Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: +YnfnQSxv+J4YP6FQ9ABHtOK/kbuSzXkM/WVrLLy6YE=
Subject key identifier: 86:15:F6:7D:C5:6C:F3:71:67:F6:43:29:61:49:13:A9:3F:58:16:6A
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 01936AB4CC0DB7A8AB8A7A3CCA11EC7D6288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 23:00:53 +0000
Manifest this update: Tue 26 Nov 2024 23:00:53 +0000
Manifest next update: Wed 27 Nov 2024 23:00:53 +0000
Files and hashes: 1: HDmdCgrKvYXHFV54sdJKfdP3x68.roa (hash: 8lCjmEIpGd4dgZkcbO5lbbYiNsS+qvyfzD9v8P+2s8M=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: lDBZsla4dMXn7WpsneBDk86FzfGK3Y7+GO3KrO9aF+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:cc:0d:b7:a8:ab:8a:7a:3c:ca:11:ec:7d:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Nov 26 23:00:53 2024 GMT
Not After : Nov 27 23:00:53 2024 GMT
Subject: CN=8615f67dc56cf37167f64329614913a93f58166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:a3:cb:c3:b2:66:bd:e9:01:a0:d0:12:10:
41:a4:8f:58:b3:b3:38:a3:c8:a2:bb:c5:fb:a7:a5:
13:ba:46:7b:77:a6:c3:f1:c9:3d:7c:cc:07:a3:99:
ed:2f:39:26:02:88:3c:ad:13:39:50:3d:6e:0e:10:
07:0c:2a:9c:f3:e6:6d:90:c0:34:8f:79:45:7b:f9:
56:0d:f3:7f:df:5a:96:63:ca:07:5d:a5:3a:f4:e0:
6d:f1:4d:4e:69:4a:a2:ca:6e:da:c1:d8:40:7e:21:
3e:1b:41:e6:96:8b:5f:dd:8c:5b:d3:6c:c7:01:f1:
1a:c5:61:08:d7:e0:92:8f:ba:0a:10:70:ae:47:dd:
02:a1:44:bb:4b:51:de:fc:4b:6d:5a:34:1d:68:9a:
89:ff:a5:2c:84:b9:e3:a3:1c:62:aa:62:67:cf:68:
74:4a:07:85:55:c8:4c:58:b5:0e:f1:ba:50:72:7a:
b8:2e:3b:fb:07:0b:bd:43:e7:5b:a7:3f:f8:53:cb:
74:fe:36:1c:3e:36:ee:93:09:b9:d3:15:49:b0:ce:
69:75:97:d6:00:51:b9:10:cf:20:95:95:11:f8:0b:
48:fd:72:9a:b7:89:e5:d4:4e:15:58:ad:66:a0:e0:
ce:16:88:c4:9a:55:35:5a:89:2d:b6:58:aa:dd:db:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:F6:7D:C5:6C:F3:71:67:F6:43:29:61:49:13:A9:3F:58:16:6A
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:af:c2:be:6b:e8:d7:89:80:03:27:df:48:7d:75:3a:8c:
3d:38:32:95:ea:70:31:3d:57:1c:6f:0d:6f:e0:79:fe:f4:25:
ea:b6:b1:2c:6b:ca:6a:d6:4f:94:f5:1d:f0:0e:f3:a6:df:cc:
5d:ee:5f:65:97:5e:0a:ab:f3:cc:c8:e0:fa:2b:dc:e7:93:d4:
94:2f:cb:ee:0b:bb:0b:08:e4:a1:4a:c9:dc:df:c7:ed:31:c4:
fe:a4:88:67:f5:fb:e7:de:8e:7a:d5:72:f9:83:1d:c5:28:31:
cc:af:f2:37:7e:af:f2:b1:63:2a:0c:ed:9f:eb:56:ba:82:56:
6f:d8:35:04:8f:67:f8:be:3e:d0:59:6c:67:08:a6:95:9f:67:
2a:68:6e:9c:17:c1:0e:46:6d:f9:a1:6a:07:55:9e:47:5e:c6:
6e:32:8d:a8:e7:c9:78:11:7c:91:80:51:60:2f:29:36:52:bf:
3c:3e:95:51:40:d2:cb:dd:58:47:ef:9a:63:6e:ab:0a:67:14:
74:71:38:66:e9:b4:84:07:45:d8:82:b2:03:91:4a:61:9c:d8:
4a:94:47:9e:a9:63:20:62:f1:64:b9:18:d3:ad:b0:d4:bb:32:
07:c6:9e:a0:81:06:95:bc:71:e5:4a:ba:61:2e:ef:c7:ad:65:
44:1b:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:53 2024 by rpki-client on console-fra.rpki-client.org