Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: iWQCfmFsNj8RPgWww2iXRu/6hM2jL4y2uDVgIXqM/9E=
Subject key identifier: A7:4F:E6:8E:98:03:8D:4C:53:EC:BB:DE:C5:92:E9:80:56:80:21:0E
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01935764EB0212501ADF1C41AA297E2D9068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 05:00:51 +0000
Manifest this update: Sat 23 Nov 2024 05:00:51 +0000
Manifest next update: Sun 24 Nov 2024 05:00:51 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: IWoPMCGF/9baoOYDpo8v6PzcRb+E6V4z/MCJbFOEh7w=)
2: UXThVNgMwyMv9MtpPXM4Qd4niWU.roa (hash: hdMqPvXVFigRo2iCCuN7H5TzcOlZvXVdCjcN2etOcr4=)
3: WU49IE_7GcOYNYwRw3RP3mN1H3Q.roa (hash: YHH8Jth9g+JM0DsX4aa0KhMxLXNyRppab/vddrDAjIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:eb:02:12:50:1a:df:1c:41:aa:29:7e:2d:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Nov 23 05:00:51 2024 GMT
Not After : Nov 24 05:00:51 2024 GMT
Subject: CN=a74fe68e98038d4c53ecbbdec592e9805680210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:dc:69:2a:bc:a3:5f:6c:0f:55:7e:44:5f:
ce:a2:31:b2:78:8d:5b:35:42:5c:b0:d1:9b:7d:0c:
3a:07:3a:62:98:9a:1e:be:79:88:c1:b4:37:34:af:
94:c9:4d:50:78:b9:44:2f:f5:94:7b:88:f6:8f:82:
41:5c:4b:20:7f:7c:c2:82:f6:f4:c9:f3:56:a7:de:
9d:a7:ad:5f:0d:38:2b:ef:bf:cb:e7:5f:4f:63:7e:
5d:d7:ff:12:f5:61:42:b3:2c:42:85:11:89:84:5d:
8c:2c:da:b6:d8:8f:3f:34:f1:c1:f6:4d:dd:72:0c:
ee:ba:fb:60:6c:30:c9:84:96:f1:15:64:91:17:31:
7c:26:df:35:18:5a:46:64:e6:45:b0:6c:6d:9a:44:
47:82:6a:14:b0:92:e6:00:e5:73:40:c4:b7:b5:ea:
79:d6:57:2b:9b:0e:d1:6a:41:74:90:1d:f0:90:b4:
1d:fd:b4:eb:01:d2:92:b5:42:89:32:79:fb:a1:de:
07:d7:e7:59:26:62:18:6d:9b:ce:b1:01:6e:6f:c4:
db:57:cc:a6:13:69:03:e6:11:d3:78:28:d4:84:f7:
89:60:c3:a7:6f:d9:c7:41:c8:03:4d:93:37:c3:d6:
df:50:77:55:56:b1:75:31:86:48:84:97:d8:7a:09:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:E6:8E:98:03:8D:4C:53:EC:BB:DE:C5:92:E9:80:56:80:21:0E
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0b:41:ca:e1:49:04:18:d3:c5:a2:b3:88:c6:a8:60:3e:4f:
f2:02:15:88:28:fe:f8:de:fb:c9:d6:c1:cf:83:ef:ee:66:76:
3e:6c:62:e2:16:09:09:62:df:03:57:f0:98:32:60:4e:88:07:
ac:c4:20:34:a7:40:12:5b:1f:d9:85:56:1f:16:97:db:3d:21:
8d:14:0a:8c:0d:e2:21:20:e8:85:69:45:92:02:f7:fe:32:1d:
5b:c7:d2:c8:0a:51:fe:15:4e:6e:a8:68:de:29:24:ea:03:39:
2e:78:2b:8c:4e:99:28:42:cf:c9:7c:61:82:01:c6:6a:66:34:
9c:8e:93:8a:cd:ae:b1:31:8b:8f:39:c4:9f:44:d5:96:77:bc:
cb:59:97:db:4d:3c:33:fe:93:8c:39:2f:78:14:8e:c3:19:27:
e3:98:24:99:f4:bf:5a:f0:0f:39:31:9d:82:c4:44:7a:87:3c:
ae:b7:b7:5b:1f:5e:60:95:9c:5f:c5:22:d7:59:e0:8d:db:15:
5a:7c:30:77:60:d6:52:56:6e:76:18:23:d9:fd:1a:a1:a5:08:
b1:ad:39:df:9d:f0:e6:85:ea:80:9b:4b:f8:db:d2:4b:1d:06:
dc:87:e0:a8:f7:e3:5e:eb:ea:ee:06:d2:e1:17:71:4c:2f:c7:
83:65:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:53 2024 by rpki-client on console-fra.rpki-client.org