Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: Eot8YePjoAEzoU4QtuRbXSDlXyELRKIs8ULFsnMYGSI=
Subject key identifier: B6:9B:2F:5C:34:EE:AF:69:4E:67:9D:BD:BF:93:B9:00:28:F2:A9:9F
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0193549C0DB8EDC597EBCDD6D3012C1EF4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 032B
Signing time: Fri 22 Nov 2024 16:02:13 +0000
Manifest this update: Fri 22 Nov 2024 16:02:13 +0000
Manifest next update: Sat 23 Nov 2024 16:02:13 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: dR0spi+n1MSUEMxm2PbWQmWJybMGOPUrtLnailIeFeM=)
2: HxomCw7KMpLSNlaOoR5KVHZ6MC8.roa (hash: tJ+FyzrF7rtTWakgFWAf/GYc9dzEQ00b5tcl1gK7jkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:0d:b8:ed:c5:97:eb:cd:d6:d3:01:2c:1e:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Nov 22 16:02:13 2024 GMT
Not After : Nov 23 16:02:13 2024 GMT
Subject: CN=b69b2f5c34eeaf694e679dbdbf93b90028f2a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:53:c9:a2:d3:7d:d3:03:c6:8c:82:3c:62:
fc:5e:2d:43:6e:07:00:ae:fd:74:57:bf:40:2e:f2:
1d:c6:21:b4:2a:f0:4b:06:9c:9d:d3:71:2a:35:c1:
e3:96:ec:b9:6c:77:d6:1f:d0:48:37:41:6e:ee:eb:
07:58:94:d3:06:7f:1d:96:70:4d:52:ae:20:b2:55:
db:8e:02:28:b1:f4:98:56:4e:6c:e3:3a:f7:a5:3d:
84:cb:47:82:1f:5f:b5:1a:02:80:46:6a:37:f4:5d:
56:d4:33:d5:46:37:6b:04:fb:04:7b:9b:2e:eb:e5:
33:98:13:82:f0:d6:c7:1d:01:10:bb:56:cb:98:46:
4f:1e:98:d0:06:3b:24:4d:0d:e4:b5:93:a3:f4:62:
6c:ef:38:b1:2a:4c:cb:aa:53:50:1b:d7:70:4d:41:
36:2e:a2:0f:ad:c8:06:99:a8:2e:02:6e:2c:06:d4:
14:d2:66:63:b6:74:c3:2d:b0:ee:85:85:a6:c0:d4:
59:b1:d7:8d:76:3f:cf:48:19:3a:36:38:91:3a:c9:
31:2e:e7:2b:75:5e:2b:dd:b6:86:54:06:46:83:ba:
e6:f9:4b:17:dc:38:62:b5:c2:8a:54:de:af:f9:78:
b0:0e:5a:f9:63:1d:0f:23:58:18:90:61:55:aa:1f:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:2F:5C:34:EE:AF:69:4E:67:9D:BD:BF:93:B9:00:28:F2:A9:9F
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:27:7d:25:63:ff:c6:ff:45:93:f7:7f:f5:c9:10:45:0a:
8e:5e:68:7d:a1:a7:2c:44:2a:dd:b4:97:c4:77:52:8d:fa:23:
f7:d5:62:24:e3:c4:9f:06:e0:71:f3:08:89:0a:77:d1:40:14:
3f:cb:24:93:25:36:bd:8e:59:1c:4b:4a:a5:f9:c0:7e:75:70:
08:63:34:0c:28:32:87:d6:1d:37:7f:f3:3c:c9:33:c2:bb:e1:
de:6c:6f:55:1f:d1:c8:ce:89:01:d2:62:b6:84:20:66:86:9f:
df:25:99:93:dd:fc:58:7b:85:56:83:c9:b3:08:25:16:82:55:
dc:62:8c:b4:04:49:ca:e2:1d:26:b9:a5:6d:71:04:39:6a:4c:
d3:27:0c:07:db:e3:1f:d7:0a:79:79:af:8d:e5:3c:24:0d:5b:
5c:20:a1:74:9d:d2:a5:1d:90:3e:d9:e8:e0:24:84:c4:67:48:
de:18:bc:ee:49:da:49:45:9d:6f:5b:b0:fd:cc:2b:df:6f:ab:
64:3f:cd:c2:c7:dc:73:56:5d:89:6b:31:da:2b:e1:4d:16:bc:
ef:9d:ad:58:0c:63:0d:83:04:0b:39:07:d7:c6:e9:7c:63:46:
02:8c:40:38:72:7a:f7:a7:c2:c9:a8:2c:7b:de:b3:3c:fb:60:
7c:6b:ef:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnA247cWX683W0wEsHvS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODkyMmQzNDgxMzA4ZGJkNGMyYWI2ZTcwZWFkYTlmNzVm
NmRiNjgwHhcNMjQxMTIyMTYwMjEzWhcNMjQxMTIzMTYwMjEzWjAzMTEwLwYDVQQD
EyhiNjliMmY1YzM0ZWVhZjY5NGU2NzlkYmRiZjkzYjkwMDI4ZjJhOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA765TyaLTfdMDxoyCPGL8Xi1DbgcA
rv10V79ALvIdxiG0KvBLBpyd03EqNcHjluy5bHfWH9BIN0Fu7usHWJTTBn8dlnBN
Uq4gslXbjgIosfSYVk5s4zr3pT2Ey0eCH1+1GgKARmo39F1W1DPVRjdrBPsEe5su
6+UzmBOC8NbHHQEQu1bLmEZPHpjQBjskTQ3ktZOj9GJs7zixKkzLqlNQG9dwTUE2
LqIPrcgGmaguAm4sBtQU0mZjtnTDLbDuhYWmwNRZsdeNdj/PSBk6NjiROskxLucr
dV4r3baGVAZGg7rm+UsX3DhitcKKVN6v+XiwDlr5Yx0PI1gYkGFVqh9ZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLabL1w07q9pTmedvb+TuQAo8qmfMB8GA1UdIwQY
MBaAFBqJItNIEwjb1MKrbnDq2p919ttoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgt
N2FlMjYzOTIyODIyLzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xYjhhOWQtZDNkZS00MWJiLTgyYzgtN2FlMjYzOTIyODIy
LzEvR29raTAwZ1RDTnZVd3F0dWNPcmFuM1gyMjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcwnfSVj
/8b/RZP3f/XJEEUKjl5ofaGnLEQq3bSXxHdSjfoj99ViJOPEnwbgcfMIiQp30UAU
P8skkyU2vY5ZHEtKpfnAfnVwCGM0DCgyh9YdN3/zPMkzwrvh3mxvVR/RyM6JAdJi
toQgZoaf3yWZk938WHuFVoPJswglFoJV3GKMtARJyuIdJrmlbXEEOWpM0ycMB9vj
H9cKeXmvjeU8JA1bXCChdJ3SpR2QPtno4CSExGdI3hi87knaSUWdb1uw/cwr32+r
ZD/Nwsfcc1ZdiWsx2ivhTRa8752tWAxjDYMECzkH18bpfGNGAoxAOHJ696fCyags
e96zPPtgfGvv9A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:14 2024 by rpki-client on console-fra.rpki-client.org