Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
File: jYzDMwiBzYyjntYJ_-GENySyqaw.mft (raw, json)
Hash identifier: MDy+0D6ZHSvvH5YRTl3/8x0KGFVi3dKQZn0yPHEmlmM=
Subject key identifier: 70:57:8E:5B:0F:F5:B8:F3:17:8F:E4:73:CE:57:17:5F:03:38:B3:6C
Authority key identifier: 8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
Certificate issuer: /CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Certificate serial: 0193587768435F7A0043CE4812136D098050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 10:00:40 +0000
Manifest this update: Sat 23 Nov 2024 10:00:40 +0000
Manifest next update: Sun 24 Nov 2024 10:00:40 +0000
Files and hashes: 1: jYzDMwiBzYyjntYJ_-GENySyqaw.crl (hash: U06FwwTA6UtkVfjX+RLKyy5YLU1CUKJJT+NcYQDlO2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:68:43:5f:7a:00:43:ce:48:12:13:6d:09:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Validity
Not Before: Nov 23 10:00:40 2024 GMT
Not After : Nov 24 10:00:40 2024 GMT
Subject: CN=70578e5b0ff5b8f3178fe473ce57175f0338b36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:4f:df:15:c6:7d:79:07:ee:3d:71:f9:a3:
d2:da:0f:99:01:94:8a:02:16:e7:32:12:39:c7:30:
20:fe:3e:7f:43:dc:ae:82:81:57:73:37:70:f0:ca:
45:e6:eb:7f:ed:35:67:a8:1a:38:2a:ed:c4:a3:57:
9e:4e:0d:52:f2:ad:6b:63:04:88:1d:a9:f8:55:8f:
58:6d:1a:50:ba:9c:6a:c6:5e:6c:9b:85:45:8b:0c:
6b:84:5f:46:b4:54:e2:a3:7c:e0:6b:d6:1c:9d:0b:
1e:9f:ea:6a:e7:2c:01:a7:a3:16:68:7d:28:91:a4:
ee:82:8e:5a:b8:41:7b:cf:17:de:3a:5f:40:98:dd:
34:a8:80:ad:0b:c3:1d:8d:fa:e6:d4:76:71:0c:4b:
75:ce:3d:6a:f2:fc:ec:2d:3a:98:4e:12:b5:b1:c3:
e9:4d:79:2c:07:87:e9:9d:b2:ad:5a:36:b3:24:e7:
92:07:87:00:e9:71:53:d7:97:b2:07:be:f8:d6:67:
63:6a:6a:3d:88:6e:68:d4:75:8c:9d:d2:13:bf:81:
1b:0a:dc:0e:57:e5:28:84:57:14:59:ed:63:80:79:
07:14:28:d3:d8:d8:8b:17:ac:82:eb:be:99:81:90:
2d:a8:fc:56:b8:fd:fc:d5:cd:4a:d8:54:46:35:83:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:8E:5B:0F:F5:B8:F3:17:8F:E4:73:CE:57:17:5F:03:38:B3:6C
X509v3 Authority Key Identifier:
keyid:8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1e:ea:c2:72:b9:24:a5:ac:f7:f7:87:43:d7:f0:0a:39:08:
17:12:1d:67:a1:67:25:e6:1e:12:e2:5a:4c:49:49:0f:5b:99:
a8:3a:67:e7:c3:1e:ce:0c:75:6a:7b:ef:c4:69:b5:7d:52:a5:
c1:9e:42:7a:90:d5:55:ca:d3:99:74:73:c3:19:89:c6:13:82:
cf:81:0b:9d:e0:e0:a7:b8:74:8b:03:ce:96:2f:ab:e2:0f:e7:
0d:51:8b:a5:1d:e3:72:4c:4f:aa:a6:a0:19:90:37:1e:96:69:
ab:38:4b:43:fe:50:94:25:19:57:60:0d:d2:05:1a:41:b7:9d:
32:cc:24:de:b6:fe:66:5b:90:3d:84:c5:f4:e6:c4:70:ac:f6:
23:93:b8:76:2e:c5:8a:af:30:83:8f:d3:ca:c1:c1:46:97:c0:
0e:b6:29:d7:66:db:90:78:de:48:7b:89:88:2f:e6:65:c7:14:
6d:e6:f9:c0:b3:64:0c:80:b2:e0:9b:cc:fc:28:a5:de:95:0d:
0f:58:69:1f:33:3a:2d:04:5d:31:2a:fa:e2:aa:8d:59:16:34:
b4:38:62:42:53:74:17:e6:e3:96:25:c4:cc:2a:b2:8e:9c:be:
09:6e:22:00:26:68:83:3e:41:5e:8e:ba:63:0f:be:28:d2:06:
67:e6:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:36 2024 by rpki-client on console-fra.rpki-client.org