Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier: EMX+/f2qmsWRRcjMG9kpFzPDhbzEI3XicH8dnD7bghM=
Subject key identifier: C5:86:F4:E9:3E:66:54:0F:4D:69:0B:DA:B6:54:72:B0:78:C0:1E:D6
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 0193617ACDB1DB537C88BADF4D00C43CA2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number: 02C0
Signing time: Mon 25 Nov 2024 04:00:58 +0000
Manifest this update: Mon 25 Nov 2024 04:00:58 +0000
Manifest next update: Tue 26 Nov 2024 04:00:58 +0000
Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: FRqu3xw4uxFhpB8GyY9i3yC15WnIsY3fNx977biBcJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:7a:cd:b1:db:53:7c:88:ba:df:4d:00:c4:3c:a2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Nov 25 04:00:58 2024 GMT
Not After : Nov 26 04:00:58 2024 GMT
Subject: CN=c586f4e93e66540f4d690bdab65472b078c01ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:3a:bd:d0:08:72:c7:9a:3a:cc:3d:a9:cc:
8e:38:f8:b6:63:31:13:84:28:b1:45:ec:cf:23:92:
c0:96:11:ae:c3:17:a9:74:f0:49:b7:28:db:8a:22:
27:77:2c:2f:57:4e:ae:47:3d:2a:fa:b1:e4:c9:05:
39:56:82:96:78:af:4d:d1:fc:e1:ac:81:13:4a:96:
60:b7:70:71:0e:ea:8f:20:b4:dc:e0:bc:c6:07:92:
6b:47:30:b4:80:e4:55:87:56:24:f5:e1:6e:6e:aa:
59:9c:62:6f:c3:ee:53:6e:7d:6c:eb:1d:bf:2c:b1:
17:f6:dc:1c:5a:cc:a0:0b:24:62:b4:05:28:cd:60:
07:c6:70:e0:bf:b9:42:71:a2:aa:35:35:3d:31:b5:
f3:e9:a8:b7:5c:5b:bb:0f:a2:a2:98:78:2b:ec:c0:
e3:7f:3e:c2:62:34:f7:46:bc:26:99:c5:42:fc:ea:
91:6d:07:0a:5d:72:26:58:86:2a:1a:91:44:01:9f:
71:e3:d7:e8:39:fc:c2:d5:c1:6a:b9:28:de:ac:4e:
b5:a1:b2:68:b2:32:ca:d7:8b:b7:fb:aa:c9:aa:d8:
dd:db:6d:fd:4c:48:88:e0:40:d0:2c:74:22:e1:97:
90:10:a1:80:fd:46:fb:42:70:1b:16:fd:6a:1d:d6:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:F4:E9:3E:66:54:0F:4D:69:0B:DA:B6:54:72:B0:78:C0:1E:D6
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:ec:23:c2:33:0a:70:ba:cc:8d:d9:9c:c0:0f:86:07:85:
0f:8c:d0:81:3b:2b:30:c2:d2:6b:3b:8f:0b:6b:5f:97:d5:5d:
bc:79:78:75:cf:ff:4a:e3:0e:22:60:33:e1:73:c8:89:1b:db:
b2:9e:97:3f:1c:1c:68:76:ca:0b:6a:8f:f1:11:fb:cc:ca:9a:
7e:19:f8:e1:49:4d:40:60:41:b5:65:aa:45:67:3d:3b:c9:fc:
79:4b:9f:8a:f6:7f:38:7f:01:35:69:ad:65:bf:fe:9a:20:b8:
c3:e5:80:84:5f:ba:79:db:b3:28:74:58:e2:06:89:b9:00:83:
85:55:af:22:53:dd:e5:6d:31:21:07:39:91:4e:2d:9f:89:ea:
95:82:2e:61:c0:94:66:de:4f:fe:b7:c0:45:34:ad:9e:b1:34:
89:f8:34:35:b6:4a:f5:a1:06:8f:03:ff:14:7c:71:30:1d:21:
a4:78:44:c7:ac:f7:f7:57:c1:b9:0a:bb:39:d3:ab:9c:0f:70:
72:ef:c9:cf:52:08:61:9e:4f:26:cb:ab:a0:b4:fb:e6:a4:5f:
aa:c4:c3:e3:fc:e5:58:65:34:eb:4c:48:ba:72:eb:2b:cc:04:
30:c4:bb:a3:89:cd:ac:51:92:c8:af:64:62:23:9a:0f:b4:36:
2a:70:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:08 2024 by rpki-client on console-ams.rpki-client.org