Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
File: TqcPEdltXfB9x3s-04WTOZ0_Uao.mft (raw, json)
Hash identifier: 2+zEJ4U1ydh83SSoBBbHeig6PkweHLJlvltXlUJ1NL4=
Subject key identifier: 66:50:26:D2:88:78:5B:8F:AC:4C:C1:02:4D:52:9F:5E:1E:20:01:42
Authority key identifier: 4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
Certificate issuer: /CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Certificate serial: 019356889D11C171588404443DD1AE458DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
Manifest number: 0F78
Signing time: Sat 23 Nov 2024 01:00:13 +0000
Manifest this update: Sat 23 Nov 2024 01:00:13 +0000
Manifest next update: Sun 24 Nov 2024 01:00:13 +0000
Files and hashes: 1: TqcPEdltXfB9x3s-04WTOZ0_Uao.crl (hash: tF/6ASu8yuQZuQ8+VGvNDKuLETWvGC6QyUILx5qsEMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:9d:11:c1:71:58:84:04:44:3d:d1:ae:45:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Validity
Not Before: Nov 23 01:00:13 2024 GMT
Not After : Nov 24 01:00:13 2024 GMT
Subject: CN=665026d288785b8fac4cc1024d529f5e1e200142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:9e:fd:49:71:96:03:2b:98:3e:82:79:6e:
08:38:cc:57:78:95:58:39:38:aa:41:40:1a:ad:32:
93:88:02:4b:b1:ac:58:9e:1c:6b:ce:73:35:65:d4:
6c:ce:5c:e8:c2:dd:a2:33:c3:89:3a:8b:ce:a1:c3:
78:a0:4f:0c:d3:3a:38:d7:50:08:9d:00:c8:c6:43:
ae:3e:4d:25:6b:80:68:f0:fd:90:b3:ad:d5:12:1c:
7a:95:be:19:88:da:e9:f6:a3:05:65:2a:17:79:79:
25:48:40:dc:b7:cc:62:6f:63:35:8e:0e:2a:65:b2:
ca:99:c1:23:8e:80:ad:f7:73:9c:f3:da:45:5e:87:
7c:d6:6b:3e:16:2e:9c:40:6d:51:f8:63:73:ec:db:
db:56:92:cc:9d:3d:6c:a8:cd:a3:bd:b4:2f:19:b8:
a9:31:c0:83:91:d7:6e:d1:f9:37:c3:83:61:1a:f2:
54:cc:4a:8a:78:be:51:37:31:cd:da:d2:e7:b0:d3:
da:5c:2a:4a:23:be:cd:d2:9b:9b:07:7e:00:05:6f:
1b:68:ab:29:61:cd:04:2f:e1:8a:2c:ef:29:c0:1f:
ac:0d:6d:95:25:b3:58:4b:96:d2:b8:67:ea:7f:89:
ba:c3:1e:aa:df:96:e3:85:da:1c:ce:56:24:30:7e:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:26:D2:88:78:5B:8F:AC:4C:C1:02:4D:52:9F:5E:1E:20:01:42
X509v3 Authority Key Identifier:
keyid:4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:dd:3c:90:77:2f:ec:dd:76:b4:9f:0f:f8:64:13:2e:2f:
90:8b:ed:b1:5f:93:f9:be:16:eb:19:5f:f9:b2:ac:53:b9:a2:
bb:66:e9:ea:de:af:01:62:52:84:ea:94:75:3f:f8:d4:b2:00:
c8:96:fb:54:80:6e:a1:07:29:00:f7:54:3d:8f:28:97:e8:50:
e1:ad:ae:2f:46:4a:5e:34:d6:96:53:79:4b:4e:b8:8e:ec:52:
68:7a:f8:3e:8f:55:07:55:d4:37:5a:a9:b6:54:9d:04:ad:dc:
1c:ab:69:cf:aa:1d:7b:0f:7d:65:62:db:be:07:e7:56:7c:58:
15:6f:3b:e3:b7:e0:5a:98:d1:e4:12:71:13:6b:bb:09:23:df:
76:96:e0:d3:68:17:00:87:9f:64:69:19:4d:4f:78:01:c6:41:
cb:4e:49:8d:de:89:f1:0c:8e:52:b3:b1:e4:37:48:6e:39:46:
9a:c1:e3:c9:cf:df:22:be:c0:60:03:c8:71:97:dd:49:69:07:
d5:0c:36:34:8e:0a:91:be:a3:f3:6c:f8:87:73:23:72:90:8c:
56:8a:79:2e:f2:50:d5:0e:55:c3:30:fb:35:4f:36:10:12:5e:
1c:08:25:ab:4d:e6:30:01:0d:21:fd:1d:b8:15:d1:5f:67:d6:
c4:e6:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:42 2024 by rpki-client on console-fra.rpki-client.org