Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: GKBMbHmFSmrJIZ5F2oseNzWmciRMRLUUMiIrdqHO/Uo=
Subject key identifier: BD:C7:31:BD:76:05:6A:10:36:BA:B2:77:E9:47:A5:15:AF:AE:98:7E
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 0193553FB2FB9EDAB325B31C5C3560D0AC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0297
Signing time: Fri 22 Nov 2024 19:00:58 +0000
Manifest this update: Fri 22 Nov 2024 19:00:58 +0000
Manifest next update: Sat 23 Nov 2024 19:00:58 +0000
Files and hashes: 1: Wmhg8UIaZMehsKfDI1hxg11ZqmU.roa (hash: nxV9E6u9czyms0nqLOJbcbskC7rG0ZgJQl+1E9ouyGs=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: jhj2CMkUUlcDXnELKQrXsY78wbYot6qW2y2tHaBYJVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:b2:fb:9e:da:b3:25:b3:1c:5c:35:60:d0:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Nov 22 19:00:58 2024 GMT
Not After : Nov 23 19:00:58 2024 GMT
Subject: CN=bdc731bd76056a1036bab277e947a515afae987e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:ab:17:a9:b0:a0:93:b2:b3:ca:b4:72:a9:
c1:96:50:1a:03:cb:c0:b0:44:e9:7d:b7:71:fe:5d:
ee:97:fd:41:7d:f3:25:ed:c1:1c:ab:a5:c4:d4:8c:
75:12:cf:25:be:8f:d6:cc:13:a0:78:94:d8:34:06:
4e:eb:95:9b:45:7e:59:48:25:29:5a:54:7c:8c:2a:
5f:ac:31:71:18:a8:57:81:4d:6d:53:f8:a2:fd:15:
f5:1b:a6:be:e0:32:57:db:cf:ef:77:1c:7a:64:f7:
bd:56:da:0e:1b:41:4b:1b:91:b0:e5:65:61:37:cf:
1a:83:85:83:19:14:aa:96:ad:82:d9:05:2d:d3:d2:
be:62:74:cb:57:cb:46:67:be:e3:95:fb:54:29:1d:
2e:a8:ab:21:fb:e7:95:b9:14:1c:46:d7:17:2b:ed:
84:05:2c:05:cb:ab:78:c9:6f:9f:2d:e3:96:03:d2:
58:da:50:7d:b8:83:c6:79:86:69:c5:74:da:fb:2d:
46:2f:51:2e:12:09:08:28:91:75:fe:d3:72:0e:88:
50:b1:1b:4e:df:88:48:e0:3d:e8:53:b4:74:7d:51:
70:5a:fa:bc:90:be:f3:cd:f3:64:53:6e:d6:10:20:
b3:07:19:01:e1:f0:69:73:ce:72:42:1a:92:21:c8:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:31:BD:76:05:6A:10:36:BA:B2:77:E9:47:A5:15:AF:AE:98:7E
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2c:c7:8c:cc:d6:6f:21:ae:2d:bb:ca:f8:24:b0:4a:1e:86:
29:11:69:f2:a8:4f:39:cb:94:ed:b5:d8:6d:cc:fb:77:1d:2c:
c1:52:0d:70:53:b4:25:dd:a1:4a:16:49:50:95:cf:a9:2b:49:
39:47:1c:f7:31:25:11:e1:be:f5:90:74:96:b6:fa:96:77:90:
2f:78:a6:82:49:fd:73:fd:08:e5:6e:db:d9:f9:70:47:c1:c9:
e1:e0:32:6d:1e:21:10:29:bc:c2:9f:c5:fa:7f:96:79:07:5f:
bf:44:89:29:87:eb:22:8e:43:5c:a3:a8:e4:55:41:0a:97:84:
c8:11:66:e8:6c:4b:67:c3:76:a0:c4:be:46:48:04:56:2a:f9:
b4:97:59:ac:3b:a5:aa:f6:40:ba:4a:f2:8a:f6:6b:30:ac:b3:
89:4a:0e:44:cf:7d:3c:4a:a2:14:82:26:2b:0a:fd:6d:50:c6:
11:f5:56:75:09:bc:c4:ac:b7:71:29:14:96:12:e2:4b:a1:d5:
52:fe:54:8d:4c:2a:6e:d8:55:10:dc:d9:fd:36:51:57:bf:1c:
eb:45:5c:48:ab:71:2f:0e:7f:6d:b1:34:45:4b:65:bf:d5:8c:
d4:54:63:41:8c:c4:e2:a3:86:9f:23:7f:f3:bd:0c:35:b3:3c:
e9:f7:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:25 2024 by rpki-client on console-fra.rpki-client.org