Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: rVKJi5Pfbh029jQNZPBY//sdPVJP+WTcIxsZdUaZtmQ=
Subject key identifier: 12:7F:F8:58:95:44:B9:0E:86:C4:FA:61:B6:16:D9:11:C5:F8:3D:5A
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 019356892C1889EC84E30C76B4005B382D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:00:50 +0000
Manifest this update: Sat 23 Nov 2024 01:00:50 +0000
Manifest next update: Sun 24 Nov 2024 01:00:50 +0000
Files and hashes: 1: AbH39CNig5UUV469cMsRZcQqZIc.roa (hash: C1KWBZj3xrQK+ETlQkvLNY6As+/1Q7IYpeaKv8R82Ik=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: ycPU4jmMfdFQPvvTt35j91tL4dcxVa7dwJiesccMoqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:2c:18:89:ec:84:e3:0c:76:b4:00:5b:38:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Nov 23 01:00:50 2024 GMT
Not After : Nov 24 01:00:50 2024 GMT
Subject: CN=127ff8589544b90e86c4fa61b616d911c5f83d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:ed:6f:b8:e1:f0:2e:ed:2d:f9:5d:43:b6:
3c:60:c0:14:87:c1:71:ad:03:8c:05:46:96:1e:1a:
8e:6a:b1:4f:45:f6:e7:8e:5a:c1:86:ae:b3:21:66:
2f:c9:8e:48:33:94:25:55:32:43:91:c3:5f:5b:98:
b5:4a:85:20:9b:e9:3f:03:01:be:3e:2f:23:ca:c0:
91:78:31:bb:9b:db:30:50:c6:cc:56:8e:b0:24:97:
da:26:d2:53:54:9c:ab:66:ed:ec:86:4e:28:08:c6:
59:83:d1:12:af:84:fe:a0:26:47:20:70:78:79:67:
7f:f5:9f:22:3b:b0:7d:ce:fe:9e:1b:a0:04:cd:d1:
ff:a5:b0:15:03:57:62:2a:0e:2a:84:a5:3e:bd:37:
3e:48:56:96:02:89:5a:c7:9c:f8:b1:0a:28:e2:9c:
56:53:05:bb:59:2c:bc:9a:d6:6d:42:3b:e5:16:fc:
51:0b:77:e2:a6:49:01:93:2e:41:a5:40:11:d1:3a:
bf:d1:0e:2a:3c:34:95:e7:3a:ef:9f:d2:80:7f:fc:
b0:fb:33:9f:45:b1:d8:b1:85:ba:6e:8d:cd:bd:47:
ec:9b:ef:fb:98:70:44:f1:73:24:3c:9b:e3:7d:ca:
f1:1f:01:ee:a0:89:bc:eb:e0:4a:8a:ac:a6:c6:a2:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:F8:58:95:44:B9:0E:86:C4:FA:61:B6:16:D9:11:C5:F8:3D:5A
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:59:7d:25:28:a3:2d:22:53:97:4f:2e:0c:85:fa:c5:b2:
88:8d:ab:d3:88:d3:a9:34:df:50:04:07:8d:f1:31:7a:57:06:
08:c2:65:e4:ff:97:69:28:71:79:c5:f6:49:4d:51:3f:22:fa:
43:7f:2b:31:8d:a5:07:0e:a1:e9:2d:84:58:c5:c3:58:0d:af:
b0:20:4a:0c:e6:0d:d1:59:0b:2b:9d:ec:e1:98:a3:9a:63:ba:
ab:79:35:dd:ac:ed:bc:20:57:67:cf:4b:c4:1d:9a:7b:b9:a1:
28:17:1e:42:b5:96:c3:20:9b:bc:e8:25:aa:05:82:b7:9c:53:
61:4f:2b:05:19:71:24:71:5d:bb:5f:87:2b:c1:65:ac:21:70:
6f:61:e1:59:45:0b:74:31:96:de:6a:69:aa:fa:44:39:ee:80:
7b:55:6e:b0:90:c1:36:ad:3f:02:f0:a0:4e:02:ab:f7:33:d9:
09:d5:f0:6b:47:4a:0b:02:ef:21:68:c3:b0:50:c3:a8:04:e7:
8a:6e:0c:f1:44:42:81:56:35:24:d9:db:ea:86:3f:20:ba:3c:
93:18:30:66:23:c3:d5:f9:ad:8c:9c:75:d6:c6:e3:32:7f:aa:
cf:79:20:da:f8:57:06:d6:9e:53:d7:d6:55:34:bd:ec:c2:94:
00:ef:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:46 2024 by rpki-client on console-fra.rpki-client.org