Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: w7GcN+XImdBqcKbHkVrce76DWOKww3856hCqpxW78KU=
Subject key identifier: E4:90:2B:49:37:12:EF:3E:C5:D0:BD:5C:8E:BB:0C:F2:A3:39:41:9C
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 019369D8EA7E406BF8A44A07410D4F5C33E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0A5E
Signing time: Tue 26 Nov 2024 19:00:43 +0000
Manifest this update: Tue 26 Nov 2024 19:00:43 +0000
Manifest next update: Wed 27 Nov 2024 19:00:43 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: rxWD6A8lmgYI8qjB/T8pGlgxkaJXNxHDi2BgMfEg95A=)
2: wNsZiOXoW3O422_-Ev8gTCbb_38.roa (hash: 1+n4KN0lLg1ScmyqHrM1UTMBzOPC21NM08aTebjXJ2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:ea:7e:40:6b:f8:a4:4a:07:41:0d:4f:5c:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Nov 26 19:00:43 2024 GMT
Not After : Nov 27 19:00:43 2024 GMT
Subject: CN=e4902b493712ef3ec5d0bd5c8ebb0cf2a339419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:26:0c:d6:0f:f5:c3:d5:7f:a5:06:f5:69:
a5:90:7c:ef:e4:92:4c:bd:ea:b1:39:ca:c8:d2:06:
c3:0f:4c:78:07:58:a9:25:c5:13:c2:9b:34:87:f0:
d6:7b:a0:5e:5d:8f:aa:f6:41:6d:05:35:68:9e:14:
1d:04:d0:1b:50:26:62:74:a1:2f:29:67:90:ac:c2:
02:7b:bf:c6:16:dc:71:92:98:20:69:4e:28:59:c6:
13:c0:7e:fb:a9:9d:77:2a:34:e7:d2:bc:88:f9:21:
9f:9f:2d:24:ae:1b:a1:c0:68:f3:ed:62:44:c1:66:
bf:b9:5d:3e:26:e1:60:87:25:40:7f:b3:a7:6e:1c:
18:1e:d0:8f:07:b2:c6:be:f2:8d:df:d9:1b:12:a9:
8f:8d:88:25:6b:31:6c:2e:a0:40:43:4e:e4:8c:32:
66:a5:74:f2:0a:40:08:a2:27:2b:09:83:a1:74:72:
10:a3:e3:32:89:01:94:16:2f:95:89:41:1d:1e:38:
63:19:0d:88:49:7b:1d:e7:27:67:c6:0f:26:ff:75:
19:1c:d9:1b:f1:b2:35:ec:a0:50:ca:a0:43:e4:ec:
21:60:35:98:1c:fe:b4:68:e4:4a:72:7e:8e:07:c7:
4f:cd:0d:b3:06:ca:56:61:27:d1:de:c0:29:6a:c7:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:2B:49:37:12:EF:3E:C5:D0:BD:5C:8E:BB:0C:F2:A3:39:41:9C
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:77:e4:82:6c:2a:7f:17:60:d6:4b:b3:eb:54:bf:08:03:8d:
ea:f7:2f:31:9d:b1:33:53:e1:fe:86:40:28:af:17:48:b0:73:
8e:e9:90:e2:bb:42:ba:ac:db:12:89:d0:70:a2:95:85:b5:2a:
76:b8:8f:39:4d:0d:1e:be:42:88:ec:74:4d:0d:de:df:a8:8b:
8c:0e:be:b2:f4:21:37:45:4f:97:a0:5f:5b:32:5e:91:f9:f4:
ce:1c:78:ec:a6:17:e7:61:c6:ac:9b:85:80:02:3b:68:b5:33:
13:b5:a4:6d:7f:33:90:e8:67:2c:90:2e:bf:f3:46:6b:29:1f:
e1:f8:5c:7c:24:2c:c7:0a:7b:f5:6f:e3:5f:9d:6f:13:1a:7e:
9d:f3:d8:49:f5:6f:c7:e8:44:31:bc:dc:81:2d:90:c5:db:35:
3b:c4:79:7f:0d:1e:68:75:b5:cb:a5:5a:63:f7:5a:71:8b:6a:
d4:12:7b:8e:3b:b5:63:52:8f:25:ca:cd:21:fc:cc:49:88:09:
e4:52:4b:b8:8b:88:5a:1b:93:c1:cc:03:c4:b5:34:5b:0d:c5:
2a:47:3d:d8:ae:8d:3b:e1:f7:0d:59:66:e9:7f:c3:f6:91:ab:
7b:27:53:27:70:3b:f6:26:f9:f8:f8:05:02:1a:d1:37:88:25:
1b:57:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:12 2024 by rpki-client on console-fra.rpki-client.org