Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: RP6wx3PRnqRrNMzglWEur+KT87X8MHW3oIcWJtoJQv0=
Subject key identifier: B6:2A:76:CA:6C:EE:D8:15:62:7E:8F:8C:C8:CB:A7:9A:6A:1B:6D:32
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019356BF9D269314790969C9F28147AE32FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 02:00:18 +0000
Manifest this update: Sat 23 Nov 2024 02:00:18 +0000
Manifest next update: Sun 24 Nov 2024 02:00:18 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: Qn5TbjcW31Ty3PAc3kfA1k+fHWY/sgTN6FcfgzUk3Kk=)
2: w5Iif1ZxML6XlUT7lkLPtcg2Ilo.roa (hash: lCbbVuotECWAhYSwAaQTnBaD2VQeEj2ja5vntpa4TBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:9d:26:93:14:79:09:69:c9:f2:81:47:ae:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Nov 23 02:00:18 2024 GMT
Not After : Nov 24 02:00:18 2024 GMT
Subject: CN=b62a76ca6ceed815627e8f8cc8cba79a6a1b6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:41:a5:01:61:2e:c7:94:f1:a7:79:ea:da:
73:eb:6e:ed:1e:6f:61:64:2e:ce:46:a8:3a:9b:ad:
14:43:71:62:2b:1b:2f:22:de:4d:e2:ea:3c:9c:41:
e0:fe:37:59:18:f9:da:b0:4a:cf:e6:30:0f:8b:29:
1e:42:28:60:99:a2:e7:11:a9:2d:5d:2f:01:9c:1b:
3c:a0:f1:07:57:e3:2b:7a:9a:31:00:bb:6b:6a:a9:
bf:bb:35:2b:2e:11:d3:aa:d7:19:45:d4:9d:f5:43:
bd:84:86:f9:3e:28:8b:2b:ae:11:dd:a2:71:96:f8:
5e:4b:8b:d5:1f:8b:4c:67:0c:75:33:7e:00:2f:87:
3e:5c:4f:0b:96:4e:27:b7:82:b7:6e:ea:ba:93:17:
37:26:c8:67:20:01:b2:44:e7:88:ef:1b:36:4c:d6:
52:94:5b:92:8d:7d:c3:a4:83:53:25:be:23:a0:15:
10:e6:57:a6:af:65:c6:f1:7e:82:94:c7:88:0d:fb:
75:be:35:2e:92:91:5d:c1:69:83:d8:f7:9f:76:aa:
9f:01:4c:74:a8:26:2e:c9:75:be:14:66:40:11:c6:
f7:ba:35:f8:9e:86:23:db:07:9d:14:cf:0c:ad:f8:
25:da:53:7e:b8:7f:b0:09:a6:5e:bd:a4:81:da:14:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:76:CA:6C:EE:D8:15:62:7E:8F:8C:C8:CB:A7:9A:6A:1B:6D:32
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:48:eb:1f:9d:47:f3:a3:9b:68:ff:18:0e:a6:71:35:1c:93:
8a:05:04:3b:5a:8c:68:a0:94:13:b0:59:fe:ae:78:92:d3:bd:
4d:f7:90:39:a7:99:b7:0f:8c:c9:18:5d:05:15:f5:37:eb:92:
39:f4:e6:48:eb:8a:42:63:90:79:86:6f:71:14:0c:39:96:90:
af:00:de:4f:55:45:f0:0f:8c:9b:ff:27:74:6e:8c:e4:3d:ee:
77:07:c4:e1:06:a6:3f:f7:82:a4:4f:f6:0b:95:01:c6:83:66:
87:4e:9f:66:93:15:90:41:f8:d1:53:8d:c6:c0:5a:76:53:59:
df:79:7c:aa:09:2b:8d:9b:76:63:4c:c2:42:ff:ec:e2:f7:1d:
78:b8:f6:21:09:69:8b:f4:c6:96:63:a3:53:0c:41:da:ae:52:
3a:fd:86:57:7f:ab:6b:23:f6:3a:91:48:84:7a:fa:f5:fd:da:
fd:b8:3e:7a:25:d8:b0:1d:68:0e:e0:4f:af:de:00:99:de:02:
46:c0:b5:56:b1:db:d6:ad:fe:aa:d7:3c:22:8c:28:d1:29:06:
fe:a5:e0:c7:46:6b:ee:d5:da:47:da:96:69:da:e0:e4:76:1e:
0c:ba:e3:a0:bf:31:d9:d8:3e:88:55:7c:9d:21:f6:67:5e:d9:
e5:cb:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:39 2024 by rpki-client on console-fra.rpki-client.org