Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: YtHXjq7z+duhfmIx9VrC89JD+SvZQQVOo4bHP+XFbpc=
Subject key identifier: 85:93:DD:92:92:DA:CD:69:26:75:F6:34:84:08:4A:9A:9F:EC:2C:32
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 01935688FA82C11BEE7ABDF229C1A52D4072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 01:00:37 +0000
Manifest this update: Sat 23 Nov 2024 01:00:37 +0000
Manifest next update: Sun 24 Nov 2024 01:00:37 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: JMM6Y13nUMTdkeGrifo0DNhvahTD+QL9ZgKG52AFpwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:fa:82:c1:1b:ee:7a:bd:f2:29:c1:a5:2d:40:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Nov 23 01:00:37 2024 GMT
Not After : Nov 24 01:00:37 2024 GMT
Subject: CN=8593dd9292dacd692675f63484084a9a9fec2c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:83:d0:fc:8e:dc:04:15:a1:63:a5:0e:b0:
77:fe:f4:d1:47:95:5e:f6:30:13:f7:1a:d2:8c:e3:
9b:29:a7:2b:c0:e4:54:9d:50:04:e9:25:90:72:c6:
d4:d7:c3:d1:56:4a:23:66:7c:2d:76:5c:e2:8d:0b:
bc:52:d3:fa:18:1d:49:c9:49:f9:28:28:c9:df:56:
af:4f:b8:48:6e:71:21:ec:e3:91:3e:82:31:93:29:
28:9a:7e:0a:a8:df:ce:33:86:d6:33:c4:4b:1a:f8:
d3:87:c3:8d:7c:84:89:75:31:ac:5b:5c:8e:70:67:
74:43:b9:74:cc:32:b1:61:e3:c5:32:13:c6:0a:b4:
15:1f:5a:06:e8:45:84:aa:ed:8c:16:01:b9:56:93:
f7:e0:91:31:a6:fc:35:2d:75:f5:08:52:db:c9:9a:
39:d3:3f:c3:4a:42:94:3a:fa:66:16:0f:02:1b:4b:
98:9e:57:d0:ab:e6:2f:ac:ba:b3:c5:48:12:ff:2d:
be:6d:8e:29:fc:7d:20:bb:ed:42:2d:9b:cb:72:d5:
24:3b:90:bc:ef:c4:69:35:36:7e:72:28:26:c2:e9:
ef:25:44:91:bc:22:9d:0c:de:25:71:d7:93:57:70:
fc:3c:cf:65:2b:9c:67:17:00:8b:c4:e2:f4:f9:b4:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:DD:92:92:DA:CD:69:26:75:F6:34:84:08:4A:9A:9F:EC:2C:32
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:71:47:0d:55:b1:8b:52:52:90:71:f3:2b:7f:46:f4:df:
e8:dd:85:67:01:07:3a:88:44:d2:7e:f9:73:50:ac:09:0a:4f:
df:42:86:b2:65:d8:98:5e:93:ad:d9:ac:4c:80:24:3f:d2:99:
cb:c5:fa:88:10:13:12:e2:e3:e5:dc:13:90:78:f6:cb:f1:6c:
7f:b4:52:7e:e7:93:ab:c3:c9:f6:bd:8b:26:af:75:55:98:75:
10:00:2d:1d:5b:8f:8f:01:61:e2:b3:2d:70:0d:5a:5b:94:ca:
6e:e5:93:7e:9f:1a:42:d9:ea:59:2a:ab:29:60:72:9e:4c:8b:
9f:6c:e8:89:0a:90:a1:f8:ca:66:b4:3f:c9:86:a1:5d:ea:fa:
a2:97:3c:44:42:79:3b:cd:19:28:ca:d4:c4:67:50:d3:86:8a:
72:67:93:36:ed:72:7d:6b:4c:af:39:65:9f:d5:e0:ca:3f:78:
f8:3d:ee:71:2f:ac:bd:ef:60:ac:84:51:ee:17:cb:2d:ad:ff:
51:08:dc:29:7e:cf:66:0b:00:71:41:11:e2:88:2a:58:a2:5c:
ee:46:6e:33:4b:fe:82:ce:ed:c3:8e:b4:2d:8a:0c:42:d3:73:
35:36:7f:7b:48:8d:f2:90:51:0a:2d:2a:67:47:45:75:97:a2:
a5:2a:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:43 2024 by rpki-client on console-fra.rpki-client.org