Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json)
Hash identifier: J9aq5ou5suXME4EjJoxzzHQqxogkA7cS79rXgN3DjXo=
Subject key identifier: 89:85:B3:15:B2:EF:D1:1F:D6:60:B0:06:42:3F:74:5C:39:10:2D:D5
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 019363D6883EC3678FD869E28554EB2D9F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
Manifest number: 1273
Signing time: Mon 25 Nov 2024 15:00:24 +0000
Manifest this update: Mon 25 Nov 2024 15:00:24 +0000
Manifest next update: Tue 26 Nov 2024 15:00:24 +0000
Files and hashes: 1: CpYvFQ6Kp3v5uUZ1qExXOvV46vQ.roa (hash: Kr7Z3a/d4Vgq9wCh3pbcyc56aLcz7PdN+AVVelLeum8=)
2: J1dDrpgmhQc4QUXbkPU5Fix8yLI.roa (hash: Y3dqMh2GBdEZQYThLmTUubgvst40gaMs4nSNPrEZ02Q=)
3: JmSaixQZb_mwVrlSNBnYiUug5ME.roa (hash: s9Crc7Ls0/TERUaENGv8P5bUwB4QshZ+9Afq00OrUZg=)
4: MNCWiUq6gQAUKfN3IvQ6nOBMyiE.roa (hash: A0DqSPoi4H5dtGuhoT/6f3xcXqCZX/odJ1Ky2xFpZOw=)
5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 0/Ar/7BGo3Ms8Wf5C1h5HOwvzBmuWq6YEMfoxQvWiTk=)
6: a3vApC9D_QznOkY9l-Bx7ynuLm8.roa (hash: 0iCAJsFqBanii8slXw1lR1HrgTGm1+2kQem2xGDrwQk=)
7: cpkdxBhmnQKtAbi8HnMnMOSwwcE.roa (hash: AgBHoXPgivWjJ99L3hwKhUvvJZQ+yMQK3KeT/tYcapQ=)
8: lYWNtslVY4-FgISKZVSpm-0Bunk.roa (hash: vBVMm+B11RK4B0slA8V0QrGgHHMA0gQCtQKkrRguOKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:d6:88:3e:c3:67:8f:d8:69:e2:85:54:eb:2d:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Nov 25 15:00:24 2024 GMT
Not After : Nov 26 15:00:24 2024 GMT
Subject: CN=8985b315b2efd11fd660b006423f745c39102dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:b0:e7:c6:26:4d:6b:7d:48:78:8b:36:8a:
18:27:a9:39:66:7d:cc:1c:77:ca:58:df:59:3a:cc:
32:e4:c0:89:1f:1f:bc:5a:34:18:26:95:35:f6:2a:
19:f0:a2:7e:a1:34:27:1c:e7:30:0d:d8:9d:5a:d9:
b9:c7:59:f9:93:53:77:87:2a:e4:2e:71:b0:38:6e:
ac:81:0d:bd:31:92:ae:57:f1:64:8b:22:b8:f5:d8:
5b:b6:5e:42:36:20:1f:0c:56:9f:b3:4a:d8:be:50:
18:7e:55:8d:26:b0:aa:22:06:7b:02:86:09:c9:4f:
81:3b:62:41:8d:21:de:b6:95:54:01:b5:c2:8b:52:
b5:ba:62:5a:ff:78:d9:3b:7a:f0:ef:81:1a:9b:88:
84:42:bc:34:7b:91:a5:46:57:be:d0:ff:0b:f4:3b:
5a:fe:3c:7b:83:1e:bb:4e:14:39:93:e6:9a:b8:15:
8b:1c:97:ec:39:8b:63:d3:5a:97:33:bb:54:18:d8:
cb:77:85:11:c8:80:c0:1b:5f:25:21:ca:a1:e1:d3:
47:8c:a4:16:c9:4b:5a:83:f5:76:3c:f8:6e:43:9b:
de:b1:5e:4f:1a:30:cb:e9:5c:c4:35:04:cb:89:70:
bc:d3:9d:e0:1f:08:1f:4c:f5:63:b0:67:a3:cd:23:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:85:B3:15:B2:EF:D1:1F:D6:60:B0:06:42:3F:74:5C:39:10:2D:D5
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:25:c8:22:74:91:b0:cc:21:f1:05:84:a2:be:89:89:ea:73:
e2:9d:50:d9:e5:e5:12:6b:a9:e6:86:ea:1d:03:29:93:1b:c0:
bb:54:79:4b:e4:95:50:27:29:4b:df:d4:0e:0c:8e:2e:43:f5:
6d:59:59:b3:c4:6f:c2:38:12:94:0c:6a:69:2d:76:b4:0e:ce:
34:d0:6f:1b:27:98:79:dc:5a:9b:22:42:17:b0:13:9c:32:a4:
23:ea:c0:7f:33:7c:4b:34:71:ed:56:c6:cd:68:c8:eb:22:56:
09:ef:c0:5d:f0:84:6b:29:07:4a:33:18:cd:1c:7b:30:b4:3b:
36:ab:e0:46:65:c6:e8:ae:e6:32:6d:99:67:2a:cd:79:a1:3e:
cc:10:84:d1:d5:6b:b8:0d:1a:f6:22:48:71:64:2b:52:09:83:
9e:71:33:53:c8:bb:15:04:4c:7f:34:32:d3:43:64:e7:1c:b4:
ff:1e:7b:73:6a:1f:f6:eb:36:0b:ca:da:32:39:91:f5:f3:f2:
cc:89:e9:4f:aa:ce:14:12:b0:2e:92:5f:14:84:a7:b5:9d:09:
a1:64:c3:12:11:5e:80:57:61:43:32:e7:cb:67:d2:97:2b:18:
a8:dd:53:10:92:b5:9a:a4:d9:3a:28:a5:8b:c2:92:ec:c2:20:
0e:9b:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:41 2024 by rpki-client on console-fra.rpki-client.org