Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier: PmVu9b8FpifXOQIUl4/QbobWlTqe9jor3Eu12758VnY=
Subject key identifier: BA:70:CE:BC:87:65:DD:32:CF:28:DD:DA:61:CE:4F:F3:12:5C:64:B8
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial: 0193568B22B931DD6482A2E94D1ADB624E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:59 +0000
Manifest this update: Sat 23 Nov 2024 01:02:59 +0000
Manifest next update: Sun 24 Nov 2024 01:02:59 +0000
Files and hashes: 1: tEhe3xmJmG_zsPc9AhVU7gwZ72o.roa (hash: nyYpIvGBw88+v1ZuYGDB63GDtBeJ/G7Te0Fxnm/mrc0=)
2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: 38N0jnS0SFpmxqifL80nC0zvwfaesv42N6EuiaXCsc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:22:b9:31:dd:64:82:a2:e9:4d:1a:db:62:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Validity
Not Before: Nov 23 01:02:59 2024 GMT
Not After : Nov 24 01:02:59 2024 GMT
Subject: CN=ba70cebc8765dd32cf28ddda61ce4ff3125c64b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:25:77:44:16:d2:1d:5b:5a:c7:d8:7b:e6:
aa:5b:e4:23:32:54:e0:13:b3:10:62:dd:fa:70:af:
a8:f7:62:80:2a:13:3b:db:a3:49:1b:9f:d8:4c:bc:
71:49:11:73:e4:87:65:46:01:1e:e2:17:17:8f:46:
04:3f:bf:87:dd:e8:8c:0e:0a:0a:1c:e2:bf:96:56:
d6:a5:20:d4:3a:5d:a6:d9:9e:eb:97:8b:3b:62:40:
5b:12:ca:62:ce:ab:b3:b0:a5:57:93:87:8a:a9:43:
aa:c9:0b:52:cb:c5:a8:9a:6c:d6:52:8f:16:44:f7:
14:f1:63:eb:c9:48:f2:f8:5a:78:e8:e1:05:f8:60:
a9:61:8b:08:a4:0f:db:9e:dd:e0:29:7d:d3:43:9b:
42:fe:06:cc:06:3b:ec:02:ea:f8:69:db:39:48:bc:
e9:88:ca:67:f1:a1:d2:e3:4c:c8:10:4c:e2:9c:4f:
9d:48:14:d0:6a:15:a5:77:67:f8:05:40:e3:cd:5d:
f8:c9:09:eb:07:c2:e1:fe:96:7a:78:a0:2e:1d:9e:
1e:37:ac:f4:fe:00:8b:b9:6e:7a:34:07:35:6d:5a:
60:4c:6c:94:77:90:c6:8a:24:82:d1:c6:23:37:b8:
76:01:15:c2:5b:ce:b8:ce:7f:21:4d:8e:23:cd:f7:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:CE:BC:87:65:DD:32:CF:28:DD:DA:61:CE:4F:F3:12:5C:64:B8
X509v3 Authority Key Identifier:
keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a7:24:9f:24:e5:da:e6:08:53:e7:5c:d0:36:a0:0c:cc:de:
45:a9:96:a7:f8:ae:f0:4a:b2:d8:1a:17:7e:3e:aa:67:18:91:
e3:fa:d6:8c:2d:65:85:20:72:53:64:04:d2:2e:4e:e2:0c:37:
53:45:8d:61:a7:02:50:ff:c6:04:49:b1:fb:d4:07:9f:12:6e:
f6:67:57:a9:c9:ae:3b:25:40:ae:08:34:8e:e4:36:90:eb:fd:
47:5a:84:54:30:16:a9:8c:39:20:ce:0b:9b:ec:ac:ab:9c:ac:
45:c6:e4:04:2a:43:02:17:c9:59:f4:aa:2a:de:7d:00:9b:7c:
c8:d1:6e:1d:17:b2:54:d5:4a:d2:66:37:62:51:98:e7:6f:58:
09:da:ca:32:d9:08:5c:5f:c5:99:5c:04:b1:5a:cb:aa:27:06:
cd:88:98:a4:b5:a9:57:e0:0e:c2:31:c2:ee:5f:d7:fb:b8:9d:
d9:de:88:4d:fa:99:ea:b9:0f:8a:3e:85:d4:ea:ee:39:e7:59:
56:e1:39:49:11:fe:d2:8e:66:aa:54:96:d5:17:41:5a:6a:14:
83:21:0a:c6:0b:ac:a8:c8:98:72:26:55:74:de:17:4f:e6:5c:
23:ae:b0:1e:1d:17:e2:f2:37:4b:e3:79:3c:cb:53:67:d0:4b:
50:55:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:18 2024 by rpki-client on console-ams.rpki-client.org