Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: 62vHh+nb7Af86uQ7uTt2Zk782etdwVvMzpUHAAIXcLA=
Subject key identifier: AA:20:9A:A7:AC:AA:FC:61:C7:B5:97:80:21:97:F4:4B:1B:B4:1E:B5
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 0193549B4A8FBC1642FE72E4E6B6FEC6158A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0715
Signing time: Fri 22 Nov 2024 16:01:23 +0000
Manifest this update: Fri 22 Nov 2024 16:01:23 +0000
Manifest next update: Sat 23 Nov 2024 16:01:23 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: q0JHJ1JdP2x2+CH/2vq7D+YanRUxBdZccqY0WKyskyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:4a:8f:bc:16:42:fe:72:e4:e6:b6:fe:c6:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Nov 22 16:01:23 2024 GMT
Not After : Nov 23 16:01:23 2024 GMT
Subject: CN=aa209aa7acaafc61c7b597802197f44b1bb41eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:2a:a8:eb:a9:53:9b:e8:c0:4b:c8:aa:b1:
97:2e:09:1b:68:69:f7:e6:56:e0:e6:5d:43:9b:5f:
1f:0a:93:9f:fb:33:9b:8a:53:94:08:50:ba:24:08:
c3:1c:12:96:58:d2:a8:61:e2:f6:f7:de:57:14:31:
82:0e:8a:6f:57:cf:47:ff:c4:f1:5a:7e:74:83:f2:
e1:cd:5c:e0:3d:92:c7:50:39:f7:57:fb:db:1b:21:
73:0e:e8:ce:98:14:5c:d4:f7:f7:89:bc:46:e6:26:
ae:6d:b6:96:f8:36:9b:b5:4f:60:07:86:fb:06:aa:
07:73:f3:52:7c:77:5b:48:c7:8a:31:65:a0:83:55:
97:03:c1:af:57:26:9f:16:0d:2a:15:e8:a8:25:15:
52:6f:d4:7a:71:11:dd:71:8f:9c:05:86:29:91:c1:
fc:67:d6:79:e0:df:83:48:0d:25:c7:11:c7:42:e2:
d4:d0:52:ab:27:a5:28:87:19:88:a3:9c:28:33:fa:
fc:5c:80:89:d3:38:11:31:fa:e8:a6:bc:28:bd:33:
02:bf:0c:ae:70:e4:cd:e2:7c:4b:54:97:d3:67:a9:
13:02:04:20:ec:79:b6:29:55:d8:cb:e1:e6:4a:ab:
ef:e9:f3:82:5a:67:be:ce:17:47:c7:8c:c2:84:df:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:9A:A7:AC:AA:FC:61:C7:B5:97:80:21:97:F4:4B:1B:B4:1E:B5
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:60:0d:cf:7e:6d:18:5b:91:d5:f5:ed:18:e0:61:99:22:
13:ff:b7:9a:e8:0e:c2:dc:57:a4:04:8d:d6:df:45:59:05:d7:
01:47:7c:57:f5:80:1b:d8:38:af:41:d9:61:2c:ee:65:6e:25:
cc:49:d9:d3:f3:85:d3:9e:58:0e:e8:1c:85:07:13:05:88:a0:
bd:44:1e:f7:d2:f8:a1:f1:5b:88:69:90:f9:2d:4c:66:e7:90:
42:17:cb:1f:8d:fb:c1:79:d2:c4:52:d2:93:64:71:db:09:5f:
6c:95:3b:34:ce:db:ee:ac:54:f9:d9:78:9e:31:f5:bf:76:1b:
23:09:d3:be:97:68:2e:b6:02:e4:f3:c4:d5:33:48:fb:39:c8:
14:11:72:74:b6:d7:e7:36:ea:70:ec:83:04:6e:b0:d3:4c:84:
70:43:20:9b:98:d6:9b:be:19:ab:52:0c:1b:74:98:10:dc:59:
14:89:8c:89:db:d1:93:34:e1:8b:60:f4:2f:b5:47:81:19:b4:
a7:4b:85:ae:cd:7b:cd:54:94:e3:6a:49:1d:c7:c7:4a:90:9c:
3a:90:6c:5d:3e:1e:ae:dc:b6:f0:86:16:68:aa:3f:08:3b:9c:
4c:31:ac:45:30:07:c5:dc:1b:4e:97:40:8d:ba:17:10:5b:1b:
b5:16:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:20 2024 by rpki-client on console-fra.rpki-client.org