Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: DvouDZgFXKRqc8EfKhTLdFtq4nB4Ztlc15vjbxdRXqA=
Subject key identifier: AF:1C:44:29:EA:E6:2D:57:F2:98:65:29:FB:58:74:66:5D:51:CE:C4
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019368C626CF08B57953FF8F6F396590EAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 058D
Signing time: Tue 26 Nov 2024 14:00:36 +0000
Manifest this update: Tue 26 Nov 2024 14:00:36 +0000
Manifest next update: Wed 27 Nov 2024 14:00:36 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: A33xvFtrWFJEOo8vFEGCQCa/oXT0zoWevilY/QbS9mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:26:cf:08:b5:79:53:ff:8f:6f:39:65:90:ea:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Nov 26 14:00:36 2024 GMT
Not After : Nov 27 14:00:36 2024 GMT
Subject: CN=af1c4429eae62d57f2986529fb5874665d51cec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:4a:fc:f3:48:ee:21:1b:89:eb:f5:90:9f:
4c:44:c7:00:cd:bc:84:2f:2f:b1:5d:14:70:8b:78:
cb:7b:59:41:5c:4a:82:51:7f:bd:dd:57:2b:c4:ad:
dd:60:7e:39:72:76:0d:09:3c:e1:5a:8f:fc:e0:bc:
64:c5:b0:ea:18:c3:3a:bd:d9:60:2f:b5:8c:d9:72:
77:ab:55:8c:2b:d0:47:46:c3:57:c3:01:7e:bf:93:
b2:cb:c6:c9:81:91:dc:d7:2b:7f:20:0c:b0:88:c1:
a8:28:08:51:de:50:85:96:4a:46:fd:23:23:d7:f7:
4f:ea:c9:b2:3d:34:d9:60:49:68:c3:d0:ff:5f:d8:
78:57:d3:1c:98:3c:85:d3:e2:c8:ba:91:cc:ea:e7:
68:de:e3:8e:5c:32:e2:1d:4a:a2:5d:29:b0:72:0b:
a0:19:1e:0a:f4:50:e4:8d:3a:87:77:b1:8b:10:b3:
55:2c:f2:a5:0e:02:87:81:3f:0a:0f:40:79:c0:46:
69:36:4b:1d:76:e8:8d:e9:37:ba:52:ce:02:fd:38:
46:2f:be:a1:1e:46:79:53:d3:d0:5a:e5:4a:9d:80:
85:b6:11:70:df:d9:9f:5e:e6:77:8c:d8:82:f4:0b:
61:c8:7b:e0:33:c0:c4:ef:bb:ae:83:ad:01:2d:35:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:44:29:EA:E6:2D:57:F2:98:65:29:FB:58:74:66:5D:51:CE:C4
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:10:1c:19:fe:7e:b3:62:02:04:1d:12:79:ff:33:a7:e8:
ba:da:c7:8a:11:18:35:aa:53:24:4c:9e:0c:da:19:a8:86:9f:
91:25:d8:99:8e:72:a4:42:72:53:e9:0a:67:90:6e:6a:6a:72:
1c:81:26:1e:61:ee:89:54:b2:2b:57:cd:f5:b6:f7:ea:7b:a9:
b2:9b:82:63:ba:6d:ef:7e:d5:05:15:9f:94:bf:63:0d:9f:31:
62:d9:39:d2:0b:ad:bf:76:b9:94:b4:f1:15:18:57:1f:74:8c:
2b:b8:38:88:b4:49:f1:ea:84:78:cd:ec:93:7f:0f:39:fd:f4:
5b:7d:23:1d:71:14:00:70:15:18:ae:05:9f:52:9b:dd:6a:97:
71:16:11:68:85:bc:d5:3b:a9:bf:17:df:36:ba:50:e8:2a:8c:
66:27:f7:06:ef:56:23:96:c2:ac:fc:ac:37:63:6b:14:8a:30:
e7:f1:0e:51:9a:f9:e9:e6:27:3c:54:36:65:fa:85:ca:0a:c1:
cc:eb:1b:ea:d4:da:20:fa:71:7a:ea:86:30:80:8e:9b:ec:36:
5b:8d:a8:d1:8e:b4:f2:45:3e:cc:d8:84:4d:f5:56:c8:c0:e0:
cb:b7:fa:ec:35:7e:94:8d:54:55:53:17:2c:73:42:5a:41:0d:
41:24:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:39 2024 by rpki-client on console-ams.rpki-client.org