Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: EmhN5Pgj8PwEP6124daARmUjZkTTY11IBYzTS9J/4Yw=
Subject key identifier: 2A:FC:C6:EF:94:B3:52:19:8C:52:3C:AB:5B:81:A0:25:80:C2:FC:87
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019356F6E6C5EB91712DEDBE86ECFCD1583D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 35
Signing time: Sat 23 Nov 2024 03:00:41 +0000
Manifest this update: Sat 23 Nov 2024 03:00:41 +0000
Manifest next update: Sun 24 Nov 2024 03:00:41 +0000
Files and hashes: 1: 5bVviZbxaRhX7mvHtDQCGrUFUd0.roa (hash: 22P6dYpCSeoLweEKlkaH16eahIRuiCQBsWF+ApxdUXQ=)
2: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: 5TYPwfWTeBDeV6ZvbMzxGPoHC4mAw08cv8HtaJW03ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:e6:c5:eb:91:71:2d:ed:be:86:ec:fc:d1:58:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Nov 23 03:00:41 2024 GMT
Not After : Nov 24 03:00:41 2024 GMT
Subject: CN=2afcc6ef94b352198c523cab5b81a02580c2fc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:35:d6:50:99:be:e6:37:f6:10:2a:4b:0b:
df:ab:5e:08:d8:0b:83:97:59:8f:95:d1:25:c6:8b:
29:1e:20:0b:46:20:af:31:fa:69:54:30:c1:e4:af:
30:89:4e:0e:89:2f:3b:86:f4:ba:67:6a:e2:85:55:
7b:e6:a7:63:1a:b1:4b:4f:e2:71:0e:9c:88:a8:49:
5c:41:d5:91:0a:98:31:2a:bc:e0:52:4d:ca:8f:31:
9d:02:67:16:8f:64:e8:a8:72:c1:71:28:17:36:0f:
a5:49:8e:e0:e7:40:b9:9f:b4:c0:d1:d5:85:22:9d:
89:df:0e:22:42:cd:01:a8:73:93:13:47:34:b8:ea:
94:5b:ef:41:d5:fc:36:cb:0f:8c:2f:b9:8b:ed:47:
83:9f:3c:c2:b2:f9:6e:cf:f1:ef:62:18:4b:09:b2:
c8:4a:87:c2:43:d4:f7:2f:69:6d:11:df:ca:21:4a:
a7:a7:8b:7e:e9:48:1c:87:f0:c8:d3:10:68:a1:21:
dd:80:89:c5:57:7f:82:00:37:a1:d9:f8:45:63:d7:
91:ed:77:bf:22:c9:d9:1e:d0:9e:70:63:6d:de:12:
28:9e:b8:87:15:b1:02:bb:93:65:f5:4f:4e:94:95:
76:11:1a:a1:ad:c3:79:eb:14:ab:42:ee:d0:13:69:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:C6:EF:94:B3:52:19:8C:52:3C:AB:5B:81:A0:25:80:C2:FC:87
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:a9:cd:f5:6e:b3:c5:d2:a5:aa:f1:07:f6:c9:f2:af:35:
35:3b:8b:05:81:3a:be:bf:d2:48:e5:29:6c:4e:78:3b:ff:b2:
9a:2f:1f:0b:a1:bf:0c:43:6a:4b:b8:13:ab:96:7b:d2:d5:30:
57:75:37:0a:ce:92:63:79:2b:4d:20:23:0f:84:12:db:8b:b2:
bc:93:85:84:35:4e:86:7f:4d:9f:72:6d:0d:f5:ad:ac:72:8b:
00:47:0e:14:00:d3:5d:de:cf:9f:08:9f:e1:0a:75:ea:6c:1b:
c8:f3:14:8a:49:6a:fc:d6:a2:f3:29:38:df:d2:57:02:db:8f:
b8:7a:2b:4e:64:a1:64:91:08:b6:fc:84:b3:e8:c1:67:8b:8e:
a6:1b:4a:59:df:e0:da:51:57:2c:02:6f:d1:34:fb:bb:09:6b:
6a:4c:99:5a:32:d0:e4:59:64:ad:5f:4b:9e:c3:74:08:e9:33:
ba:4a:52:48:7a:d6:8b:fc:d0:37:bb:cd:b7:98:72:78:ed:68:
35:12:9e:f8:bb:5b:c5:70:c3:22:9f:d6:7d:e4:c6:00:bb:39:
03:3c:17:73:23:1a:de:75:f0:c7:05:60:e5:65:13:16:c5:bc:
58:eb:c4:72:c8:cb:ae:48:24:ec:aa:13:f8:b5:52:b6:e7:bc:
0e:b6:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:23 2024 by rpki-client on console-fra.rpki-client.org