Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: vFkA6ZvApoo2bAmm43pa5fRH3MoUl+/k17m4tRfv9cc=
Subject key identifier: CB:87:7A:33:A4:7C:AB:27:ED:00:B2:96:59:1A:C2:5B:84:66:72:23
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 01936B22B32606280F74B2D762FA1C100F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 0473
Signing time: Wed 27 Nov 2024 01:00:56 +0000
Manifest this update: Wed 27 Nov 2024 01:00:56 +0000
Manifest next update: Thu 28 Nov 2024 01:00:56 +0000
Files and hashes: 1: NohbiBsJhXy5XtsfVO2V83EO7Uo.roa (hash: QhW/RC4U84uO2jVH+eMksMz22jNKhmAdJpQawuI4ztw=)
2: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: yt/zqwbj9JErrEBr6M9z9sWXFZj7O/pdVq3YooK+fnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:b3:26:06:28:0f:74:b2:d7:62:fa:1c:10:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Nov 27 01:00:56 2024 GMT
Not After : Nov 28 01:00:56 2024 GMT
Subject: CN=cb877a33a47cab27ed00b296591ac25b84667223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:14:6f:6d:db:ef:9b:cd:b1:54:48:07:12:
a3:13:49:81:b5:3b:fa:bc:2c:02:fc:48:5f:51:d9:
5a:b0:17:32:29:bf:00:6a:94:15:32:55:c4:e8:7d:
41:88:e5:bd:15:4f:62:28:1d:24:4d:22:db:26:41:
65:ea:11:05:7e:78:51:8c:78:94:be:e5:d4:5a:c8:
6e:c5:79:db:a4:dc:78:2e:49:60:b5:a8:8a:e5:07:
84:62:24:ec:73:39:2b:97:61:45:c4:24:e5:46:cb:
6d:52:68:ec:bb:73:1c:69:45:1c:a9:2f:cb:64:14:
b9:26:f1:a6:98:40:32:1b:3a:c4:54:19:df:53:f2:
e1:55:a2:22:9a:78:82:65:da:80:74:4d:86:2d:e1:
e5:e0:72:d6:51:5f:c7:20:ae:54:c8:22:64:74:fd:
a1:5b:2d:42:20:d2:71:a4:ce:f2:03:9f:46:d7:3e:
7e:84:09:de:f2:01:7c:5e:67:72:83:28:44:46:ac:
ac:9f:71:72:37:56:a4:d0:1f:46:ea:d9:56:a9:2a:
55:74:90:cb:e3:62:1e:a4:54:bf:5c:28:de:74:69:
9a:5b:ec:13:59:59:3c:44:c5:47:df:be:da:99:ee:
d5:34:74:5b:3f:a7:a7:73:1e:59:ad:17:18:44:29:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:7A:33:A4:7C:AB:27:ED:00:B2:96:59:1A:C2:5B:84:66:72:23
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:63:76:25:08:e8:f0:5d:b1:1d:48:df:ad:7c:63:2f:3f:
2e:9f:ed:9e:6b:f5:57:7c:1a:15:a9:83:87:51:2e:80:5f:3a:
b9:26:de:6b:59:05:b8:6f:48:35:49:bf:4d:fd:11:b7:48:63:
c4:d8:e3:66:00:bf:cd:a3:22:a5:a9:33:a8:7b:4c:31:61:26:
b4:d7:73:99:19:a3:17:be:90:50:03:62:26:65:f0:f9:16:0c:
ce:61:14:89:bf:5b:42:9a:fb:e2:4c:f4:fb:3c:85:ed:a7:b4:
3f:12:d1:c8:9f:68:41:ae:1e:84:75:8d:6c:1e:f4:92:58:8a:
5b:27:50:bf:63:c0:f6:98:66:6b:24:dc:5c:b9:59:2e:53:1d:
7d:c4:d1:4f:ea:99:f9:4a:12:5c:f6:1a:99:fe:ce:ee:51:be:
db:0e:b5:83:b5:f7:b9:b5:d4:7e:8d:f2:cf:8b:51:bf:a4:dc:
55:89:be:78:b6:bb:13:21:44:00:36:df:f3:b9:ab:e9:22:9a:
f2:51:0a:f3:5a:b3:70:eb:51:3b:57:68:f9:67:d4:2c:3f:47:
e1:ad:15:5a:c3:ec:1c:6f:16:8d:85:32:48:90:a3:f2:ad:81:
a6:7b:7b:b7:61:08:52:db:f8:e7:58:53:12:5d:0f:55:84:57:
6c:7b:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:02 2024 by rpki-client on console-ams.rpki-client.org