Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: bxEglYGVYvYTeqHvYo+igmD99NGTNcS7SSZzOfnD+44=
Subject key identifier: 3B:22:40:AB:13:A1:3B:86:39:BF:66:05:07:AB:63:D0:05:E3:5B:A8
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019355AD2DD845B841554BBBDA497DE33432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 21:00:33 +0000
Manifest this update: Fri 22 Nov 2024 21:00:33 +0000
Manifest next update: Sat 23 Nov 2024 21:00:33 +0000
Files and hashes: 1: GqTr7W9v9PNtShdPWrUKt3QiEX0.roa (hash: FiNWY8iu2wOZdEPE242vX4vMgXT+c/k+0Awa3MDb9Ds=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: ZLEV/vKeoozUhQ3LV4cGpN8HYlVL5GhRdHrae8rnW6E=)
3: w2xINtbvSfURwekWIFtHi_ro7Vs.roa (hash: 5olYEWxfhxyB7o75OEPSUTntyki35ea3uFrOp7I9nVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:2d:d8:45:b8:41:55:4b:bb:da:49:7d:e3:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Nov 22 21:00:33 2024 GMT
Not After : Nov 23 21:00:33 2024 GMT
Subject: CN=3b2240ab13a13b8639bf660507ab63d005e35ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:f2:5a:f8:a5:4a:12:e2:ba:c7:b1:05:e9:
c1:2e:6a:0a:f0:ec:89:39:dc:43:b7:a0:19:0a:f5:
20:b6:2c:00:be:18:4a:3d:09:bb:3b:76:c7:fa:39:
81:4a:95:05:82:71:5b:ab:7f:56:9d:3e:1b:d4:a3:
ab:ed:1e:77:61:f0:a5:64:57:63:7b:bb:fd:2c:93:
42:7a:ed:c6:b0:c8:63:09:8e:40:21:22:9b:85:cd:
5e:9d:2e:4e:44:42:a9:1a:b6:fe:75:80:eb:fd:a0:
4d:ad:f8:96:ad:f9:71:89:52:87:bf:66:b2:76:ac:
b6:38:51:a2:3f:58:c5:7d:a2:c4:bc:0e:d2:e4:4b:
f5:30:85:0f:3a:cf:48:fa:a2:8e:b2:88:8d:96:af:
56:ef:f0:c1:87:b7:3a:e0:dd:f0:08:0f:1b:fd:30:
43:b3:d2:72:f8:26:e8:79:00:4e:6b:d4:21:47:63:
0f:36:9b:49:8c:19:82:1b:1f:28:56:ee:de:67:b7:
bf:49:7d:51:31:44:b3:34:e5:ae:24:af:d8:2b:09:
88:7d:ed:70:92:56:65:e2:2e:4d:b6:2c:b5:bd:e8:
ce:ec:00:ad:aa:44:67:cb:d4:a3:3a:c3:ee:63:e5:
06:c4:23:f4:69:39:97:aa:07:39:00:38:92:81:a3:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:40:AB:13:A1:3B:86:39:BF:66:05:07:AB:63:D0:05:E3:5B:A8
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a1:bf:f5:d0:86:19:e4:2d:43:c2:1e:b0:c9:71:ad:bb:58:
1d:b0:67:0b:09:79:96:75:35:8c:36:9a:8e:cb:b7:78:1b:04:
92:ed:80:95:11:3b:f6:6a:e0:00:1b:29:fa:e3:e5:80:82:01:
c3:ea:73:1e:5f:62:df:8e:a3:06:8b:76:09:94:0a:0f:f1:4b:
7c:51:f2:0e:d9:47:8e:f2:49:61:7b:15:c7:43:1a:7d:3c:f4:
95:0c:de:a7:a5:fa:77:be:df:29:3d:9b:f9:0b:0b:1e:7f:8c:
74:5e:1f:b8:af:66:f2:ab:da:b2:e3:a0:31:6d:9c:eb:fd:df:
f7:dd:fb:23:bf:64:2c:18:e4:bf:c4:99:ac:f2:33:1c:d2:09:
af:2c:69:54:d2:69:40:e2:5f:95:70:8b:ee:4f:59:cb:4f:3a:
c0:c2:18:d4:dc:48:ce:c0:0a:cb:35:4f:47:fc:c1:6a:69:8a:
fe:16:ff:55:fc:79:28:70:e9:e8:6e:5b:22:b3:d5:0f:20:da:
ab:18:4d:0d:5b:1e:f4:23:e8:df:fa:e4:58:24:b9:85:14:5a:
ac:dc:bc:df:46:bd:f8:42:d5:37:a6:0b:69:6c:3d:81:7f:b7:
02:a5:46:5a:a1:1b:ae:44:e5:3d:9d:93:af:bc:3b:b8:13:78:
f9:a2:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:21 2024 by rpki-client on console-ams.rpki-client.org