Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: fhn+UTdxZV//F6Hu6NuXjga21u320J2v6BnLp7q67Qk=
Subject key identifier: E8:67:8C:AA:98:1A:04:E3:97:E9:C1:3B:DB:3D:2A:7F:5A:0E:CD:26
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 019352ABF170605BBC2C07CC497E512B18F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 07:00:20 +0000
Manifest this update: Fri 22 Nov 2024 07:00:20 +0000
Manifest next update: Sat 23 Nov 2024 07:00:20 +0000
Files and hashes: 1: 0V79tDwbUbNIRH-XfiKISqqsO78.roa (hash: 0naL9uOTVozdGKtxKP3j3i46PAdO+n32jCqeSaXpD48=)
2: l37gg86HemD7M32EdJH0gKW9tfo.roa (hash: hcWtWwPNuF2ZWH2GlUk5E8AFw+4CkBoJ7X8DODR9O84=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: f3IocOznXfApoeHUi8etegECJhymqo9WKFQOOOmysp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:f1:70:60:5b:bc:2c:07:cc:49:7e:51:2b:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Nov 22 07:00:20 2024 GMT
Not After : Nov 23 07:00:20 2024 GMT
Subject: CN=e8678caa981a04e397e9c13bdb3d2a7f5a0ecd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:bb:0e:12:93:42:df:2c:76:a3:9c:09:5b:
d9:21:8e:30:cc:da:27:07:41:2d:a3:9c:45:59:be:
35:87:86:90:db:81:70:60:aa:38:92:33:a2:55:9c:
35:1c:e0:86:08:a7:8f:e1:17:f8:0f:de:ff:48:a2:
ca:d1:e0:db:05:c2:b0:84:68:9b:27:47:c6:03:31:
83:02:d0:78:03:33:44:a4:2c:73:31:1c:f7:8c:d2:
73:50:06:54:ff:23:97:d9:09:04:85:31:96:85:1c:
34:6e:5a:04:4a:28:1b:36:00:ce:06:0e:8d:5f:fd:
28:bb:ab:9a:79:2f:0d:cf:d0:d8:2a:b6:be:1a:4f:
e1:d8:d5:88:16:f6:54:41:09:13:4d:43:f2:e9:d6:
9e:20:07:89:7c:20:77:fa:24:38:47:49:1d:25:73:
72:21:59:18:72:e1:6c:99:11:c9:ce:90:4c:29:76:
c4:0f:85:79:83:80:b9:e7:a7:54:82:c0:fc:75:bf:
de:1f:2a:c4:b1:93:82:4f:ec:66:e1:bb:26:c0:d2:
eb:bc:a9:84:22:38:ec:8b:21:d0:c8:3b:1d:e6:f0:
70:76:3e:41:2b:da:78:fe:84:c6:71:de:de:7f:26:
29:58:de:e0:85:25:8b:f5:7d:08:0b:5f:49:9d:35:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:8C:AA:98:1A:04:E3:97:E9:C1:3B:DB:3D:2A:7F:5A:0E:CD:26
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8e:30:b2:90:83:28:92:fd:a2:53:2a:fe:47:cd:bd:e9:07:
57:bf:91:71:3f:cc:12:91:aa:a6:5e:7b:28:0f:f3:88:8d:b3:
e6:d9:a5:95:d2:93:f9:01:c3:36:9c:71:32:09:5d:7a:b0:b6:
b8:ae:6c:98:d3:e1:a1:cc:22:1a:9f:33:32:58:f1:0b:1a:94:
c0:bb:16:c8:12:f9:fc:6e:57:48:36:c1:52:11:32:98:0c:bf:
27:7f:17:df:23:4b:14:29:87:6c:b0:56:25:0b:4d:47:74:21:
bf:bd:5e:83:b4:de:a7:aa:91:3e:5d:31:70:fa:83:0d:e3:c5:
a6:7f:50:6e:07:df:c4:a5:8c:b5:12:96:15:72:ef:cb:c4:4e:
2c:45:3b:0f:1e:bd:a6:c6:7e:96:31:1d:09:fd:39:2f:42:21:
a2:cd:6b:b6:bd:6c:e4:cd:c7:35:6c:74:34:18:1f:5c:20:15:
bd:6e:2b:2f:33:ab:6d:38:46:5a:8f:3f:a0:08:33:bb:13:fb:
4f:f9:ac:26:af:02:4c:2e:ed:0d:8b:9a:bf:9f:9a:c4:2d:c2:
ae:e1:f6:26:06:2f:fd:04:1a:9b:b4:07:fa:5c:8f:1a:fe:52:
19:89:25:b0:34:9d:a4:9e:fc:0f:35:10:44:48:df:77:3a:fc:
a4:a0:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:12:16 2024 by rpki-client on console-ams.rpki-client.org