Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: N/2JsUTg6Vg/o4VGrpTuadBjkbEdVTGGYid7JyciP+k=
Subject key identifier: A9:B2:4A:2C:6F:F8:93:45:AC:17:A1:17:88:7F:DE:B6:03:80:3C:95
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 01936BC7526CE392C19DF235A4BE6D38D3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 0D6D
Signing time: Wed 27 Nov 2024 04:00:45 +0000
Manifest this update: Wed 27 Nov 2024 04:00:45 +0000
Manifest next update: Thu 28 Nov 2024 04:00:45 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: DK0sCHh/oGBE/aTcv+v/Rz5ieudyZh1suHZriyTa84U=)
2: lZgAX56xJ7ESX3QysCob7DlKdko.roa (hash: FGGMS/DJNqyABUbmVKY16yqMN6Twq7HR/c03KKr4hec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c7:52:6c:e3:92:c1:9d:f2:35:a4:be:6d:38:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: Nov 27 04:00:45 2024 GMT
Not After : Nov 28 04:00:45 2024 GMT
Subject: CN=a9b24a2c6ff89345ac17a117887fdeb603803c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:2d:02:c1:68:d5:8b:be:a9:8e:b9:dc:93:
fc:81:2a:98:c7:7e:b8:db:9f:71:80:51:9e:3f:f8:
46:80:27:e7:f9:dd:cd:23:b0:53:a2:bf:8c:bc:f7:
71:fe:25:58:04:e2:eb:98:5a:6f:0b:5f:b0:c7:43:
82:d6:08:72:e9:f9:5b:a2:61:66:9b:0d:47:c3:2f:
d3:75:b9:b4:0a:d9:bd:bc:55:d1:b1:48:a7:15:72:
9f:ce:2a:f1:a5:dd:50:8c:54:34:bb:ad:00:22:18:
c9:25:f9:98:b1:ba:0a:6f:72:db:48:47:98:ab:c1:
ba:08:c3:40:cf:b4:b3:53:63:4e:48:4c:42:b7:4d:
80:8f:de:d2:91:a6:4e:5f:c0:f1:20:e8:e0:94:b7:
a7:7e:d9:fb:21:26:96:60:55:2d:9a:ea:bd:6a:9f:
18:43:83:7e:5b:fe:af:1e:4a:9b:59:ee:62:ee:2c:
0d:50:c1:7c:92:92:df:03:1b:ed:1b:b0:b5:50:94:
15:76:11:60:4c:ce:aa:3d:9f:b7:0b:3b:8c:15:f5:
55:cd:e6:82:61:88:15:aa:e4:f8:28:ed:8c:13:57:
42:0a:88:d0:d5:f1:a1:7e:ea:71:f8:11:c6:77:c7:
2e:44:5e:52:ec:d4:bc:6c:db:2f:22:62:cf:c5:43:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:4A:2C:6F:F8:93:45:AC:17:A1:17:88:7F:DE:B6:03:80:3C:95
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:da:40:96:85:64:3a:98:3f:15:a5:d8:e2:0d:c6:78:77:59:
f3:6a:08:8d:d4:b9:4b:87:78:1a:34:aa:3b:de:a2:3f:d6:65:
01:a2:5d:a0:f3:ba:5c:85:86:d0:69:bc:6c:d7:f8:6f:b6:c2:
a4:24:c8:15:90:b4:2c:6c:13:3e:86:7e:0b:f3:32:b9:ad:6c:
1e:73:79:0f:b4:fb:00:ae:29:c2:0c:35:b7:48:b7:be:43:29:
85:5e:7a:f5:4d:d8:1a:7e:de:49:3e:1d:b3:a7:6f:23:88:0f:
1c:b8:b7:a9:30:fc:67:e0:5e:f4:59:0f:65:71:27:3c:fd:c9:
53:24:4b:04:87:60:de:54:7c:16:8b:08:d9:32:fb:11:af:21:
0c:8e:9b:ce:3d:33:e7:9a:57:43:8f:58:9a:47:04:3a:6e:9a:
fd:84:e7:fa:b3:be:46:86:61:69:ea:54:c2:66:99:97:e7:45:
e3:86:44:58:9c:e1:f5:82:d5:ad:8e:ee:d5:1d:e7:8b:25:1a:
04:56:65:0c:86:35:06:e3:5e:23:a1:06:52:7d:97:60:41:c9:
e0:09:71:04:3c:de:a3:b4:3b:69:a3:8c:05:1f:f5:61:74:2b:
85:c9:32:f2:ba:30:ba:7e:4b:6a:b3:0d:d1:11:59:ad:2c:cb:
b5:b2:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:22:02 2024 by rpki-client on console-ams.rpki-client.org