Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: tr51+3Ik8AqsEqQItnCHv4ai1HKyS7Pdx8tnFz71Xwk=
Subject key identifier: 84:2E:56:68:AC:85:A5:57:8C:5E:B3:5F:D7:E5:EB:61:0B:DC:73:4A
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 0192102BEB430991444C42E2C39B1659B5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 0FF9
Signing time: Fri 20 Sep 2024 16:02:46 +0000
Manifest this update: Fri 20 Sep 2024 16:02:46 +0000
Manifest next update: Sat 21 Sep 2024 16:02:46 +0000
Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: Rqiu1yRFFAQMKSps4rNspBlARcqzNsXEcvnpHwfXoyM=)
2: aa9M7URASlJ8JEXVWbEAYSRFIro.roa (hash: fQCtrzVXJUPHIiYjhiY4JKp5i6erQnpv2KZNff2K7tE=)
3: pYhICl89Ls11vtEswoMsnUNSRuQ.roa (hash: fQ5yFNa9lxcOfLBJ7cM3WnpRj9cJzZm0OE0+CUsUxM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:2b:eb:43:09:91:44:4c:42:e2:c3:9b:16:59:b5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Sep 20 16:02:46 2024 GMT
Not After : Sep 21 16:02:46 2024 GMT
Subject: CN=842e5668ac85a5578c5eb35fd7e5eb610bdc734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:35:1e:6d:b4:61:38:63:84:6b:26:7e:af:
12:86:4b:38:42:1a:0b:26:4e:cb:0b:0b:81:7d:ff:
8c:e3:df:6a:b6:69:43:a4:1e:3d:10:a2:4b:fb:13:
61:90:e8:e8:2f:f3:93:3f:33:8e:3d:fa:ee:4c:42:
80:26:09:cf:1a:2e:9c:3d:bd:8a:ac:c5:97:5a:0f:
3a:a5:83:97:47:c5:0b:15:df:65:4e:a6:41:f1:1a:
3c:d9:c6:30:aa:77:eb:5f:ed:c6:69:d3:ea:da:91:
9a:42:9c:ff:60:03:c2:33:32:b8:99:24:e3:88:60:
93:54:aa:16:0b:f6:ae:e5:5b:e6:f9:cf:a3:d7:74:
1f:fc:4e:f4:47:2c:f6:f9:47:63:99:0e:bd:c7:f1:
18:62:15:d6:4b:b0:6c:80:f3:87:8d:e0:b4:ed:88:
c3:66:22:59:4a:f5:3d:aa:63:af:c9:40:d9:fa:d9:
6b:c3:b3:6e:9f:b9:ac:95:11:0e:26:09:d3:80:68:
f2:3f:d1:0f:9f:2b:ad:66:5f:d7:ad:a9:79:b7:dd:
52:da:5f:1b:09:d0:a0:61:15:2d:fa:ca:68:9e:00:
f6:0f:7b:d9:8c:11:d5:f1:88:ad:e7:3b:dc:43:3a:
8e:28:93:93:73:30:0c:ba:a6:8e:10:97:d1:33:d2:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2E:56:68:AC:85:A5:57:8C:5E:B3:5F:D7:E5:EB:61:0B:DC:73:4A
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:e8:5d:19:7d:e9:ba:47:50:98:ee:09:f1:dc:bf:bd:06:
e2:0e:f1:6f:34:8a:b8:5a:10:99:90:d8:87:8c:8f:99:31:12:
52:f2:98:2c:2f:94:76:6f:ff:77:5b:ff:c8:a7:b6:7d:ee:48:
65:db:0f:91:78:31:ae:bc:7e:b8:28:f6:10:4c:38:c2:a8:92:
83:68:42:34:a7:e0:6c:82:25:43:0d:08:70:9b:28:86:cc:d5:
7e:82:5f:cf:9c:aa:00:ac:33:75:c7:7b:6d:8d:35:7b:ab:6a:
2f:a5:ec:13:81:d5:88:b4:c9:cb:48:75:08:8f:d6:5d:2c:7f:
e4:8f:34:f5:fa:7e:81:ab:36:c0:24:78:ee:ba:99:d1:dd:6b:
bf:2f:9e:cd:c1:15:d5:b8:5a:19:48:04:f9:97:0d:9a:ff:ba:
a3:e0:81:71:d9:72:a5:a2:6f:db:d2:d2:71:b1:10:df:7e:57:
3c:db:61:ca:6b:f7:f6:91:7d:91:78:d1:e8:cb:a1:45:73:b0:
09:ab:46:eb:b7:a1:eb:49:8b:d9:30:0a:d8:73:ea:bc:58:19:
4d:82:bc:68:c3:8a:10:7f:5f:4c:6c:8a:a4:18:f1:34:b2:82:
a5:cf:0d:5c:08:10:99:17:65:f7:d4:18:68:8f:59:db:af:60:
ec:5f:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:28:08 2024 by rpki-client on console-ams.rpki-client.org