Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json)
Hash identifier: NDpfaNx8TMLYAlD0VZI2CnhgOlupXWRU/RMajL5rmDs=
Subject key identifier: 11:A8:43:CF:78:93:88:C3:6B:69:F0:C1:4F:EB:86:24:C2:7C:C5:38
Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0
Certificate serial: 019369DB1139349D75A9A1D8D93B5A51CF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
Manifest number: 0B0D
Signing time: Tue 26 Nov 2024 19:03:04 +0000
Manifest this update: Tue 26 Nov 2024 19:03:04 +0000
Manifest next update: Wed 27 Nov 2024 19:03:04 +0000
Files and hashes: 1: Jj-_xqiCKHtXyoyO7HWT99GVZmc.roa (hash: bVATiGFbfpsovuXFkgad1nJlcXwGk8iyLAIRnraTJUo=)
2: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: +mjk5+7XaAmbbBfQj8JxBvtscurj72Gj6JioV0j0X2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:db:11:39:34:9d:75:a9:a1:d8:d9:3b:5a:51:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0
Validity
Not Before: Nov 26 19:03:04 2024 GMT
Not After : Nov 27 19:03:04 2024 GMT
Subject: CN=11a843cf789388c36b69f0c14feb8624c27cc538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:54:93:47:7a:65:96:ed:b2:da:f6:15:56:
6e:76:1f:44:a4:71:f6:07:56:96:5d:bb:6a:35:c8:
63:1b:3a:a3:3c:5e:d7:03:92:52:0e:dd:5e:d5:ee:
67:2a:80:d7:0b:58:c5:06:77:e0:45:db:11:e1:70:
27:0a:a9:8d:50:3e:2e:18:85:02:76:00:8c:a4:04:
5a:a9:86:00:c6:67:d3:13:ce:d8:e3:14:ed:22:bc:
e0:d3:e3:e0:2c:84:2f:49:c8:16:d9:3b:4b:be:fd:
c2:7f:e8:03:16:b4:86:82:26:e4:45:f5:03:3b:4a:
7c:ae:bc:a1:dd:ee:29:e6:a1:fe:a7:4a:e8:52:46:
df:95:e2:dc:a7:55:51:99:1a:e9:79:cc:ce:ad:b8:
88:58:46:5d:16:43:00:48:a1:ea:f7:28:7d:75:3c:
5a:02:55:70:b2:15:13:f5:1b:af:d9:a5:a4:80:88:
74:97:9d:dc:49:6b:49:67:d2:03:3a:17:6b:95:7b:
83:97:a1:73:a2:d4:c9:3f:4f:16:6d:b3:54:a3:a8:
5a:47:64:46:39:e9:39:5a:59:eb:ed:44:ab:e4:4e:
dd:57:ba:a0:3b:ea:9d:77:e2:eb:b7:23:ba:23:dd:
0d:21:94:8c:d2:32:11:4f:1b:95:5b:ab:a0:8f:83:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:43:CF:78:93:88:C3:6B:69:F0:C1:4F:EB:86:24:C2:7C:C5:38
X509v3 Authority Key Identifier:
keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:20:dc:36:41:7f:bd:5c:e4:a3:aa:3f:4a:6b:d1:12:12:82:
a0:6c:0e:22:42:5a:09:32:e3:15:b0:61:20:a6:8e:fd:40:11:
81:3e:c9:3c:9b:4d:38:41:fd:5a:24:94:ca:67:c7:67:29:f1:
e0:d8:9d:c4:f1:48:88:25:ed:d6:06:03:a4:ac:06:a8:df:5f:
52:71:68:78:af:47:3e:d9:d3:97:ba:38:dd:35:8b:24:c4:cc:
42:08:54:42:e3:48:0c:48:32:e8:dc:8b:f5:4c:28:90:41:3a:
d2:e9:b8:c3:35:c2:7b:c6:ca:97:71:a7:c4:e6:4b:1d:39:19:
e1:40:7c:54:e1:b5:1b:27:26:de:3f:80:1a:2b:cb:d3:ac:ef:
25:57:53:50:9c:26:16:84:66:92:7b:14:f7:73:34:46:af:8c:
2c:43:2d:65:19:e6:e9:4d:ec:9e:44:96:a8:da:80:f1:92:ca:
98:4d:44:4f:6d:ee:ff:97:25:b1:93:e6:59:02:55:4a:f4:85:
00:b1:8b:1b:4b:9c:54:93:ee:1f:2f:57:d6:49:a4:40:d1:cf:
7e:3e:60:a7:e4:0a:67:6b:a5:63:dd:e6:c5:57:50:b6:f1:1b:
ed:8d:72:46:cc:af:74:63:fe:17:f3:e9:80:7e:00:8e:ec:9f:
91:4a:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:32 2024 by rpki-client on console-fra.rpki-client.org