Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: 6uED0DdbJ3mQ7nXz7lse1LNLChtcD96nWvXWARv58cM=
Subject key identifier: 45:4F:2C:74:23:D7:3A:5A:12:70:39:0F:E2:FA:7B:44:C7:5C:DA:E4
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 0193549B5DA064F2E5249D4E4B6834D12671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 16:01:28 +0000
Manifest this update: Fri 22 Nov 2024 16:01:28 +0000
Manifest next update: Sat 23 Nov 2024 16:01:28 +0000
Files and hashes: 1: 4biwE-DS6MlQ3KzzuMudPiZ43DA.roa (hash: 7cp+0sWf4LBsahXxXsOqglYHWLU3yqKUF4NGZi0J31g=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: w5dFNGvpRWxKiQ5kAQZXq1ZK12kWD1DOS7h/3ntrn2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:5d:a0:64:f2:e5:24:9d:4e:4b:68:34:d1:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Nov 22 16:01:28 2024 GMT
Not After : Nov 23 16:01:28 2024 GMT
Subject: CN=454f2c7423d73a5a1270390fe2fa7b44c75cdae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:aa:39:60:4b:85:fb:6b:9d:0e:73:54:f2:
a2:43:1a:87:2b:1d:46:97:18:9e:eb:b7:0f:03:c2:
23:94:ab:2d:51:65:e6:96:45:7e:2d:1c:ab:54:13:
5a:43:e2:7c:58:ee:29:a3:96:36:2b:12:92:32:dd:
19:fc:59:ce:d0:dd:b9:43:36:5e:e8:fd:ae:7e:76:
c8:3e:80:00:98:6c:77:28:b8:83:be:ad:0b:cf:4e:
27:47:5d:f5:c4:f0:00:98:a8:ea:82:db:eb:62:44:
56:2f:63:94:9b:1f:4a:f5:b6:42:7a:31:b3:64:b8:
98:4f:4b:5d:b8:9b:36:a8:11:64:de:c0:2e:d5:92:
7b:19:53:58:e3:3e:e9:2a:96:59:c3:04:87:71:36:
fe:17:65:2f:b4:70:1d:b3:6f:48:47:7c:ff:7c:b8:
7a:7e:2e:42:d5:9c:83:1b:8a:13:0b:6e:18:75:4f:
fd:f5:1e:02:52:6f:1e:59:5d:c8:9f:5d:7d:59:55:
23:83:a7:3a:e9:eb:14:08:b5:ee:f9:2a:5f:ca:43:
10:04:44:e7:6d:32:af:49:ca:5c:84:ed:c0:19:64:
44:71:bd:c6:0f:d5:c8:a8:2f:2c:69:b3:84:1e:8b:
55:63:41:ba:44:1c:6d:96:d9:e5:7f:27:d1:88:8a:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:2C:74:23:D7:3A:5A:12:70:39:0F:E2:FA:7B:44:C7:5C:DA:E4
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:a7:1d:07:f4:e2:61:1a:2a:d0:09:92:5c:4f:a1:f9:fd:
6a:67:a7:63:9c:cc:2c:c0:41:12:25:35:23:b3:5d:71:4d:0a:
bd:ea:b3:03:25:60:e1:68:ce:e9:07:f6:5d:e0:d4:fd:8c:95:
5b:17:97:f2:01:e4:95:6f:08:d5:5a:5d:a8:73:8d:9c:27:db:
ec:66:ff:61:c1:9d:13:54:47:7c:6f:dd:65:98:68:62:50:d2:
60:22:26:72:f2:59:c8:13:d9:b9:6d:5d:5a:ab:fc:c6:f6:67:
d6:99:ca:5a:c5:bd:fb:9c:85:3e:c0:11:59:3d:df:dd:03:f7:
f5:06:e7:7f:18:1c:ea:c3:f4:6d:6b:e3:65:f6:9e:8b:f6:31:
6c:ec:58:cc:97:6a:f6:d6:38:d0:30:05:03:28:1e:39:09:f1:
22:21:01:ba:cf:06:a7:27:11:35:e7:85:27:47:0f:7c:1d:08:
29:b9:5d:d0:ad:06:93:82:de:b1:34:33:0a:87:b0:04:78:39:
d8:e4:1d:ec:fb:32:e2:02:9a:aa:20:46:6b:f6:0d:27:5d:2f:
f5:95:8d:51:06:24:35:20:70:0f:44:5b:82:50:c0:b7:36:c6:
9e:74:21:cd:92:e1:f6:45:5e:52:78:72:fb:3b:7a:23:58:2e:
41:b0:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:51 2024 by rpki-client on console-ams.rpki-client.org