Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: n7VzMtJuS4nPUdw+NezarUKB7i/gPRBpK6A2DMwTlIY=
Subject key identifier: 7D:E6:2B:AB:0D:01:F1:4C:CB:A8:6C:B4:00:B8:0E:0B:93:03:7C:6B
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019356898240F723C72E8EDB80421E8D17E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 0FB4
Signing time: Sat 23 Nov 2024 01:01:12 +0000
Manifest this update: Sat 23 Nov 2024 01:01:12 +0000
Manifest next update: Sun 24 Nov 2024 01:01:12 +0000
Files and hashes: 1: 3UAwUasb8GUCAdSlEJM0oxgfIrA.roa (hash: prx1pfbTiHL+EdzEk/fdrIiejhT5sgJytsEgTzQQSvU=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: olKbCXe1iHr0zpDj/B+9vI+8NjmSAYQVb4IcQ0vr0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:82:40:f7:23:c7:2e:8e:db:80:42:1e:8d:17:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Nov 23 01:01:12 2024 GMT
Not After : Nov 24 01:01:12 2024 GMT
Subject: CN=7de62bab0d01f14ccba86cb400b80e0b93037c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:3a:a4:bd:25:e0:f3:fa:ad:c4:b2:3c:96:
b7:c5:8c:d6:85:61:93:84:c5:0e:60:91:8c:5f:96:
ff:ee:d1:c4:19:45:d4:37:cf:39:17:08:ed:e0:39:
4e:28:0d:a8:a1:e5:c3:95:ff:87:99:37:12:fa:06:
d4:d9:30:46:75:69:f6:b9:4d:93:ad:1b:e3:6b:66:
31:8a:be:4c:cd:76:59:a9:80:61:87:dc:16:78:aa:
5f:13:f6:98:48:f4:37:42:5d:4b:04:99:45:13:c9:
ac:3d:94:07:bb:8c:79:a5:de:7a:e1:9b:5e:c4:ba:
a2:15:74:d6:84:9f:0e:56:ca:f7:ac:3b:f5:a0:d8:
61:3d:7c:55:71:96:db:50:16:88:11:82:21:76:e0:
a8:2f:f4:61:e2:b5:9b:4f:72:94:18:30:9c:62:97:
1b:85:cc:57:2e:d9:45:a9:21:88:01:af:81:83:c2:
09:72:11:92:82:96:c8:03:6d:c2:61:b2:37:b6:bf:
f1:3b:a4:07:b8:5f:22:82:8e:c1:23:51:e6:15:21:
da:d7:d7:b7:24:cd:87:b3:61:9b:f6:50:75:95:a1:
d4:fa:8b:2e:3a:40:46:2a:fa:c3:98:46:fd:08:c0:
ee:bd:ab:ff:b2:7d:c2:88:ab:78:32:da:ce:92:c2:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:2B:AB:0D:01:F1:4C:CB:A8:6C:B4:00:B8:0E:0B:93:03:7C:6B
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:7d:b9:2e:21:41:06:16:2a:16:8e:e2:6f:47:08:1a:2d:
a1:0c:51:df:5a:c7:4d:a0:12:f5:c2:f8:f5:b2:45:ea:7a:6f:
b1:31:5c:1b:9d:0b:b5:2d:2e:0a:87:d6:73:6f:25:f6:44:d6:
e0:34:39:d6:15:ae:94:04:95:c1:2d:c0:37:b8:a8:14:02:5f:
60:6a:12:80:65:66:0b:8c:56:c4:3e:bd:5e:f3:07:6d:45:f4:
14:4b:ee:da:92:09:f3:01:7e:03:2f:5e:de:83:83:ed:ae:5b:
0f:48:2a:34:77:bf:ca:35:2c:da:91:d3:f4:0e:af:75:84:e0:
28:52:d8:21:18:16:27:38:93:5d:5c:d1:66:f2:ff:d3:1f:94:
52:fa:d1:fc:3a:7d:79:d2:60:2e:1f:b4:23:a4:13:02:a4:d1:
05:7c:89:68:2a:96:72:9b:dc:dd:2f:7a:87:9a:ba:e6:b0:d8:
e7:00:14:09:bf:c3:01:86:f6:d5:1c:23:3d:cd:c8:59:0e:5d:
42:20:bf:9d:f0:41:50:a4:2e:1e:0f:6a:b8:e5:80:09:3f:73:
39:d9:eb:7d:56:2b:5e:ac:82:3d:ec:c2:ab:2a:7d:8d:8f:9d:
62:90:e8:1f:bf:d8:64:0e:27:f6:ea:f2:7c:53:3f:74:e2:b1:
cc:af:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:30 2024 by rpki-client on console-fra.rpki-client.org