Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: vB7USRevdAJJiBZayRirEKGkJYqrpzC/KRqYv8Ww234=
Subject key identifier: 45:A6:4A:74:D5:21:D7:26:BC:BE:D2:9A:A1:F2:05:50:18:22:68:8B
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 0193523E1385D9C1DE856164BD55F7D288CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0215
Signing time: Fri 22 Nov 2024 05:00:20 +0000
Manifest this update: Fri 22 Nov 2024 05:00:20 +0000
Manifest next update: Sat 23 Nov 2024 05:00:20 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: 9966XT5MZmmVUUrHl1wmQuncDoHqOTgSPdnzb0bwFu0=)
2: fkt1_yGJOewpS3ACrBiOUvohKsg.roa (hash: bYGaX/XLmbWFriJsZvzyJWNTq3ikb7NRBjFvZUeP8Ko=)
3: yKm7pk7ZrxDWmaJE7iZwoEDlByI.roa (hash: 1IlaPoLpwyrHF0YCQqoKqbPak8B3ZbKsm9JXZbTrD48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:13:85:d9:c1:de:85:61:64:bd:55:f7:d2:88:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Nov 22 05:00:20 2024 GMT
Not After : Nov 23 05:00:20 2024 GMT
Subject: CN=45a64a74d521d726bcbed29aa1f205501822688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:4e:9b:08:ef:92:17:b5:78:e9:0e:ed:e2:
d5:82:95:68:c8:39:f6:e7:2d:22:0b:c2:21:93:41:
4f:20:e1:22:9e:d8:82:98:d1:0f:e9:67:6f:45:71:
aa:8d:08:22:66:c2:bb:8b:d9:43:d1:d9:0b:eb:13:
f4:72:35:c0:49:c1:4e:a1:8d:2e:b1:65:a2:d7:15:
b9:78:ee:40:a7:ef:5b:e7:02:a7:2e:65:61:21:ce:
f7:f3:f7:62:f0:87:90:ad:be:a7:c0:f9:43:c1:31:
e1:3a:0d:75:ab:de:ad:8c:2a:4e:50:d6:05:d2:2e:
3c:91:22:37:73:25:03:20:9b:1c:88:82:f2:08:86:
48:3b:22:35:bf:95:b3:c2:85:22:a8:34:63:81:9d:
23:2d:fd:27:91:4f:a8:0a:3f:6d:36:64:77:bb:d7:
d4:25:94:42:86:10:60:ab:f6:65:a7:7b:18:e4:0e:
19:be:1e:40:85:6f:01:77:18:70:db:05:89:72:6a:
7a:83:62:63:92:33:b3:fd:da:c0:6d:de:2b:15:24:
79:ea:b1:8e:50:4d:1d:b2:4d:9c:4d:18:8f:a6:d1:
02:b7:16:b3:f0:86:41:78:7d:48:fe:13:c0:5d:75:
6f:bb:5e:c3:c5:a2:f7:7e:18:e0:3d:51:19:4e:e1:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:4A:74:D5:21:D7:26:BC:BE:D2:9A:A1:F2:05:50:18:22:68:8B
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:4c:19:9e:96:88:25:e2:b8:a6:83:d4:43:09:26:88:56:
28:7e:0e:ad:98:19:68:6e:46:09:2d:c7:cf:e3:3f:28:1b:cc:
f4:b8:f0:6c:99:5c:e8:8a:1d:46:10:ad:ad:f5:b6:57:88:1a:
a0:6a:0b:c2:68:ec:35:bf:7d:4e:8a:8e:1d:de:c3:27:ac:f9:
1e:19:03:79:ae:63:c3:a6:ca:63:6a:28:c9:42:27:79:f3:64:
8c:f7:70:39:6b:c7:4f:90:9e:5c:e7:64:43:b2:92:af:27:02:
15:cb:11:58:3c:9c:9f:3b:ed:f6:c4:50:08:c0:b4:f5:8a:01:
4a:20:c7:74:5c:41:15:48:97:12:f0:b1:72:80:8c:99:46:09:
ae:99:21:4f:61:d2:fd:18:ba:eb:94:0c:3c:82:a3:25:b5:43:
cc:64:8d:08:01:e2:aa:9c:5e:c6:06:25:82:1b:d8:a4:d5:34:
32:3a:92:a5:98:59:97:ba:99:2c:4f:d5:26:45:c7:57:cc:ad:
bb:fa:d1:2c:8c:4e:7c:bd:9b:8f:6d:ea:1e:7d:f2:e2:ec:80:
57:6b:1b:cd:8d:36:64:39:b0:22:08:3e:62:cd:7b:2a:b9:2f:
17:47:1e:3c:5c:1a:b4:7b:ac:cd:b2:4f:e6:e5:7c:a0:d8:2d:
a8:2f:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:34 2024 by rpki-client on console-ams.rpki-client.org