Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
File: itYGdkMvaHI2YskyV5qEk1IBS5U.mft (raw, json)
Hash identifier: 0Ke4zb8qT2tbvVis1Ht8J+wS5mxZWiwCaDdLVnGK3aY=
Subject key identifier: 8A:EF:DF:3B:41:66:52:7F:CD:4A:04:78:DF:AE:3E:AD:62:14:19:4E
Authority key identifier: 8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
Certificate issuer: /CN=8ad60676432f68723662c932579a849352014b95
Certificate serial: 01936933FEC35C54BAE05AC04C2544F51BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
Manifest number: 0541
Signing time: Tue 26 Nov 2024 16:00:35 +0000
Manifest this update: Tue 26 Nov 2024 16:00:35 +0000
Manifest next update: Wed 27 Nov 2024 16:00:35 +0000
Files and hashes: 1: itYGdkMvaHI2YskyV5qEk1IBS5U.crl (hash: 2Mpp6Lk32sJdi/Uxt471GSD/oe5ufFpcRsUa+RoAaMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:fe:c3:5c:54:ba:e0:5a:c0:4c:25:44:f5:1b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad60676432f68723662c932579a849352014b95
Validity
Not Before: Nov 26 16:00:35 2024 GMT
Not After : Nov 27 16:00:35 2024 GMT
Subject: CN=8aefdf3b4166527fcd4a0478dfae3ead6214194e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:c6:f8:fe:8d:13:15:08:91:94:fa:f9:7a:
2a:66:89:53:d3:7c:76:e8:17:e8:98:e0:20:f2:a1:
2c:13:bd:8a:9d:4c:82:8b:6b:21:ad:3d:7f:36:ed:
11:06:7a:8a:2c:b4:a0:db:e2:f7:37:ad:f6:12:e4:
b3:f6:7b:53:99:ad:49:60:c8:64:29:df:8a:49:14:
e6:e7:a3:98:4a:f8:6e:44:77:83:50:43:e2:3c:24:
da:c8:61:10:45:fe:c3:d3:96:1c:46:c9:b6:de:43:
75:8c:e2:b0:b8:be:6d:79:d7:c4:4f:75:3d:b7:65:
62:5b:29:42:78:0f:79:14:b4:31:b7:af:43:bb:ca:
bf:ad:1c:8f:b7:e8:e5:17:e0:32:56:c3:eb:2d:72:
2c:e9:e0:ba:71:cf:25:ee:bf:cb:11:f8:a0:b0:92:
a4:9a:e7:42:3a:66:2b:91:66:cb:00:d8:c6:56:97:
aa:c6:e5:f6:62:67:6b:d3:8c:42:b4:48:8f:bc:33:
29:2d:aa:52:f6:f6:87:31:82:56:66:f3:cf:d7:c0:
8c:9e:d9:3f:0f:58:9f:db:dd:53:fe:44:02:00:ec:
81:74:77:f7:18:be:6b:64:f1:91:70:6a:e2:09:e0:
84:9e:2f:b1:ea:bb:bc:f7:e8:74:ef:83:7f:7f:db:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:DF:3B:41:66:52:7F:CD:4A:04:78:DF:AE:3E:AD:62:14:19:4E
X509v3 Authority Key Identifier:
keyid:8A:D6:06:76:43:2F:68:72:36:62:C9:32:57:9A:84:93:52:01:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itYGdkMvaHI2YskyV5qEk1IBS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cdc148-5703-4e91-9a8e-284036a81d90/1/itYGdkMvaHI2YskyV5qEk1IBS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6e:5d:97:cd:17:3c:77:41:8e:f8:82:cb:1b:df:20:3b:dd:
e6:8e:25:4c:9d:c7:71:1b:cb:6d:48:47:02:7a:3f:f4:26:93:
68:89:4d:74:ea:d3:04:19:a6:f4:7b:bc:4e:14:58:6c:f1:cd:
bb:1d:e3:d1:e1:86:07:a8:ce:51:c3:a1:52:70:0e:42:02:9b:
bf:ed:d1:98:73:59:1d:f2:fa:4f:56:34:1d:ad:97:7f:c6:df:
24:c2:17:4c:cc:f1:ab:34:c0:eb:9b:d8:a5:b9:2d:76:1c:43:
36:d5:16:13:99:70:b6:ee:41:1c:2d:8f:1c:f1:b8:c3:c0:87:
8e:f7:88:e9:2c:0e:a6:12:c9:96:2c:75:15:34:05:c1:cb:c5:
db:f0:d3:08:4a:61:55:d3:5b:e4:e7:2a:52:d9:2a:f3:1f:87:
70:16:58:9f:27:4b:53:28:78:49:df:9f:c3:3d:9a:c2:11:27:
8d:c9:55:48:cf:4c:02:cd:32:e2:da:73:39:10:e6:76:24:e9:
bc:45:27:ed:fc:70:f5:9d:c0:70:53:63:93:9d:f5:d3:cc:c0:
dd:79:23:f0:94:d3:71:3c:4d:e8:01:dd:12:b5:6e:50:38:56:
43:8f:db:44:dd:2b:2d:e4:19:bb:21:5f:29:b3:85:f6:42:2c:
2b:aa:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:31 2024 by rpki-client on console-fra.rpki-client.org