Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: OIqOPfoEq0ZkgU/keBUvTiWHBZSWSgK7xtb34DWE2qI=
Subject key identifier: 58:E3:F4:3E:C4:E6:04:36:DB:16:E6:FE:52:86:CD:94:26:EB:2C:04
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019358776C3110C6E775E6EAF0CAFAFAE7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 10:00:41 +0000
Manifest this update: Sat 23 Nov 2024 10:00:41 +0000
Manifest next update: Sun 24 Nov 2024 10:00:41 +0000
Files and hashes: 1: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: Q/s3uHYvSbak7GbcdlHbIRM7nWfbVBa+2XHLdHhvo5w=)
2: _ldtQwl9y-HwmTDYrO_es-0h4ag.roa (hash: iKh9dvgnlfWnRVzp8h65Yqc58F7EYGuJ4m+MDsB5ruw=)
3: vMVRWVkATqZgPHlyloRumD0iMR8.roa (hash: jevp6gzl6YSrrRh2kLisW1sVecM6PORYvDmBcVRU298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:6c:31:10:c6:e7:75:e6:ea:f0:ca:fa:fa:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Nov 23 10:00:41 2024 GMT
Not After : Nov 24 10:00:41 2024 GMT
Subject: CN=58e3f43ec4e60436db16e6fe5286cd9426eb2c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:e7:19:cb:6c:46:44:bb:68:71:d1:cb:14:
25:a3:07:72:21:b8:f2:4c:01:89:58:fb:97:07:eb:
50:bd:eb:d1:e8:62:f8:d0:ec:3e:5f:96:bb:e0:30:
85:02:df:a7:1e:2f:a2:d7:4a:f4:64:da:8d:9a:e2:
b3:75:a7:af:7f:aa:78:43:24:56:36:6a:88:0e:83:
cc:42:45:e4:d8:48:30:21:1d:5d:5f:dc:7f:ba:35:
ae:2f:07:93:28:bc:6c:c2:f0:34:ea:05:1b:e0:5e:
67:8f:76:fc:90:ed:d6:8a:ad:83:87:d8:fa:15:b1:
d2:a1:94:03:27:ad:68:14:9e:8c:0c:f3:42:fc:09:
e1:5f:9e:b2:19:51:9d:78:eb:5b:5f:01:26:98:b3:
7b:2a:1f:61:cb:f5:0f:16:c0:30:f2:38:36:3b:31:
e0:8f:ed:95:d0:d0:17:7a:b1:15:9b:e4:b6:35:89:
6f:9e:10:09:5e:5f:3e:23:62:82:5a:26:54:1b:cc:
94:cf:f4:a1:9b:19:f9:57:fe:9a:d6:4c:a7:37:d8:
32:9e:fe:41:61:df:86:4e:68:83:ef:2c:6d:ef:73:
c1:fc:f6:fd:cd:4e:74:1c:57:27:80:e8:2a:8e:fe:
f2:41:2f:a9:0e:95:e6:df:74:9b:1f:6e:3a:03:ea:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:F4:3E:C4:E6:04:36:DB:16:E6:FE:52:86:CD:94:26:EB:2C:04
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:51:80:a1:f7:03:83:04:1c:1d:b2:db:fa:e0:40:08:5c:
c5:88:ba:ed:45:ba:d9:9b:97:d2:b8:49:46:d4:5c:74:8d:d7:
5e:75:40:fa:12:67:68:9f:6d:b5:57:10:4a:62:cf:c1:4d:15:
08:b8:b2:8d:fe:9b:8d:12:ef:ac:b5:75:50:29:bc:f1:36:4c:
02:3a:7a:17:32:64:91:14:3c:2a:3c:8d:96:19:df:f2:9e:fb:
65:6f:9e:42:6e:5b:a9:c2:62:7c:ee:9c:f1:ff:c9:bb:fa:6e:
34:09:48:9c:65:b7:df:0e:34:18:4d:e7:ff:97:cd:ff:79:2a:
44:23:a9:0e:5d:6c:79:d6:52:53:61:f1:d2:84:34:ff:f4:e2:
e2:0a:24:d6:79:98:05:72:f2:49:d6:e6:8b:5d:b5:76:5c:92:
6c:fe:02:dd:69:57:e3:37:4b:34:fd:c9:3c:c6:ba:a4:2c:56:
32:2e:71:20:59:f6:58:d8:96:3a:89:4e:12:7f:c2:30:52:5c:
30:a7:c1:e1:07:ae:73:0c:a6:9b:be:18:e4:39:83:3c:62:77:
0c:f7:45:78:b2:3f:14:28:6f:48:00:15:ab:2f:1e:44:f3:c5:
b3:f2:d0:b7:87:3e:8c:21:0e:6d:54:3a:fd:cc:ea:47:07:bc:
6d:6f:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:28 2024 by rpki-client on console-ams.rpki-client.org