Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: vdfT97pr1iFtZBkluQHczfoXf58/cRjfj2tnpfVyuKQ=
Subject key identifier: 2A:A3:3A:94:FE:94:9D:87:93:AE:92:A8:39:FF:53:3A:E8:B4:25:D9
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01935575F78C3D293F476C22047E7EE1CF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 03FB
Signing time: Fri 22 Nov 2024 20:00:14 +0000
Manifest this update: Fri 22 Nov 2024 20:00:14 +0000
Manifest next update: Sat 23 Nov 2024 20:00:14 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: XTlDFU/+15qvahps1idhwdZ33nN3zFtPsaitbXCAQN4=)
2: WKnDJfLLMHqYnKjzcoqBUM8XyGg.roa (hash: 3kepbJlc5hRhSjZo6eNtFlY+p2ivs3Hf4/wwEeadDnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:75:f7:8c:3d:29:3f:47:6c:22:04:7e:7e:e1:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Nov 22 20:00:14 2024 GMT
Not After : Nov 23 20:00:14 2024 GMT
Subject: CN=2aa33a94fe949d8793ae92a839ff533ae8b425d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:0f:31:ec:b8:a0:66:40:23:5a:0d:17:38:
4d:52:1d:70:1e:b5:d9:d4:85:8b:2d:45:67:89:ab:
29:d4:c1:a3:0a:9a:8c:87:d4:76:50:13:47:d9:c0:
86:4a:8b:bb:ca:03:13:de:a9:7d:07:a5:c2:f3:7c:
8a:12:51:86:ed:5e:85:a2:82:a5:4e:10:0a:18:49:
e7:f4:6a:b1:1b:47:75:51:e8:2e:3c:85:e0:d1:bb:
b6:83:ef:71:cb:df:2f:dd:86:35:8e:a4:07:0f:ac:
cc:09:7c:40:92:e2:49:dd:02:bd:70:12:0a:bf:d5:
ad:ad:e5:38:2d:96:31:20:02:a1:f0:0f:9e:b3:56:
65:e1:22:f9:03:44:db:58:3c:e5:df:a9:3d:c1:cf:
c5:1c:e7:5a:2a:ed:0c:62:bb:b2:f2:c2:e2:1b:d9:
e9:45:01:e7:4a:8f:c0:fa:0f:9a:f1:a5:0a:8a:98:
be:e4:cf:82:57:af:09:8c:b5:92:35:2a:85:69:0b:
65:41:2f:5a:71:51:42:f6:24:50:0a:2f:dc:b3:df:
98:db:2c:d7:ac:27:b8:d4:9b:a8:5d:79:ff:2f:b9:
75:d9:8f:55:18:28:0e:b9:00:c2:5b:bd:4e:2e:28:
a5:55:58:4e:7b:ca:af:90:6f:66:33:b6:b3:38:fd:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:3A:94:FE:94:9D:87:93:AE:92:A8:39:FF:53:3A:E8:B4:25:D9
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:1e:be:10:4b:1a:d7:65:92:f9:fd:c4:c9:ce:8e:ac:46:
d1:ba:36:98:2b:f8:8a:08:5f:23:37:92:d6:71:d8:69:1c:c2:
b7:17:b5:23:2b:70:41:7d:67:c2:cc:17:42:04:1d:a1:a0:a4:
e1:2d:53:89:d3:6e:e0:ea:7f:58:dd:0f:f1:1a:5d:26:bc:b1:
91:da:3a:8b:80:da:fc:27:ce:35:6c:13:4b:a9:a1:36:07:fd:
a9:23:93:b6:a6:eb:64:ca:07:9e:1b:2b:96:c6:80:9d:09:bc:
4f:7c:f7:99:a8:89:8b:40:ef:97:ef:03:04:e0:27:69:3a:5c:
81:8b:ac:5f:4b:be:a2:6b:85:81:21:72:c7:21:13:d9:c6:15:
91:4b:f0:fc:58:5c:eb:45:0a:dd:5e:da:b8:a7:9d:dc:9a:1d:
e2:bf:88:a9:d0:41:0e:d1:a6:52:e3:d7:0a:35:d2:23:38:45:
10:c5:ed:7e:5c:fe:03:7d:ca:95:34:06:ca:ea:2e:7a:b2:a4:
d1:59:39:ff:17:87:63:46:fc:68:49:3f:c8:2a:36:19:c1:1e:
b9:69:1e:e5:3b:3f:16:9a:b9:84:ed:af:44:ce:1b:e6:76:2b:
b4:3b:4d:05:45:9e:a8:55:a6:0d:82:a5:fc:16:91:92:26:2d:
9c:fd:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:59 2024 by rpki-client on console-fra.rpki-client.org