Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: zXNQj4ylLFwrC7rhMvgcA41zzSM6NWD319KgavRIYsA=
Subject key identifier: 71:AF:B0:E9:24:D4:17:32:21:CC:08:FA:52:64:E2:AE:E2:F2:71:C4
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0193595343647B6489715D7BA1D01C7C4A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 14:00:49 +0000
Manifest this update: Sat 23 Nov 2024 14:00:49 +0000
Manifest next update: Sun 24 Nov 2024 14:00:49 +0000
Files and hashes: 1: 0xQvjuoWhziCewvlKMKdeMZCcJs.roa (hash: QINLyrSdDMRy1xP5bKPZHxop+1UxPPtKD/rIRytHL48=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: hYkvgL0ARasfB8cv3na9YoZlCd8w4UEw84LgwR6KMIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:43:64:7b:64:89:71:5d:7b:a1:d0:1c:7c:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Nov 23 14:00:49 2024 GMT
Not After : Nov 24 14:00:49 2024 GMT
Subject: CN=71afb0e924d4173221cc08fa5264e2aee2f271c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:2f:8a:70:a3:5b:b0:e2:7f:27:68:07:1f:
3a:c8:53:15:82:4e:7f:6a:a5:9e:cc:eb:66:89:52:
91:ed:1e:14:15:a7:06:6a:f3:42:c1:1c:aa:dc:4a:
b0:d9:a2:9c:ff:fd:01:eb:61:90:d3:25:02:84:5c:
19:4d:43:90:f1:ac:b0:c8:74:86:50:ca:9d:f1:9a:
c3:83:41:64:d5:9e:42:60:8b:3d:d1:8f:26:0a:c1:
51:e2:a4:04:8f:09:40:cc:17:77:76:bf:99:68:57:
5a:08:f6:8f:78:fa:ad:45:81:29:0e:d2:04:29:88:
0d:1a:2a:f5:7f:80:60:ab:d9:f4:7d:52:d9:8b:62:
d2:97:97:87:33:79:50:1d:a0:a1:64:44:be:e9:d0:
d9:2b:32:7e:04:e9:f6:ed:7a:44:a3:24:03:da:75:
7d:5a:66:ab:cb:ce:4c:9a:d1:96:6f:29:df:c7:48:
f7:bf:4a:7d:64:4e:e9:ba:00:e8:f7:b6:43:39:b5:
f8:5e:1a:ac:53:c1:b6:49:16:ee:b0:b3:b5:ff:82:
55:5d:d3:98:a9:a3:f9:ce:0f:75:48:ee:8e:19:95:
c3:27:60:d1:21:f4:dc:ef:fa:c8:b6:11:39:5b:85:
7a:2c:bc:ff:22:c4:08:7c:b8:9f:b9:45:ef:bb:22:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:B0:E9:24:D4:17:32:21:CC:08:FA:52:64:E2:AE:E2:F2:71:C4
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:b9:89:7a:d1:b1:a7:8f:d3:11:dd:fd:b4:b3:b5:1c:14:
17:13:44:c6:ce:54:63:43:3e:8c:02:f0:16:17:8c:9e:bc:85:
5e:65:f0:5a:0f:96:cd:8c:4e:a8:2e:11:1e:94:26:a1:6c:b9:
fb:20:73:d9:5d:d9:de:12:ea:5c:27:07:8e:fe:36:8d:29:47:
dc:f4:31:fa:a9:7f:b9:22:9f:b1:95:d3:f7:69:85:77:50:82:
42:42:e1:6e:1f:44:46:35:5f:e1:be:ba:b1:d4:84:ee:46:ec:
67:3c:6b:e6:38:e7:1f:89:6f:f4:fb:39:fc:8d:e5:d9:af:4e:
5e:ff:f1:ae:6d:84:0c:94:77:39:1a:68:c0:b2:1e:2c:76:63:
e7:4e:1a:21:00:b0:29:95:b4:42:c9:65:5d:37:ba:67:17:56:
1a:84:d6:f3:7c:63:ee:85:53:56:7d:c1:fb:ec:44:7c:ae:e7:
b2:92:25:fd:0b:7b:92:7b:f8:79:a8:23:91:72:a9:c7:6d:5f:
6a:be:02:49:d7:44:93:13:5c:2a:8f:b0:02:c1:f6:63:f4:43:
6f:8b:64:c9:af:49:01:97:94:45:f9:49:37:f1:a7:f6:90:62:
cc:15:93:00:ec:fa:e4:a5:27:19:44:93:7b:96:f7:da:5c:71:
2b:34:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:21 2024 by rpki-client on console-fra.rpki-client.org