Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: AHRF2nL9+iObstJnuLGOdcNhw09GUdgju2x7NynoNMs=
Subject key identifier: 89:C3:B2:C1:6F:BC:B5:0A:AF:09:97:7F:EE:00:0F:14:CB:00:A2:14
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 019357D2509D954674E95028D4C48C4F078D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 0567
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: opesum0YfYFpaax1kT7ouGMBejwnceLW/oNNBWU8LFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:50:9d:95:46:74:e9:50:28:d4:c4:8c:4f:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=89c3b2c16fbcb50aaf09977fee000f14cb00a214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:bd:6b:5e:19:6b:33:51:78:5b:cd:7a:9f:
a5:ac:cb:c2:92:69:18:42:60:56:00:76:23:c0:34:
ac:04:2b:61:c5:9e:cd:ba:a9:0b:5d:f9:bb:9e:56:
29:ea:22:bf:93:40:d9:1a:ac:e1:16:34:fa:1e:32:
0c:61:58:30:f3:16:81:a2:8d:9f:c3:19:bc:f8:5b:
b1:74:fc:e2:ac:9b:57:ea:7f:ef:db:38:ee:51:6c:
c9:e7:54:dd:b9:37:9f:ad:9a:e9:20:92:8a:ae:6e:
98:2c:ab:7e:24:1f:a9:f7:f6:74:02:26:e4:63:3a:
a6:8e:33:3c:46:58:7c:5a:e2:f7:bb:ad:56:ae:d4:
cc:1c:e5:3d:15:24:ee:6b:bd:ef:60:4d:be:6c:25:
5c:61:61:44:1a:41:c1:f8:90:cc:6f:c5:b0:e1:60:
1b:db:d5:5d:54:97:64:6e:98:23:f5:5a:61:af:c4:
1e:59:d3:b6:33:d3:21:44:41:8c:64:5a:63:62:ae:
43:b7:f1:96:c1:81:f5:79:1e:df:16:92:17:0f:5f:
7b:31:d4:02:15:6f:82:69:b9:d4:93:e5:43:05:99:
78:7a:3e:1b:20:05:4c:0c:cf:31:f8:7c:0e:10:b7:
8c:97:d9:ae:4c:9d:25:9d:43:08:01:fb:f6:ae:f7:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:B2:C1:6F:BC:B5:0A:AF:09:97:7F:EE:00:0F:14:CB:00:A2:14
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:71:76:5a:6e:0c:bb:bc:9c:57:03:5b:a8:aa:10:ff:d3:
dc:d2:a6:78:57:27:b0:cc:d5:a8:81:81:ab:f5:97:07:42:5a:
37:20:89:9d:f9:89:c2:c0:0b:c7:de:56:2a:c4:8c:89:6b:3e:
08:33:40:b3:cd:c0:cb:0e:64:d3:17:a2:52:bb:89:45:be:f4:
db:70:17:d5:2b:a2:d1:d7:d9:02:d1:84:e0:bb:a4:00:a0:c9:
be:e6:33:e2:e4:55:1b:8d:90:8c:3f:71:fc:90:af:79:29:86:
94:a8:be:dd:bc:bd:38:d2:7b:5e:5a:d5:cf:2f:61:81:48:e1:
a4:cd:bc:6f:75:c0:ae:9b:da:d5:85:fc:49:13:1b:c7:40:b9:
ce:cf:92:b6:39:fe:e9:4c:d3:1b:97:06:ac:4a:8c:b3:9d:4e:
cc:0e:76:90:f5:07:2c:d6:ff:a7:0c:30:3e:d6:dd:76:c3:2b:
c3:92:71:a4:b9:3e:48:c3:fd:cf:45:2e:6c:72:4b:3f:d9:bf:
3c:d3:7e:42:23:0c:85:f3:e0:95:6b:23:93:8b:b8:43:34:3a:
6e:34:aa:c5:56:91:48:64:80:45:b9:ae:b7:43:df:63:15:87:
96:49:f4:43:fb:1e:72:c3:ef:c6:56:f9:8f:ff:8b:a5:88:32:
0e:fa:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:57 2024 by rpki-client on console-fra.rpki-client.org