Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json)
Hash identifier: euwrLbN3NrGyb4vnWFixC5TQM2iays0gZshQo8nBGw4=
Subject key identifier: 8E:DF:70:BB:F6:DA:DA:D3:46:9A:17:78:FF:48:DC:68:80:6A:93:6C
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial: 019358E57A048714FBC757C8FC4FEE273694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 12:00:54 +0000
Manifest this update: Sat 23 Nov 2024 12:00:54 +0000
Manifest next update: Sun 24 Nov 2024 12:00:54 +0000
Files and hashes: 1: MbPoWeCCc3HCf_EpVMIFHvrmndQ.roa (hash: R14zWSPC7oBhs616wa+LbHX3YHCB48/ewmOKg0sPtqY=)
2: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: JXitsgkbAYqkungAbX6x0FRSUb8yYA9+CzrgphNTR2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:7a:04:87:14:fb:c7:57:c8:fc:4f:ee:27:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Validity
Not Before: Nov 23 12:00:54 2024 GMT
Not After : Nov 24 12:00:54 2024 GMT
Subject: CN=8edf70bbf6dadad3469a1778ff48dc68806a936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:f8:34:5c:fb:4a:c0:b9:01:49:d7:b1:64:
ec:34:b7:9c:21:6e:e4:51:ca:c4:64:d0:eb:0d:e7:
b1:ad:e3:ce:56:8f:70:16:4f:7c:21:61:ea:4d:6e:
ea:d9:0c:ad:1c:4e:48:b4:df:fe:3f:63:4b:c2:25:
a9:55:69:f1:19:d4:ca:86:9d:f3:b4:d4:cd:d1:d5:
bd:47:2d:62:a3:ce:5d:e3:60:bc:59:b2:87:85:82:
45:90:ca:06:04:af:6b:05:2a:a5:3e:15:67:d2:57:
e9:26:a2:bc:1b:31:9f:2d:64:80:58:56:25:57:2b:
cd:b8:c4:2c:31:22:4a:88:e7:5c:e4:71:f5:b9:77:
d6:cc:e1:f6:6b:1e:64:ec:78:0a:63:58:b4:3c:99:
36:c2:80:34:89:a8:b4:eb:70:a8:b2:23:3f:8f:88:
4b:29:a0:31:d2:01:78:b1:a6:a5:e2:7c:a7:2d:45:
ce:1e:ee:7f:f0:22:ad:c8:46:7f:79:73:6b:c1:88:
5b:74:8f:a3:87:1e:29:c8:69:e6:0d:6b:a6:0f:a3:
dd:27:9d:45:41:76:aa:b3:81:aa:27:2d:53:58:3d:
9c:71:c4:3f:e5:ee:5d:67:61:d5:3d:d0:24:b2:57:
71:b6:86:b8:06:e4:1b:8a:bb:c9:11:b9:28:4b:b3:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:70:BB:F6:DA:DA:D3:46:9A:17:78:FF:48:DC:68:80:6A:93:6C
X509v3 Authority Key Identifier:
keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:c3:55:08:80:15:c3:b3:3c:59:82:02:1a:3e:31:1e:b4:
e9:03:b2:14:88:92:c7:0b:6e:d9:32:70:59:91:f9:c6:28:79:
41:3b:a9:1c:5e:49:20:b3:43:02:0f:e3:67:d2:dd:16:90:e0:
88:e4:4b:95:81:68:10:dd:79:61:2e:74:b2:fe:cb:44:b3:65:
a2:e5:24:67:34:27:d2:0b:9b:39:e2:69:55:5f:0c:a8:84:4f:
b2:d8:ee:84:b7:69:26:66:51:50:15:4c:dd:a7:67:44:44:a0:
f0:27:b4:0c:34:72:3c:a6:cc:3d:82:c6:e3:a0:60:48:3f:7c:
65:2f:56:b7:54:67:6a:17:30:b3:f7:80:43:e9:c4:94:fa:16:
32:50:29:e5:de:d6:e3:63:ba:92:20:ea:be:38:e7:79:28:61:
2e:b0:c9:89:b3:57:bf:ad:71:1f:a9:1b:3c:a2:da:46:36:c9:
3a:8c:20:41:05:9b:87:58:02:68:ce:d5:61:c0:e6:d7:64:1c:
91:0c:37:f4:64:40:c4:06:c4:56:48:4e:62:36:cc:21:a5:17:
bd:48:f1:b8:ee:99:76:a0:0e:03:7c:4c:aa:70:58:4d:51:90:
38:98:d7:f5:0a:ea:20:6f:da:b0:cb:5f:77:df:57:f5:b4:8a:
a4:ca:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:16:47 2024 by rpki-client on console-fra.rpki-client.org