:ef:
e0:2c:9a:c3:25:10:8a:ad:50:6f:ff:b1:11:a0:cf:
01:8e:d1:58:b7:37:99:fa:76:9e:8c:67:95:1c:9c:
0a:c3:f9:bf:3d:7f:ca:7a:64:f5:23:fa:e0:88:35:
c5:41:04:eb:6f:b7:83:2b:7f:e1:83:3b:e7:38:ea:
fe:3e:e9:f7:2b:92:8c:11:a7:3a:52:05:16:38:f6:
3b:9b:1c:38:2c:63:94:5a:7b:a7:a0:bd:9d:09:fd:
e9:bf:6d:2e:fc:4a:a8:d9:26:4f:f6:3d:8a:b5:1a:
68:5c:fd:c9:7d:ec:d0:b2:bc:f1:12:b4:32:96:15:
66:fc:f4:af:05:7b:f0:fa:39:b9:3b:fd:e7:5e:8c:
e9:55:ea:91:a2:43:cc:d7:88:0d:10:d1:84:03:58:
91:18:f8:d9:50:35:37:6a:0e:c4:07:99:e7:1b:37:
c0:1f:fa:b5:63:9b:de:4c:e3:c6:ae:71:89:e1:50:
a2:77:1d:16:44:16:11:b0:a8:d7:35:a2:f0:4d:9b:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:B0:4F:A9:BF:A3:23:A1:4A:9C:A4:09:EF:3D:12:D0:10:AB:4F
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:43:84:75:08:b7:22:eb:a3:e5:96:8d:b1:aa:0a:36:b3:38:
39:17:16:08:e3:60:a2:55:d9:6b:bd:e6:98:6e:85:3d:40:f1:
3e:3d:b6:8f:0a:02:8e:61:70:ca:f5:a5:d4:a9:c5:34:f0:f0:
87:fe:48:fb:f0:1d:cc:3c:81:79:83:36:f9:fb:44:2d:fa:5e:
25:52:17:27:3f:4e:2e:52:db:f9:ee:6d:67:df:65:4b:c6:b1:
10:b2:46:4f:d9:9e:60:79:a5:bc:6c:ba:7b:55:a1:47:5d:3d:
83:7e:4b:49:09:11:e7:7a:a1:0e:51:80:bd:23:d9:7c:ec:40:
73:20:05:bf:63:b4:03:ee:4f:85:9a:72:23:d0:80:1a:9d:7d:
32:19:5c:4a:1a:dc:56:40:da:70:7b:3c:78:ca:b0:0e:01:87:
51:8a:3e:de:e7:40:37:18:d0:33:20:18:f6:b3:92:5f:55:30:
c1:af:47:3c:d6:0a:19:e6:07:2d:34:fc:ae:65:30:71:8f:4c:
cb:9d:89:44:81:39:ac:27:26:e6:57:2b:7a:78:6c:10:22:dd:
1f:4f:49:12:4b:cd:0e:8b:79:d9:74:e7:c7:02:68:6c:ad:f0:
54:83:93:fe:ce:e7:e2:61:fe:66:36:be:78:46:a1:85:37:e3:
23:2b:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:12 2024 by rpki-client on console-fra.rpki-client.org