Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File: kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier: mvqke+EVSmJaGwpTFKhmH8bTuspWUzfk/yqKworsO1U=
Subject key identifier: FD:36:71:03:E2:30:61:4F:5E:58:B4:BE:6A:42:37:5D:D0:82:6C:DF
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer: /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial: 0193568A4FEE706F3221075EC5DB7D376722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number: 045A
Signing time: Sat 23 Nov 2024 01:02:05 +0000
Manifest this update: Sat 23 Nov 2024 01:02:05 +0000
Manifest next update: Sun 24 Nov 2024 01:02:05 +0000
Files and hashes: 1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: ciS8u8CkOwliu9rjfPhTgSRjLFbVtkOEm/TRxYQFI/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:4f:ee:70:6f:32:21:07:5e:c5:db:7d:37:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
Validity
Not Before: Nov 23 01:02:05 2024 GMT
Not After : Nov 24 01:02:05 2024 GMT
Subject: CN=fd367103e230614f5e58b4be6a42375dd0826cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:08:a5:fe:16:c6:ad:3e:94:49:f8:95:4b:
18:36:36:b1:92:74:7f:d6:a6:d4:80:83:6f:f2:c6:
d0:da:4f:85:ae:f5:43:03:be:9e:68:29:5b:e0:17:
a4:4b:85:4a:96:1e:82:e0:6e:12:04:e5:bf:b0:42:
b5:ad:52:bb:12:b0:f7:d4:72:fd:e9:03:88:1a:39:
52:27:a0:9f:aa:b8:87:11:82:03:65:c3:23:9c:7f:
6e:e9:7b:cc:ab:5e:a8:30:10:e5:e8:f1:1d:21:72:
dd:90:6a:cd:d7:be:1f:f5:fe:2b:a3:e0:9b:07:ba:
b7:a2:ee:32:9f:74:7f:8f:11:38:6b:64:9a:f2:a9:
2e:56:28:5a:f1:3a:bd:54:36:01:b9:17:82:b0:59:
1f:08:1a:94:ea:17:38:e7:5f:7c:30:1d:0d:1f:6c:
80:79:25:16:61:d5:dc:af:ae:1b:b7:ad:ba:35:95:
f6:f7:b1:2c:ca:db:81:d1:47:35:77:7e:94:24:22:
5e:41:db:ed:62:85:7d:e4:92:6d:e1:25:99:b2:50:
c8:e0:06:29:dd:49:a6:f0:21:0a:54:82:d6:06:d5:
b5:28:61:1c:69:e7:e2:dd:27:be:35:69:17:4e:d9:
da:1f:5a:59:b2:fc:27:de:a8:c1:94:53:46:75:d5:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:71:03:E2:30:61:4F:5E:58:B4:BE:6A:42:37:5D:D0:82:6C:DF
X509v3 Authority Key Identifier:
keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2d:ea:11:d3:21:2b:c1:c9:45:46:af:19:90:79:a6:f4:11:
15:54:6d:71:db:e4:e3:b3:ff:57:19:ee:e0:da:de:09:78:a4:
94:b8:6a:2e:f6:06:a4:8e:5c:ed:53:52:c1:1f:61:2a:22:87:
0a:c7:71:48:c0:42:32:d0:0e:33:8f:58:80:c5:a7:b7:ee:72:
4a:c1:4c:f7:48:48:f9:86:3c:b9:ef:38:57:5f:8c:3f:9b:95:
96:e7:de:29:7c:dd:05:e8:0b:f8:62:b9:92:dc:0e:14:ce:46:
68:1b:c2:37:00:e9:17:81:13:00:d7:30:2b:5a:61:0d:5e:29:
db:7b:35:60:6b:f0:6c:2a:6c:6a:09:a5:1a:33:25:fa:c6:31:
49:5a:24:f2:49:30:5f:f2:b6:47:08:c6:a3:96:d0:f3:5f:98:
4f:0f:4b:ba:41:76:68:66:f5:75:ae:b7:56:52:41:8d:7b:ea:
ef:ec:20:f1:3e:09:33:ed:84:65:d8:30:18:dc:bc:ea:6e:f8:
81:c1:7b:54:be:86:b6:5a:1f:ab:1d:99:70:71:80:dd:7e:9d:
89:35:cc:d9:8e:ed:f3:1a:de:d1:c8:ac:1d:70:7c:22:de:59:
55:19:5c:c3:55:3c:d9:7e:21:fc:a1:97:2f:ca:2c:4e:6b:9b:
a2:5d:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:12 2024 by rpki-client on console-ams.rpki-client.org