Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: iLakBIRvnkyq/2WVFQm4ESFaregRYf8V0evi079nEuw=
Subject key identifier: 9A:9C:1B:86:A1:D7:BF:4E:21:7F:0F:FB:FC:72:4A:8F:B4:9A:6A:DC
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0193553F5B103E8423C466D2F34FC739F657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0AB5
Signing time: Fri 22 Nov 2024 19:00:35 +0000
Manifest this update: Fri 22 Nov 2024 19:00:35 +0000
Manifest next update: Sat 23 Nov 2024 19:00:35 +0000
Files and hashes: 1: I-JQXy6tEOcDXgxYKhySArzD6UA.roa (hash: LQ2X2wdZCxXilZKOOcbl9bjtjuS4deqjUrvrx7VoSoY=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: L9qfaLOtB6FUSjjU+twHApEbPnas1mqExKddF3XjifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:5b:10:3e:84:23:c4:66:d2:f3:4f:c7:39:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Nov 22 19:00:35 2024 GMT
Not After : Nov 23 19:00:35 2024 GMT
Subject: CN=9a9c1b86a1d7bf4e217f0ffbfc724a8fb49a6adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:dd:87:70:6e:21:ab:5d:5f:3d:5c:fe:bb:
b7:60:f6:99:8b:6e:d1:a4:c9:b9:28:93:bf:19:4e:
75:13:53:61:26:a6:4a:2c:9b:92:0e:87:b1:70:a3:
a7:ed:6d:cc:8a:6c:3b:d7:ff:33:5b:5c:78:7f:bf:
83:49:a1:41:3b:4b:7e:55:d5:86:5b:ce:4a:06:49:
fb:c1:69:45:5f:f5:fc:20:ca:2d:d7:12:74:ad:32:
d2:1f:6c:9e:fa:cd:c2:0c:c3:b4:35:87:c1:4b:4d:
01:d8:4c:f0:f7:3a:a8:ae:0a:c0:d6:3c:8d:dc:3c:
4d:d0:46:f0:06:d3:d8:64:e4:5f:ac:6d:3d:7c:43:
60:ca:bc:a0:5d:54:7e:32:09:e6:cf:c8:97:b9:8c:
0e:33:14:64:1e:85:12:cd:75:fb:ce:e1:c6:ec:5c:
7d:98:61:06:c3:3e:a7:e7:98:63:fb:86:4e:5d:ad:
ee:ca:a6:b8:05:3b:60:cc:b6:51:45:34:29:43:4b:
07:3b:3c:b3:55:b9:00:f9:d9:e6:2b:c4:0e:d6:80:
8f:2e:da:2b:19:42:f1:e3:75:2e:6c:3b:12:8a:fa:
15:9c:1c:ba:2a:4d:d7:25:0f:fe:25:23:39:ab:93:
60:ee:35:37:0c:7a:54:df:32:31:e8:13:a3:56:9a:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:1B:86:A1:D7:BF:4E:21:7F:0F:FB:FC:72:4A:8F:B4:9A:6A:DC
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:3f:03:4c:59:cc:09:68:5f:7d:c1:96:71:2e:96:26:74:
6d:15:4c:e3:7c:b5:de:2b:b5:b4:1a:61:20:60:68:b1:ec:70:
fa:ec:f5:01:3f:33:f8:22:e7:a7:e5:2c:02:7b:6d:56:8f:09:
b7:66:83:e9:7e:8e:7d:31:c9:b3:82:a0:0e:99:43:84:e2:a0:
99:86:fa:1f:da:b1:fe:28:ca:aa:22:47:2b:03:b2:50:8b:11:
52:11:02:b7:14:71:4a:16:32:61:e6:ba:fb:f5:86:b2:dc:48:
43:05:ce:10:b3:2f:94:8e:13:51:67:de:7b:87:49:17:b9:7b:
1a:61:41:bb:d0:e3:b9:e9:87:54:6a:01:85:4b:07:7c:f1:ef:
e3:76:4a:39:33:03:31:86:89:2a:31:51:31:a2:69:36:0d:49:
f9:f2:37:ad:df:8c:66:e5:47:5c:c4:10:84:24:da:21:4b:eb:
1d:2e:3d:10:ac:b0:44:82:f2:39:59:b2:8a:e9:3c:68:e5:5f:
fc:a5:d7:19:e8:5a:28:92:de:46:08:10:be:ee:23:30:73:32:
02:cb:2a:3b:1c:9b:27:e0:08:67:8e:4e:b2:d7:b5:5a:dc:9a:
4b:ce:06:ad:9a:68:ed:72:10:b1:36:a8:36:93:3d:93:64:23:
c5:96:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:39 2024 by rpki-client on console-ams.rpki-client.org