Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: cxt5vcp4v4IUmJpUPWHBLtIueribO8rnSDVErucpiE0=
Subject key identifier: 0A:83:FF:E6:BB:AB:1D:7D:7F:9D:10:21:2B:E3:C2:CB:4F:13:0E:22
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019357D24EC4645088F44A418E31D7745080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1036
Signing time: Sat 23 Nov 2024 07:00:20 +0000
Manifest this update: Sat 23 Nov 2024 07:00:20 +0000
Manifest next update: Sun 24 Nov 2024 07:00:20 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: FZYtkoDhT26vnrks8u+ED4hVi6p2GSzjUeZhn+40Aag=)
2: ZNVYMwmbbe50fpds1CZcqc1EwBo.roa (hash: qKQhnTmSv65tclFW8AqCv+C4JVUqhh7x86snZizb3Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:4e:c4:64:50:88:f4:4a:41:8e:31:d7:74:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Nov 23 07:00:20 2024 GMT
Not After : Nov 24 07:00:20 2024 GMT
Subject: CN=0a83ffe6bbab1d7d7f9d10212be3c2cb4f130e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:a5:bc:88:2d:5b:94:10:2a:5e:d8:e8:de:
7f:7c:bf:99:e9:22:72:d3:3f:6e:a8:4d:36:9c:ef:
ac:2a:6e:49:8f:c0:7b:70:da:7c:9f:2b:e0:bc:64:
4b:d7:01:1b:a8:be:84:48:5a:31:d8:e5:c0:41:b2:
b5:31:7f:8e:e2:73:37:00:71:df:f4:73:fc:80:ba:
37:fb:c8:cc:b4:b5:c2:df:8d:e5:bf:f5:6f:a1:7e:
ed:93:e4:73:14:0e:83:f1:78:0e:c6:a8:d6:ee:e9:
5f:77:f1:7b:5b:a9:5a:94:24:6d:d8:c7:89:d2:1f:
65:b5:68:f6:d2:fc:10:10:8e:f4:b6:0b:2c:29:15:
5a:65:8f:ba:a5:e0:6a:01:48:17:83:d6:3c:14:61:
ba:78:3a:ee:c6:a8:ec:24:4e:23:0a:14:86:90:59:
64:30:35:03:f8:cf:9c:69:4c:39:22:b4:38:f5:7e:
37:ba:0b:04:b2:dc:bc:14:cc:89:88:0e:f7:a5:2d:
c1:0c:2a:79:bf:54:78:d6:f2:52:75:cf:79:cd:7c:
f2:cd:2a:87:e1:bb:60:11:4c:19:1f:d3:83:2d:91:
c7:fc:1b:43:11:f4:4a:5f:c7:87:43:5b:ae:e9:d1:
40:e8:cd:a5:6d:e7:1d:1f:53:1c:68:45:4a:f6:95:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:FF:E6:BB:AB:1D:7D:7F:9D:10:21:2B:E3:C2:CB:4F:13:0E:22
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:05:d9:cd:ad:3b:77:fa:cb:67:a8:6d:d8:db:c3:10:7b:
0e:b1:b8:d7:bc:9a:65:43:2a:da:a9:f7:aa:5a:40:65:9f:96:
9b:43:75:cc:d2:35:70:87:91:4f:a6:45:83:7e:a6:72:f4:70:
46:da:c1:a6:93:b9:b3:a0:6c:a0:b4:e4:3c:17:05:27:57:16:
8e:75:7b:97:94:13:e3:db:ec:05:0e:78:5c:74:7d:3f:e5:bd:
26:56:20:83:a5:a5:bd:3d:ff:f3:11:00:e1:e1:d1:ac:26:ef:
de:b9:3d:c3:27:fd:29:03:95:af:32:62:c1:2b:91:74:62:8f:
69:66:37:5f:fc:1a:a1:1a:86:33:f3:8b:9f:51:10:2b:b5:81:
8c:7c:53:4d:09:ff:43:40:39:49:36:ea:a9:c6:f7:60:40:94:
f4:58:3c:78:d8:ee:30:bc:4e:59:67:80:24:72:3e:7f:50:17:
2f:a7:8c:03:cd:5c:a5:11:a4:5a:dc:0f:b3:25:62:cd:37:cd:
0d:21:3b:5c:b4:f0:dd:1d:e1:f5:17:84:ee:37:4c:ee:b8:86:
72:4f:be:72:0e:e6:52:1c:ab:72:90:a0:65:59:b9:68:ea:74:
c6:33:72:b6:da:cd:46:ce:90:ff:3a:be:47:ee:57:a2:ee:7b:
40:f5:50:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:56 2024 by rpki-client on console-fra.rpki-client.org