Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier: Z3YEqAg35UPyr+YS0wVRZDgf7U8BoIuQoyxiG9tAmLA=
Subject key identifier: DD:01:8C:87:92:39:D7:C4:09:9B:7F:83:51:60:81:0F:80:DD:EF:A4
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial: 01936BC83EAE3F3E86671938089F71BB472F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number: 0C67
Signing time: Wed 27 Nov 2024 04:01:45 +0000
Manifest this update: Wed 27 Nov 2024 04:01:45 +0000
Manifest next update: Thu 28 Nov 2024 04:01:45 +0000
Files and hashes: 1: DjuvhFfkkO4Ih26pacKZAlbpnAI.roa (hash: BQoaPMXz9ChG2r97W5uG2Awm2OtfEcl25U80S+3iTUY=)
2: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: Hjsyi1P8n8TA4nFtnuGwQcRuGqdq+YOd6JqJhRrI34M=)
3: a0d8JnFw_JIh9DqYAbHTQbD4jMw.roa (hash: VlAMzhV1+zuZi3Qss72Au9sqyPgTDP4S8LCJWUP9Gp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c8:3e:ae:3f:3e:86:67:19:38:08:9f:71:bb:47:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
Validity
Not Before: Nov 27 04:01:45 2024 GMT
Not After : Nov 28 04:01:45 2024 GMT
Subject: CN=dd018c879239d7c4099b7f835160810f80ddefa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:bc:b1:a1:d4:8b:f0:ba:58:4d:d6:47:49:
4d:6e:51:42:90:31:10:97:c7:27:cb:94:5f:4e:ed:
6d:54:d6:e8:63:90:d4:08:1e:6a:44:14:cc:1d:37:
e6:7b:fd:7a:85:0f:65:10:0c:07:79:28:d2:58:ab:
fe:99:f7:17:97:74:28:b4:24:79:f6:63:a7:0e:cd:
c8:e7:d0:9e:d0:28:5e:0e:9d:12:7f:16:37:95:83:
cd:9c:c1:bd:6f:7f:f1:33:b6:68:29:4f:34:86:e3:
b6:bb:9e:70:2b:04:04:3e:0b:1e:fd:d9:5a:bc:eb:
cb:50:a9:fa:e1:f3:09:d3:d8:c2:79:d4:ec:46:4d:
66:02:be:3a:aa:78:19:52:7d:2e:06:72:01:9e:0b:
39:9e:54:85:30:49:d9:ab:58:ed:a0:ae:51:67:96:
97:47:f2:69:21:ca:4e:00:6d:bc:de:80:4c:41:ab:
4a:eb:3b:ad:d4:de:6c:4d:ee:6b:d2:e3:dd:60:8f:
18:20:c9:f1:fd:37:74:ff:42:87:af:a4:44:ea:69:
d2:ba:a3:a6:85:db:6c:5f:05:9b:03:d4:44:f1:53:
f1:f4:b7:55:3a:8c:2a:46:85:33:6f:7b:d9:77:b1:
77:e4:a3:a1:27:b9:4d:98:a6:39:01:77:5d:ef:41:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:8C:87:92:39:D7:C4:09:9B:7F:83:51:60:81:0F:80:DD:EF:A4
X509v3 Authority Key Identifier:
keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:64:3e:43:b8:9a:4f:ea:e4:2a:03:f6:c6:79:a7:a8:5a:
00:b6:d9:7c:7e:dc:47:38:c9:8d:42:79:b8:54:d6:3e:d5:f3:
58:30:aa:c4:30:f1:5b:54:3f:15:28:42:5d:b9:9b:a9:cc:9b:
6f:87:d4:bc:3d:f0:3b:2e:fa:75:20:8e:52:d3:73:9e:5a:0e:
da:99:e5:6e:8a:c1:ee:9a:e5:27:d8:0d:a1:dd:e2:d2:73:02:
e3:eb:71:66:8d:78:d0:ce:d1:5d:dd:f0:d2:f9:48:b9:34:fd:
2e:67:3e:66:f4:62:5e:6f:1d:62:33:4f:db:41:56:f3:d2:f2:
5d:dd:27:05:bf:1e:40:16:18:e5:91:17:1c:70:5a:00:ee:77:
20:93:b4:86:6f:af:d1:9f:6f:7f:36:de:ad:2f:75:b8:74:a9:
02:7d:66:a1:4e:a8:c8:92:7b:af:37:2e:3e:e9:6e:d9:57:43:
0e:8b:82:d4:fb:df:83:5f:e8:38:bb:f3:9e:fd:00:0d:f8:16:
c9:9c:71:2c:b6:33:d4:25:04:e9:db:6c:c5:89:b3:94:e9:2f:
d5:6c:46:86:31:c0:c8:3b:8c:63:96:41:a3:47:ac:77:1a:29:
24:9e:eb:8d:54:df:a5:99:02:a6:10:53:e9:f2:2b:6d:07:21:
07:e8:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:29:54 2024 by rpki-client on console-ams.rpki-client.org