Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: O4O93JU+uGS4reoapJsKmblrGk223bS39wzbjh9PHTY=
Subject key identifier: EB:80:CA:BA:C5:C0:DF:F4:B2:2C:BF:55:3D:96:F7:66:44:83:B7:95
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 01935576A9EE9440BA6065FEF1782FE44ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 12DB
Signing time: Fri 22 Nov 2024 20:01:00 +0000
Manifest this update: Fri 22 Nov 2024 20:01:00 +0000
Manifest next update: Sat 23 Nov 2024 20:01:00 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: Z4fuR5EypfWYDlnWUZCCGfXwRO6uaBTxay6XczN0bIU=)
2: T6u-O7Yskk01cBCrVjMPI_vtBDc.roa (hash: EfbOxeZJLKOIzKH92/ZxefZTGwebZrzvgz0YoK09jM4=)
3: _DV1a9kqVRBIzlmW--SN4hK6NS4.roa (hash: QCZD/3mJTApflOPAqd50mWdCMkzWSIiXmlhAMe16gzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:a9:ee:94:40:ba:60:65:fe:f1:78:2f:e4:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Nov 22 20:01:00 2024 GMT
Not After : Nov 23 20:01:00 2024 GMT
Subject: CN=eb80cabac5c0dff4b22cbf553d96f7664483b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:81:d7:e2:f2:d3:67:b5:76:b2:94:ff:3a:
e2:bb:34:5b:a6:7c:aa:cd:65:1d:48:12:cb:8a:5a:
d8:6d:6c:fd:e4:34:f9:b9:ea:45:a9:9d:30:16:6f:
e6:b3:98:89:28:e7:a6:27:5f:33:25:a1:4b:b8:e1:
33:c3:fa:b3:95:08:1e:5b:4b:34:4e:17:50:da:1f:
6f:63:e1:e5:b6:0b:4d:6c:3a:21:a9:b0:8b:f1:14:
05:02:a2:ff:46:b0:60:e9:df:f4:24:8c:de:ef:c0:
17:9a:75:64:61:4f:9b:71:e4:0a:d1:39:e3:58:1f:
1c:ad:d5:ab:d3:c7:28:eb:b0:f1:03:68:b9:d0:c8:
eb:32:13:ca:d1:26:df:7f:64:18:f5:7a:16:97:9b:
d7:d1:33:31:35:d4:66:f6:e7:c1:db:09:89:b6:d2:
d2:81:7f:3a:d7:3d:6f:f8:03:31:a3:14:b9:dc:02:
04:bd:f0:34:d7:97:7b:74:a5:47:4a:23:e0:27:70:
f3:1a:e4:42:96:e7:ac:76:6b:9a:df:52:86:ac:3c:
e7:00:ab:47:ea:b1:d5:f7:a4:13:df:be:c7:cf:14:
fb:66:a5:b3:0a:7b:3f:10:f5:17:72:2d:7c:f8:68:
e1:10:56:ff:27:bb:5c:bb:4e:4a:09:c3:c1:a7:c3:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:80:CA:BA:C5:C0:DF:F4:B2:2C:BF:55:3D:96:F7:66:44:83:B7:95
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:60:dc:96:71:b6:33:c5:7c:37:a9:9e:09:09:6e:f7:02:1a:
8a:7b:cc:e9:b7:81:60:63:10:6a:ac:a3:c2:1d:4a:29:94:cb:
51:a7:75:20:01:14:db:31:55:54:76:bc:a5:9f:83:52:08:99:
36:28:be:d0:36:a2:3a:b9:6a:75:20:06:23:b8:d2:d5:3a:13:
a1:56:05:44:32:c2:9a:c4:c4:9c:9f:30:9a:35:4e:57:5a:34:
2b:b1:27:88:48:35:08:dd:88:1e:82:fc:dd:e6:1e:80:0e:cd:
d5:e7:d8:47:28:46:08:b8:f0:e5:a5:74:98:58:2d:f8:81:71:
0c:b9:a6:30:11:e3:0e:89:e6:4c:16:6f:a4:51:c3:6a:27:cd:
a2:a2:05:40:a5:c7:53:5b:45:e6:83:0e:02:5b:94:0c:46:39:
04:01:04:ef:3f:f1:a8:48:f1:29:4f:15:06:8a:f4:14:73:1f:
01:b6:09:d5:0c:c3:47:ec:80:79:b2:be:c1:a0:02:0f:77:9b:
9d:d7:99:ea:d2:84:99:0f:dd:07:10:68:19:a3:6e:07:1c:2b:
e6:5c:2a:16:45:2d:d5:23:9a:84:06:dd:3b:f4:a6:ec:42:7f:
19:ed:2f:e4:0d:ab:f6:89:e8:c9:83:9e:d1:5f:76:cb:ea:a9:
88:98:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:28 2024 by rpki-client on console-ams.rpki-client.org