Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: Wb9SNv8evzvq1jX0pjPbMdQSNJLNOUiB15Pu/ASTqaw=
Subject key identifier: 18:51:1B:99:72:30:B0:F0:A0:BD:A0:41:AA:2C:8A:74:DF:55:E7:03
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0193579BC2B079A632A9B0070FEBD0EC197A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 0200
Signing time: Sat 23 Nov 2024 06:00:45 +0000
Manifest this update: Sat 23 Nov 2024 06:00:45 +0000
Manifest next update: Sun 24 Nov 2024 06:00:45 +0000
Files and hashes: 1: 2ADFZj7UHAK0CaoKiWV0fpiStGo.roa (hash: z8/o038BwQubvxOjr5krp/OU/fr04G39bhyT3Nesc+Q=)
2: II-Oyu-5khc9QXqKzrZcFqC5dPg.roa (hash: TnIFOwWVWIk4LFa7B+Tsoyy2gHkC40uvEhOLPow5CNY=)
3: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: u3t4DuouQEEsC28lFR7sS504PBz6cq8JvOGeTIzHpKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:c2:b0:79:a6:32:a9:b0:07:0f:eb:d0:ec:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Nov 23 06:00:45 2024 GMT
Not After : Nov 24 06:00:45 2024 GMT
Subject: CN=18511b997230b0f0a0bda041aa2c8a74df55e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:e0:87:41:a7:d6:9d:23:25:61:fd:29:fe:
1d:60:4a:af:09:2b:d3:0b:87:c6:2e:fb:9c:ae:af:
35:2c:9c:c7:57:ee:1a:b3:3f:31:3c:d5:48:71:63:
91:13:be:ae:cf:da:31:9f:13:3e:70:4d:99:03:95:
51:4e:90:88:5c:b8:a3:a6:34:20:3a:7c:5e:1c:b6:
6f:4f:cd:27:48:46:b6:fe:52:29:46:61:1e:c2:7a:
ab:64:5b:11:e9:32:3f:3f:b8:f7:c7:12:00:9c:26:
58:75:c0:08:bd:b9:97:80:2a:16:da:13:48:2c:11:
02:96:8e:60:cd:ba:0e:47:39:3b:c3:40:2a:bf:70:
d7:59:0a:ad:79:ce:7f:31:fd:8f:f1:54:67:8e:eb:
f1:92:e3:bb:25:f9:ec:bd:1b:eb:a6:6e:37:5a:ea:
a1:c2:4e:a7:3a:bb:eb:99:91:b4:f5:1a:3b:df:4a:
6c:34:08:87:ca:82:be:93:70:8c:c1:5c:5d:c4:eb:
d3:3d:73:b1:07:63:f7:58:bd:29:88:86:72:b4:d4:
e6:6e:3c:04:b8:fa:99:ff:57:12:47:33:de:25:2c:
0e:ee:c6:8f:14:13:a0:0d:13:94:d5:12:56:0a:62:
06:99:28:c4:5b:2b:3e:3e:d9:6e:f9:ae:89:43:10:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:1B:99:72:30:B0:F0:A0:BD:A0:41:AA:2C:8A:74:DF:55:E7:03
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:37:1d:57:00:ba:27:b6:ca:cd:98:59:c1:65:e4:f6:20:
98:db:0c:f1:3e:ed:61:e9:b0:15:f9:a4:01:b2:66:9d:ad:72:
8e:85:ed:38:fd:13:2b:a0:a0:15:6c:71:5e:3e:34:33:14:f0:
a5:74:36:d8:de:0d:f7:5e:c6:88:5c:49:a3:da:73:91:00:1d:
a8:3a:78:0a:cd:af:74:b1:d5:11:be:03:cc:1b:42:45:33:01:
99:15:65:ca:2f:83:c7:38:9d:b7:64:2a:52:a6:0b:d9:84:ad:
19:b4:7d:51:40:56:73:ba:a4:ef:e3:93:ef:c5:65:fc:37:50:
2c:89:e4:0e:0b:a5:48:66:c9:bf:bc:1b:5c:54:ca:89:8c:5b:
d4:4c:33:3c:cb:a1:ed:2d:48:7e:b7:94:c6:15:f0:34:cb:d6:
8f:8a:a2:b8:05:58:c8:27:a1:c5:eb:5b:3c:e4:f6:f8:72:b4:
9b:17:74:1a:67:f5:d6:33:fe:0b:24:5e:7e:6c:26:07:b9:1e:
fc:e1:54:c3:75:b8:f7:32:c2:09:65:b5:14:b8:00:1b:97:9e:
28:bb:14:3a:c1:46:9a:94:1e:aa:a1:d8:9a:12:84:eb:0e:ac:
5d:82:60:53:41:d8:84:c3:b2:33:dd:4d:b7:8d:5b:c2:e8:47:
cd:ff:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:15 2024 by rpki-client on console-fra.rpki-client.org