Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: yshht+OVK1FZSlymco3Oc3PeoAVUjwz7940NBeyHfDo=
Subject key identifier: 37:85:53:B5:33:0F:A4:3C:BB:93:53:E8:0F:A4:E9:97:DB:9C:3B:A9
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 0193572DC170BBEDF730E4E226B4AD8B8A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 04:00:36 +0000
Manifest this update: Sat 23 Nov 2024 04:00:36 +0000
Manifest next update: Sun 24 Nov 2024 04:00:36 +0000
Files and hashes: 1: pfX3QlIMcld6YRNlyN-eNWphXao.roa (hash: fZv3MoIHOPTKWumxNGrFPuysyQTnAsN0sb51zaWM2y4=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: 8IQE8wcJeBUbNnY8Cr57G8NUbL0QNCGCiyq7I5WcdMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:c1:70:bb:ed:f7:30:e4:e2:26:b4:ad:8b:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Nov 23 04:00:36 2024 GMT
Not After : Nov 24 04:00:36 2024 GMT
Subject: CN=378553b5330fa43cbb9353e80fa4e997db9c3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:f8:66:1b:57:04:23:d4:f9:f3:17:ee:da:
24:81:65:1b:25:53:60:d5:2b:88:4e:84:7d:d8:a1:
f0:f3:cf:d7:25:d8:48:07:af:78:44:8f:a3:d3:77:
de:a6:48:ca:02:24:d2:36:88:82:0c:31:0b:cd:4d:
f7:4b:45:1f:ce:51:98:39:6f:de:66:94:3b:e5:eb:
67:2a:c7:45:fd:d6:ad:c9:12:f2:d4:82:30:52:9b:
80:5c:19:dc:c3:b9:19:c0:61:16:f5:9e:7b:3e:4e:
80:60:85:e1:dd:6c:df:0e:69:d5:93:73:a6:f4:ee:
84:34:df:79:4b:6e:57:4a:4f:52:bb:77:97:72:d1:
a6:e8:f3:40:5b:fa:db:46:eb:fb:36:e2:df:c5:26:
9c:26:e5:30:63:57:13:29:55:46:2b:be:7d:d6:c5:
b4:69:91:47:cb:e4:02:b8:c6:74:91:98:df:05:89:
1b:76:fe:84:40:fd:75:8e:51:a1:3d:6a:b7:a0:eb:
cc:f9:d7:8d:a9:4c:f1:af:9a:1f:95:17:dc:7c:9d:
ef:45:66:67:c8:88:3e:3e:63:01:04:15:01:65:3f:
c8:fb:23:96:38:b8:91:df:67:2f:f5:f0:62:de:bb:
40:1a:fa:f3:c6:bf:36:a1:bd:0d:81:ca:9c:6f:d2:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:53:B5:33:0F:A4:3C:BB:93:53:E8:0F:A4:E9:97:DB:9C:3B:A9
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4e:58:88:0d:63:5f:8e:52:70:a2:39:ee:a8:82:bf:9a:75:
93:bd:69:35:eb:47:45:9f:69:5e:44:70:e3:a9:80:c9:0a:f7:
fd:29:7e:8f:c3:98:7b:94:b1:e9:12:4e:34:48:e4:f0:d3:25:
e2:3d:72:55:99:c3:0a:bf:e7:22:32:7e:c3:2c:ad:8b:27:5f:
64:1e:2b:ed:30:90:22:50:9e:5e:34:02:c5:2d:71:3a:99:00:
cc:10:cc:29:49:6f:ae:06:8e:0d:f5:db:53:82:de:c7:dc:ca:
a0:bc:1d:be:25:b8:5d:e0:5f:a9:d8:c8:35:38:d0:84:d3:9d:
2e:1b:be:87:ad:d3:12:03:a5:db:b8:ae:18:fc:8c:fc:ce:be:
97:16:d6:80:fc:cd:fa:2d:50:63:e8:10:15:ec:f9:ba:96:bc:
41:6e:d7:ef:be:7b:a3:e2:73:e2:01:83:73:12:b5:b1:a1:76:
16:92:92:ae:12:f0:3b:19:b6:ea:f7:9f:41:10:52:42:10:6f:
e8:a5:a9:fe:e8:fc:2b:36:c7:0f:be:36:43:bf:1b:b7:19:f9:
92:b0:20:7e:61:36:2d:2c:77:a7:fe:aa:d5:d1:85:4b:00:ce:
e7:50:dc:63:ab:e0:8a:3c:ea:bf:d7:87:a8:6f:8c:f4:81:09:
dd:aa:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:47 2024 by rpki-client on console-fra.rpki-client.org