Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: s8DPD3icmkJAQj3hEZGbB5ggIYx4Mriaj/IwKYZJzR0=
Subject key identifier: C2:61:06:49:5B:A8:1B:73:D7:C4:2B:90:71:7A:F5:3F:38:26:5E:53
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 0193587804675A13B76EBDD30BD9972EC8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 046A
Signing time: Sat 23 Nov 2024 10:01:20 +0000
Manifest this update: Sat 23 Nov 2024 10:01:20 +0000
Manifest next update: Sun 24 Nov 2024 10:01:20 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: 2Bd4l6QdMpZVIMc/pMy7P8/juuqBdvstXmKyI4b+Ilo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:04:67:5a:13:b7:6e:bd:d3:0b:d9:97:2e:c8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Nov 23 10:01:20 2024 GMT
Not After : Nov 24 10:01:20 2024 GMT
Subject: CN=c26106495ba81b73d7c42b90717af53f38265e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:04:3d:ec:c3:2f:44:ab:0a:34:09:ee:70:
7c:b7:5b:45:4e:71:18:3a:9a:5d:14:5f:ef:e1:4f:
4e:73:5e:4e:0f:d8:1c:a2:46:10:1b:b5:f8:96:83:
ab:c4:5f:5e:2a:57:35:00:73:6d:bb:df:4c:23:0c:
5e:84:e6:51:52:0f:d4:ee:45:ae:77:d5:fb:44:2c:
79:f5:b9:a9:79:17:ff:79:9c:58:81:ab:e1:4a:26:
ff:fb:a3:62:2a:27:ff:ac:52:4a:11:f5:92:3d:b1:
fe:69:dc:9a:7f:d8:1c:4f:64:8b:b8:c4:3b:9a:c7:
12:8d:9f:7f:37:1f:4e:f0:71:8b:23:86:65:24:1e:
2c:82:ea:0c:65:3b:ea:a5:24:3c:60:8f:5e:5f:ba:
0c:a3:92:8c:9b:4e:4f:13:24:a8:90:0a:61:84:94:
9e:5c:6f:d0:97:de:ff:0e:b6:69:3a:e4:41:b6:ab:
fc:ef:47:da:86:d9:d8:52:fb:bf:e5:de:52:68:80:
e1:5c:4c:9d:74:d7:de:d6:53:27:a8:20:6d:41:6e:
a5:aa:b4:af:1a:84:cc:0c:ff:5e:04:c3:17:2a:d9:
c5:9e:b8:7b:6d:03:07:5d:c4:69:c4:40:ab:a0:57:
45:ee:64:12:2f:bf:1d:2c:f2:c2:ce:d6:02:fc:c4:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:06:49:5B:A8:1B:73:D7:C4:2B:90:71:7A:F5:3F:38:26:5E:53
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:fc:32:ce:cc:f9:b1:b4:54:e0:5c:31:b8:99:52:0d:87:
18:3d:ba:6a:37:44:72:c0:ed:cb:f0:52:09:16:c8:0e:ed:7f:
68:f4:16:09:51:6a:b3:b9:26:a3:ba:90:96:83:be:19:14:b1:
e5:4f:5d:56:e6:95:fc:fb:63:8c:f2:eb:c3:73:58:27:5d:14:
1d:a9:54:8c:f0:a5:6c:f3:87:8d:e0:1e:b7:1d:94:69:e1:52:
a2:cd:70:cf:87:ed:c0:fe:86:6c:a9:d9:60:4a:a7:38:fa:3e:
c0:f2:05:23:44:24:26:90:b9:d7:04:d8:c7:00:df:90:ed:e0:
64:e3:a7:6d:ed:4b:cd:7e:bc:a6:cb:6c:9a:6c:02:34:d4:35:
fe:7b:4b:9a:a8:6d:ed:55:d6:90:f2:20:69:a4:7c:be:a1:b1:
15:c3:1b:b2:c3:92:e7:8c:b4:64:12:70:15:be:71:c6:57:17:
8f:4e:bb:ed:01:f0:24:c2:cb:32:9b:47:12:5e:61:3e:e5:54:
d4:3a:78:d9:31:fc:a2:b1:29:63:53:2e:d6:76:d6:0e:d4:ca:
a0:99:86:d0:b5:3f:1c:45:a7:4d:03:8c:37:33:f8:90:1a:ef:
04:58:53:64:20:82:f6:2d:cb:ed:7f:5e:d2:7d:a6:dd:16:9b:
91:1d:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:27 2024 by rpki-client on console-fra.rpki-client.org