Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: tiBSdWorj0++28kKOKenYA/sppkMxBKC1j1Y1dV3ups=
Subject key identifier: 08:53:6D:CF:BC:DC:C6:46:1E:55:81:80:13:A5:21:65:F3:34:BE:8A
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0193579BC97EB18B282757B99CD432A030EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0769
Signing time: Sat 23 Nov 2024 06:00:47 +0000
Manifest this update: Sat 23 Nov 2024 06:00:47 +0000
Manifest next update: Sun 24 Nov 2024 06:00:47 +0000
Files and hashes: 1: S7E5Siz4uTRzMwFM8FhPmBgEdIM.roa (hash: o7bBnjuXPATR0rvHFL57ExTeXywj5cj/gjQKWbf2LII=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: u6km3uB+MDFyHpU2dF7yukFMymHLhkioaZ7SYAyPKis=)
3: pDPS0XRGbq9tkWvZck3cQklU45I.roa (hash: 9Nr+BiGNK2zGDMNnohM6003IpPBtqp366dcYf6L3SFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:c9:7e:b1:8b:28:27:57:b9:9c:d4:32:a0:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Nov 23 06:00:47 2024 GMT
Not After : Nov 24 06:00:47 2024 GMT
Subject: CN=08536dcfbcdcc6461e55818013a52165f334be8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:49:bf:42:8d:9d:3b:10:1b:55:16:8b:00:
60:36:5b:2a:55:8a:90:e9:be:03:53:4d:6f:b8:8f:
1b:de:41:8d:24:53:59:d4:0d:84:57:ad:ae:58:3e:
ec:5a:e5:d3:f8:dd:70:d4:75:a6:01:8b:3c:b1:5e:
99:2d:70:01:7d:3e:af:25:51:6a:29:93:68:e9:a0:
ab:f1:2f:48:2e:d8:92:df:29:03:f1:7c:8d:85:84:
e8:8a:5d:af:64:05:bb:77:75:56:0e:8a:f2:a7:05:
ab:13:9d:c7:34:3d:05:4a:43:a2:4f:1c:e3:7c:ed:
78:be:a0:e5:0a:bb:8c:0c:f0:19:6a:3d:9b:6d:a4:
22:1c:b1:5c:c7:b5:f0:d1:a6:d8:db:09:dc:2b:c2:
5e:22:3a:6b:e3:5e:7c:43:89:2b:b6:36:e3:b3:2e:
cf:fa:30:aa:4d:82:ad:d0:ed:cf:3c:8e:c3:aa:6a:
56:3c:47:8c:ba:8f:5a:2a:f9:a5:e0:7b:fc:bf:7f:
1e:0e:27:37:b0:52:29:46:6a:de:f9:a1:4b:44:2a:
63:2c:14:af:d2:16:32:65:2b:e0:97:b6:61:a3:23:
b2:09:7b:6b:5f:de:5b:ae:55:f0:ff:2c:65:a3:e3:
a8:14:2d:1d:af:d9:67:0b:76:49:ad:f7:2e:94:40:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:6D:CF:BC:DC:C6:46:1E:55:81:80:13:A5:21:65:F3:34:BE:8A
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:25:bc:e4:dd:87:b0:cc:60:66:2d:d6:58:64:69:0c:80:
61:cb:49:43:93:4a:b4:83:93:d7:6d:ee:b7:4e:ba:67:03:43:
8e:e6:5d:6f:8c:71:1d:c1:10:b4:04:f9:af:e8:0b:fc:12:c8:
5e:76:73:30:15:93:35:9d:e9:8a:fa:12:4c:6f:7c:6d:82:c4:
f8:e2:0a:b7:fe:dc:bf:b6:d1:c4:e3:4b:d9:90:95:8c:c1:d2:
f4:33:9c:e2:9f:0d:de:8d:f6:d9:f1:ff:53:13:4b:33:09:12:
f6:b9:b0:8f:c7:41:17:16:6f:11:07:f0:62:88:44:a5:48:3e:
08:ca:1e:7c:e3:00:40:43:62:82:a7:2b:60:cd:35:29:84:6d:
17:2b:2e:52:97:1b:88:40:9d:4f:92:92:5e:4c:83:4b:b4:68:
b8:3b:5f:d7:64:24:d3:b8:5a:04:59:ca:1d:31:10:15:4e:e0:
3e:bf:49:0f:04:d2:cd:45:b6:20:ff:0d:e1:c9:e0:12:fa:2e:
e6:a9:f5:51:f2:bd:5d:5f:cb:fb:9b:78:ee:ed:29:fd:55:c5:
7b:12:41:3d:49:99:e7:26:fc:12:f2:cf:7b:a2:e4:3d:b5:f1:
84:6e:40:f1:7c:46:06:07:a4:f7:4b:ba:9c:b8:44:93:61:cb:
38:95:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:01 2024 by rpki-client on console-fra.rpki-client.org