Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: UEk+DsKcrm3G+hl+T7yR+GECfsONxN6ktc6zmVdLGZY=
Subject key identifier: 60:A2:1A:92:2C:18:ED:5A:82:44:BF:7A:BB:4A:CD:8F:31:A5:98:08
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 0193579BC47673B1058A5D803A7D4311CC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 88
Signing time: Sat 23 Nov 2024 06:00:46 +0000
Manifest this update: Sat 23 Nov 2024 06:00:46 +0000
Manifest next update: Sun 24 Nov 2024 06:00:46 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: 7Lx+8WLiuTsz3EYfDpLY9f0FhAgrH1pDG8yadvHpY68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:c4:76:73:b1:05:8a:5d:80:3a:7d:43:11:cc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Nov 23 06:00:46 2024 GMT
Not After : Nov 24 06:00:46 2024 GMT
Subject: CN=60a21a922c18ed5a8244bf7abb4acd8f31a59808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:8c:1b:58:e0:48:f9:88:41:81:95:d7:ae:
51:37:17:09:fc:91:31:5b:b7:30:fc:1c:1d:60:cc:
6e:5a:c8:2c:96:4f:bd:12:c8:3a:2b:3d:d9:97:fe:
43:99:37:78:88:84:c6:15:05:a6:6e:8e:91:7a:85:
82:a8:11:07:cd:09:fd:7c:ec:5e:45:be:8e:d5:d8:
ee:fe:b2:7d:8b:57:7c:70:53:e6:f8:4b:c4:43:ec:
26:cf:2c:80:11:ff:64:26:2b:7d:9a:74:a6:ce:16:
ad:1e:f7:2e:10:de:54:12:ee:68:34:b0:c9:15:bd:
b5:09:8c:3b:d5:3a:fe:55:3e:9f:3f:a6:3e:30:58:
ee:8f:ee:68:a9:36:0f:6e:8a:e1:0a:10:96:ca:9b:
a6:5f:63:6e:16:7c:ff:c0:6e:c1:41:ab:7c:9d:a8:
42:e9:40:cb:28:ce:ef:8b:62:c1:be:76:d5:b9:87:
e0:96:9d:d0:56:7b:84:db:b1:8d:88:60:5f:79:c5:
f0:5d:cb:43:de:d3:7c:c1:32:b2:95:a4:1f:e6:43:
6c:2f:ab:84:b1:75:99:7a:96:a5:c0:ad:51:69:87:
0d:ee:db:6b:5e:58:87:6b:39:11:b5:60:29:aa:3e:
21:5a:86:64:d3:41:50:17:5f:5d:6e:be:5a:e5:4f:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:1A:92:2C:18:ED:5A:82:44:BF:7A:BB:4A:CD:8F:31:A5:98:08
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:c3:36:b4:12:ca:b8:96:c9:1b:02:94:9b:76:52:4c:37:
14:b4:fa:64:19:08:e7:5d:13:81:36:20:0d:02:0d:46:7f:0d:
f0:1c:5d:65:d2:b6:ac:44:ac:b7:fa:ae:94:00:6d:fb:24:d6:
ac:cd:1d:33:4c:b0:64:2b:b8:45:3e:99:fe:a9:8d:bc:83:17:
02:b4:c5:67:59:87:b8:06:60:08:66:b7:a3:45:df:a8:ee:0a:
f0:05:ac:8a:2d:59:22:58:bb:0d:70:1f:f5:37:6e:e9:11:c0:
77:32:b6:b7:1f:ab:64:ae:71:ee:69:a2:5f:70:80:41:b6:a0:
2f:60:ec:c3:0f:2d:90:59:be:3c:a3:a3:40:fd:38:20:72:1b:
54:73:80:ad:8d:e0:b8:36:4c:56:76:4a:60:9f:21:d7:3d:49:
26:05:ea:77:ac:87:b9:1c:89:e2:cd:f8:c2:45:d1:1f:60:05:
f9:4d:8a:d2:31:51:e3:6d:22:cc:f1:ba:dc:44:db:23:17:fd:
81:9a:09:75:26:3b:ae:df:04:f5:d3:7d:82:59:bf:b5:9b:18:
2a:04:ef:51:11:cb:ff:03:bc:b0:88:fa:ec:01:5a:cb:cc:d8:
ee:82:92:b5:08:28:aa:bb:6d:fd:7a:d2:8f:6d:ec:7d:f6:55:
62:11:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:08 2024 by rpki-client on console-fra.rpki-client.org