Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: KIemOmUm7y9N5SyLgdMv5Om9q5OnSUY+E8rrih43n04=
Subject key identifier: 32:15:BD:AE:6F:2E:06:E3:B0:0E:49:07:87:B0:D7:3A:C3:55:5E:CB
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01935651B58DCC35B88C6BC38DAF600A4A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 019D
Signing time: Sat 23 Nov 2024 00:00:15 +0000
Manifest this update: Sat 23 Nov 2024 00:00:15 +0000
Manifest next update: Sun 24 Nov 2024 00:00:15 +0000
Files and hashes: 1: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: Iz44JUTOknuspPpr7TDIEsJfx715dfhdvOfQGi+11ak=)
2: zPgrfXzNu5g3ga4u9iJp6lBHehI.roa (hash: I893Qc6rnj5gmLwCvoILXvSPP2Gpj/JUINtpeEn9KXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:b5:8d:cc:35:b8:8c:6b:c3:8d:af:60:0a:4a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Nov 23 00:00:15 2024 GMT
Not After : Nov 24 00:00:15 2024 GMT
Subject: CN=3215bdae6f2e06e3b00e490787b0d73ac3555ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:8c:ad:de:93:b9:11:cc:e9:c4:67:ab:97:
55:2d:b5:06:47:53:65:8a:e8:a1:9f:9b:29:a4:53:
11:d4:08:7f:6b:87:87:ba:62:aa:cb:f2:59:64:6b:
2e:37:1c:6e:b4:60:d1:69:b8:5a:aa:18:39:c0:9f:
76:de:6f:d0:a0:95:89:cb:37:95:07:ea:95:f9:37:
26:b1:90:99:9d:06:05:0e:2e:b2:e1:7c:65:bd:fc:
b3:fb:0b:13:12:38:85:a7:27:07:d6:a6:05:79:18:
d8:5e:e3:54:8d:03:ea:cc:f0:9a:f2:04:e2:90:e8:
8e:d8:26:cd:f1:da:6b:ec:d0:c5:dd:bb:7c:45:66:
4f:49:6e:ee:29:97:3b:6f:6b:c8:20:db:9a:c0:d9:
f0:77:a8:f4:9c:7a:ee:7f:83:e4:2e:3f:76:41:ba:
8c:78:4e:46:a8:92:8b:ed:9c:20:51:f6:10:c1:b1:
69:51:df:9f:65:58:30:97:aa:73:ae:21:3d:01:da:
97:2b:f6:73:b9:74:6d:58:6e:a0:76:4e:23:ab:d0:
86:82:83:0e:b3:be:32:ce:0d:e8:4a:ea:c4:f7:68:
a0:25:90:aa:d7:58:3b:a1:8c:a7:5a:2c:57:b3:3e:
bf:1d:42:ad:41:81:d1:f5:65:9e:45:0b:81:03:3c:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:BD:AE:6F:2E:06:E3:B0:0E:49:07:87:B0:D7:3A:C3:55:5E:CB
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:dd:b0:67:a4:fd:60:40:fe:bc:20:ab:cb:6a:9e:51:14:
42:91:24:37:be:17:3e:8f:52:aa:90:e9:c3:68:34:11:16:2d:
01:5c:1e:87:0f:ce:05:a9:6b:18:fc:4f:8d:36:1d:e7:2e:4b:
98:73:b0:66:80:37:b9:e6:2c:df:bf:ef:12:50:a7:5e:ce:9f:
55:34:27:42:85:77:f5:bb:be:e7:b7:49:46:bf:0f:82:44:fc:
b2:6e:1e:be:7b:43:3e:26:34:df:46:11:2d:7b:71:9b:ee:1c:
7a:cc:e6:65:b0:86:3a:98:56:1b:00:04:8b:df:f0:b6:c7:45:
38:e1:e2:88:e5:7e:35:72:89:a9:81:11:08:ec:66:d5:47:44:
02:5c:d3:5d:dd:72:95:75:e6:4f:17:dd:45:b0:6e:e9:13:77:
66:a9:4a:61:ba:6d:5a:aa:d8:7c:5a:6e:00:f1:ae:92:e5:1c:
dd:7d:47:58:57:2f:82:0f:64:89:52:ff:6c:51:3e:96:ae:fd:
39:d3:63:6d:50:72:3a:0d:d8:a4:bb:62:cb:80:32:9a:9c:e1:
16:59:bb:e0:b8:27:c0:f6:40:c7:a5:d8:be:92:86:54:1c:75:
7c:48:29:08:b3:e5:b4:8f:f8:86:a8:de:92:53:f8:89:4d:d0:
e6:a5:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:30 2024 by rpki-client on console-ams.rpki-client.org