Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: 168qtUBOMR7fH3zfJXcNJU41tX8lBj8TqKY57fo5OpQ=
Subject key identifier: 82:73:17:D1:18:26:E5:F0:4E:01:7F:43:FA:64:EB:F3:C1:DB:F4:44
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019355086D9DFCF5288B4A08CFDB7385DC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0A7D
Signing time: Fri 22 Nov 2024 18:00:35 +0000
Manifest this update: Fri 22 Nov 2024 18:00:35 +0000
Manifest next update: Sat 23 Nov 2024 18:00:35 +0000
Files and hashes: 1: Ad4x4tf647DJcpGM7M04miK2liM.roa (hash: FyFzo60KvbmeLFzUcEI0e31SXYduRAjQU5nFqJWsX80=)
2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: WAvUk6Rh+o2azXgxt/0U4+r8pz9aYrljcpBzW+9UMaA=)
3: X1TydY06kivx4kl5XFhYmICmxMc.roa (hash: yBIoInBNlMcfcJvd9Er23Vtfoz5A27CnTDnIp4A5ufc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:6d:9d:fc:f5:28:8b:4a:08:cf:db:73:85:dc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Nov 22 18:00:35 2024 GMT
Not After : Nov 23 18:00:35 2024 GMT
Subject: CN=827317d11826e5f04e017f43fa64ebf3c1dbf444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:63:24:08:77:7d:1c:0c:da:f5:a3:8c:e7:
c1:fc:71:9f:d7:54:0e:9d:6d:7f:b3:cb:a4:45:bc:
a0:09:1d:b9:f7:18:92:1a:21:b7:9d:85:c5:35:b7:
f9:42:41:30:f8:a2:f3:c4:04:b8:e4:bb:9a:02:67:
e7:e2:8b:ca:db:f3:7f:2f:57:68:83:80:f4:60:e2:
97:ed:f7:43:b4:32:94:6e:78:e7:6f:99:0e:55:e4:
20:68:af:8f:7f:d2:c1:b5:1e:05:cd:3d:ae:ca:e7:
67:2d:a0:38:08:48:ea:2d:e2:ef:34:e3:78:18:8c:
c4:b6:d3:6e:a6:8e:35:bb:fe:f6:e4:21:87:89:49:
8c:41:48:3f:08:c9:6d:5b:44:3b:06:d1:36:ee:e4:
9e:8a:29:1a:6a:c3:05:ba:24:28:ad:b2:0f:ee:29:
89:0d:f3:0f:43:53:cc:fc:ae:07:67:3d:40:ad:8a:
9d:8c:ee:61:10:63:ce:f4:5d:03:c6:09:97:ff:44:
48:2b:08:f6:d8:ad:77:24:f3:8e:83:d9:94:81:07:
60:db:c1:21:79:c6:ab:cb:47:14:04:ac:5d:c4:67:
89:78:b5:66:fa:e6:2c:69:c2:eb:c5:f6:5b:82:2f:
db:16:6e:8a:6f:56:53:bf:28:26:13:42:90:33:0b:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:73:17:D1:18:26:E5:F0:4E:01:7F:43:FA:64:EB:F3:C1:DB:F4:44
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:e3:8d:81:e9:ee:ec:49:ca:83:99:46:29:6b:30:a6:e7:
65:53:c6:d5:b1:20:36:a3:52:b1:83:54:2f:12:c7:da:3c:0c:
cf:09:0a:28:ea:38:64:e4:22:bc:2b:e9:d1:c8:bc:f1:c1:c5:
54:3e:49:fd:3d:2e:fa:90:be:4b:35:9d:70:4b:bb:79:cb:07:
a0:00:84:56:de:1e:31:77:c1:84:d4:83:2b:e2:71:a6:de:1c:
70:50:d2:e7:ce:f9:9d:f1:b0:b6:e3:9c:e1:ee:19:8b:e5:9e:
db:20:4e:42:e8:25:38:31:78:5c:d9:c4:aa:a6:6c:aa:5c:65:
ef:2f:09:20:f1:7c:cb:ab:98:85:af:19:a7:93:26:a5:19:f4:
ff:e3:16:25:fb:78:37:88:03:2f:72:b1:b5:5d:93:8e:e5:ad:
98:3d:1b:dc:aa:50:9b:75:74:c4:7d:31:0a:a2:32:d3:9f:23:
0d:f0:71:b9:7d:35:9b:85:2b:04:59:ea:44:1b:0b:a7:52:e2:
d1:4c:11:b3:5a:22:38:bb:16:8d:4d:48:5e:a0:8f:1a:3d:47:
b7:84:27:dd:ff:b0:8c:f7:ad:90:b0:e7:24:b0:95:dd:07:06:
f9:b6:d7:56:17:2e:82:e6:4f:f2:0a:1d:7a:4b:14:3a:23:2a:
64:ef:1a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCG2d/PUoi0oIz9tzhdxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2
MjUwZTYwHhcNMjQxMTIyMTgwMDM1WhcNMjQxMTIzMTgwMDM1WjAzMTEwLwYDVQQD
Eyg4MjczMTdkMTE4MjZlNWYwNGUwMTdmNDNmYTY0ZWJmM2MxZGJmNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF9jJAh3fRwM2vWjjOfB/HGf11QO
nW1/s8ukRbygCR259xiSGiG3nYXFNbf5QkEw+KLzxAS45LuaAmfn4ovK2/N/L1do
g4D0YOKX7fdDtDKUbnjnb5kOVeQgaK+Pf9LBtR4FzT2uyudnLaA4CEjqLeLvNON4
GIzEttNupo41u/725CGHiUmMQUg/CMltW0Q7BtE27uSeiikaasMFuiQorbIP7imJ
DfMPQ1PM/K4HZz1ArYqdjO5hEGPO9F0DxgmX/0RIKwj22K13JPOOg9mUgQdg28Eh
ecary0cUBKxdxGeJeLVm+uYsacLrxfZbgi/bFm6Kb1ZTvygmE0KQMwtzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJzF9EYJuXwTgF/Q/pk6/PB2/REMB8GA1UdIwQY
MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt
OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm
LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOHjjYHp
7uxJyoOZRilrMKbnZVPG1bEgNqNSsYNULxLH2jwMzwkKKOo4ZOQivCvp0ci88cHF
VD5J/T0u+pC+SzWdcEu7ecsHoACEVt4eMXfBhNSDK+Jxpt4ccFDS5875nfGwtuOc
4e4Zi+We2yBOQuglODF4XNnEqqZsqlxl7y8JIPF8y6uYha8Zp5MmpRn0/+MWJft4
N4gDL3KxtV2TjuWtmD0b3KpQm3V0xH0xCqIy058jDfBxuX01m4UrBFnqRBsLp1Li
0UwRs1oiOLsWjU1IXqCPGj1Ht4Qn3f+wjPetkLDnJLCV3QcG+bbXVhcuguZP8god
eksUOiMqZO8a9g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:31 2024 by rpki-client on console-fra.rpki-client.org