Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: HPJ+69PyGNQ5EdlJmcPobDMA5CPo7hifBzNtpl9VJtw=
Subject key identifier: 53:2A:CB:97:09:DA:EA:21:BB:B0:45:C1:79:5B:CF:FE:06:78:1B:15
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019364B23CAAF7DABC28BB17605A41EF85C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 02B8
Signing time: Mon 25 Nov 2024 19:00:22 +0000
Manifest this update: Mon 25 Nov 2024 19:00:22 +0000
Manifest next update: Tue 26 Nov 2024 19:00:22 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: ji8fBR8KEXwdPndkhITD1Yh6ceWaDycbM6yOAJoZVTQ=)
2: trrhHhwqjhNm1K99jSssWVKkG6w.roa (hash: uaRTvsevUue62djF3U5FCHExrXKMh8kCJT5N/3X0i7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:3c:aa:f7:da:bc:28:bb:17:60:5a:41:ef:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Nov 25 19:00:22 2024 GMT
Not After : Nov 26 19:00:22 2024 GMT
Subject: CN=532acb9709daea21bbb045c1795bcffe06781b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:3d:07:81:b6:71:0e:b7:02:5e:70:f2:03:
cc:6e:87:d2:d0:8b:02:b8:46:46:04:c1:c6:5f:5a:
1d:8a:f0:ab:a2:0b:2a:65:cf:06:5c:ea:d6:53:fa:
db:62:08:19:89:ab:86:4e:be:b2:6a:81:a9:01:3e:
14:fe:f1:9f:6a:c2:c3:a3:9a:5e:a2:b7:69:a2:80:
46:c0:c4:58:5a:49:01:2b:60:06:18:13:05:6f:6d:
2c:2a:ea:99:52:c6:f7:e0:21:5c:7a:7a:eb:df:77:
86:b5:ce:4f:a7:d6:6a:41:70:16:45:ea:73:09:15:
40:f4:ad:b3:6c:c0:b1:a9:74:32:b5:2a:7e:69:0a:
2b:d4:22:1f:a1:39:07:8d:47:22:9c:0d:c1:56:7d:
41:18:03:5f:06:59:a0:86:69:fb:7b:64:1e:43:cf:
ed:47:d8:d9:9b:43:62:1a:29:ee:49:1c:a1:b4:a7:
aa:27:77:3a:94:78:57:e8:94:aa:94:1a:e3:d1:76:
e7:72:98:38:02:de:50:b5:d5:25:29:bc:00:53:9c:
e7:58:b1:c6:47:1e:37:41:4d:8f:5c:1e:35:7d:57:
09:97:67:f6:7e:e2:46:12:74:5a:01:ac:7e:23:8d:
5e:d0:bc:46:24:5f:b5:38:43:bc:bf:41:c3:8f:38:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:CB:97:09:DA:EA:21:BB:B0:45:C1:79:5B:CF:FE:06:78:1B:15
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:f4:af:bc:ea:d1:e9:97:e6:96:1f:f3:88:16:96:34:53:
4f:ed:7b:ad:47:63:1e:a9:37:8d:35:be:87:ad:97:db:39:eb:
d7:d1:05:89:93:c7:01:11:24:52:18:07:b3:f6:42:03:e5:95:
e8:fd:ae:94:bf:75:51:a0:00:8b:e8:4a:c0:e1:c8:b3:13:82:
b2:b5:8a:55:44:f4:7f:f0:4f:dc:3c:5c:5f:d2:d3:fa:7e:e1:
9e:47:fc:78:75:7f:87:02:51:d5:f5:c0:9a:5a:84:84:08:0e:
d9:ca:7f:24:47:2f:7c:c8:d4:1e:7e:2a:02:e0:72:f9:c0:01:
7e:de:3c:cc:02:76:fb:43:dd:62:91:84:05:c5:f8:b3:f4:bc:
f6:cb:f2:f6:0a:48:1c:42:91:86:5f:d9:97:77:18:b5:1f:8b:
4e:de:ee:c7:8b:e5:d3:fc:89:c8:af:e7:3f:51:35:8c:ba:b6:
8c:ab:6c:0d:ad:94:6f:2e:0e:d7:93:40:2f:f2:d7:27:78:bf:
22:81:a9:4c:8b:b6:b5:2e:70:7b:7f:7a:a0:e0:bd:40:65:fb:
33:e3:c2:93:42:8f:55:d6:0f:18:dc:bd:95:26:bb:77:bb:14:
b8:2c:b3:0d:9b:6e:35:8b:02:e0:ce:f8:4c:10:cc:8c:1c:c1:
5d:40:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:13:56 2024 by rpki-client on console-fra.rpki-client.org