Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: mVsGB0jAmxn7E9ybcSLhg0XxBb8EABOjJ5rOQS8xY4A=
Subject key identifier: D4:F0:BB:91:03:EE:7D:5F:E0:21:65:6D:0B:87:28:BD:2C:FF:03:7F
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 01936B228EA9CF01C79ED66D8E76BC4A1C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 137C
Signing time: Wed 27 Nov 2024 01:00:47 +0000
Manifest this update: Wed 27 Nov 2024 01:00:47 +0000
Manifest next update: Thu 28 Nov 2024 01:00:47 +0000
Files and hashes: 1: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: 85Vn13phmOhG8EF7hlS9JhZMG9U0rRS3ZBJdAWxoxuQ=)
2: btlaSjPIsD0Mr8SoCJxYYDAZ-XI.roa (hash: UBfC3g36JlN6UTwZic/dNDaMq5sdG52eDM9GEqPB7q4=)
3: khS_GdltHL-wSdpOHrBaBuxOCVs.roa (hash: c4sY22RQ+HspYegP32YbphJlk3cGcnpX0sUDl2oK9NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:8e:a9:cf:01:c7:9e:d6:6d:8e:76:bc:4a:1c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Nov 27 01:00:47 2024 GMT
Not After : Nov 28 01:00:47 2024 GMT
Subject: CN=d4f0bb9103ee7d5fe021656d0b8728bd2cff037f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:09:48:ee:f8:69:b1:5d:7c:6d:7c:6f:8c:
ed:6d:2d:af:60:c6:a6:4a:12:f0:13:cd:df:a6:a7:
88:4d:f1:35:77:1c:51:f7:ea:73:c5:5a:9b:ed:ef:
31:1e:ed:cd:d7:55:41:0f:f7:89:55:b6:31:73:37:
e4:3e:bc:b3:6d:53:c7:2e:03:d3:9f:5c:9e:eb:2b:
57:d0:56:59:24:38:ce:77:f4:12:e6:d1:43:f9:24:
c5:49:27:a7:b2:41:b7:b5:01:e0:00:cc:9e:23:bd:
e0:de:fc:02:c6:97:d8:34:c0:26:2a:1e:0b:4d:c8:
ad:1b:2c:da:e5:12:27:8f:cd:ba:20:1d:ac:29:fb:
8c:67:b3:6b:a6:23:3b:af:27:09:dd:9d:6c:62:5b:
ca:02:8f:a5:1f:3c:6d:be:b4:1a:b3:ca:7d:60:87:
0a:d4:90:cc:9a:3d:48:1e:a3:f8:a1:7b:a5:39:8a:
4d:8a:c1:70:17:2f:2c:0d:ad:71:ec:9c:3b:84:42:
8c:bf:29:9c:ee:7a:f7:f8:ea:bb:c1:5e:77:61:a5:
ac:49:b0:23:b0:24:b8:59:16:c9:03:35:78:6f:8f:
b9:4e:c4:eb:c3:f9:8f:d2:7b:a2:20:55:60:3f:5c:
9b:bc:d0:db:95:df:31:4c:0c:f3:b1:8b:19:85:3a:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:BB:91:03:EE:7D:5F:E0:21:65:6D:0B:87:28:BD:2C:FF:03:7F
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:87:45:61:4d:87:da:8b:be:86:91:fe:d3:f5:a6:e1:1f:
08:d1:95:df:4b:ca:1b:4e:b9:7d:1c:63:33:97:4d:7c:45:b3:
ce:da:e8:46:60:69:5c:97:43:7d:09:50:7c:af:ef:7b:a0:e0:
ca:c5:fe:5d:75:12:87:25:6f:1c:6c:43:6d:42:e9:dc:2e:c4:
2b:e9:e5:4c:38:f3:77:3f:be:af:c7:b1:fc:d0:02:0a:ac:d9:
ce:79:e7:49:0d:d6:2c:f4:59:7e:11:b1:a5:3d:74:43:04:61:
69:e7:c4:c4:53:59:16:41:12:21:f8:25:72:14:6f:7e:76:b6:
93:8a:b9:08:c5:09:b4:7a:4f:87:31:69:7a:d7:bb:a2:ab:11:
10:81:a1:d8:b9:8c:3f:99:81:e6:83:02:d8:f8:f0:9f:17:32:
00:2b:40:ea:11:e6:46:94:28:99:2c:bd:2a:c1:05:05:ef:ef:
f6:49:18:cd:43:24:a8:c3:02:9f:d1:3a:1b:fd:0f:95:6d:e9:
82:fd:20:95:70:c6:99:8d:e1:ce:f9:91:85:b0:e4:ba:49:22:
8f:67:72:3d:60:7b:38:13:23:82:78:2f:5e:4c:c8:43:c4:f2:
28:b7:46:c1:5b:53:24:97:c5:c4:37:24:ba:a4:f5:5c:3e:f6:
d8:cb:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:02 2024 by rpki-client on console-fra.rpki-client.org