Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: mPg+mEfYGjRFSTx7mZ0v2cmaGKa4Fn2kkGGk0CkF3gI=
Subject key identifier: 6A:39:B8:54:61:B2:0A:5E:AD:B6:5E:30:FE:5A:22:0C:06:92:31:08
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0193531A09F98B733522900B8C72EA036CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 12A3
Signing time: Fri 22 Nov 2024 09:00:35 +0000
Manifest this update: Fri 22 Nov 2024 09:00:35 +0000
Manifest next update: Sat 23 Nov 2024 09:00:35 +0000
Files and hashes: 1: bZP-cto19TrOHBNuQoGq-plcH4A.roa (hash: TcuSOqHOgSfGF6GOWj8uOYgUJfEzdorC3fZCig0XH+w=)
2: dslFE3HuFr1W8EFmBHRRwoOuRuQ.roa (hash: 2b2KRtQr3cdubUqOO/rkWFnohXc79cMTbSjPWr8hC90=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: AnjKC87+wgnNNzjWhtC1JDnt7mBkviIhWQgFpZNIxLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:1a:09:f9:8b:73:35:22:90:0b:8c:72:ea:03:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Nov 22 09:00:35 2024 GMT
Not After : Nov 23 09:00:35 2024 GMT
Subject: CN=6a39b85461b20a5eadb65e30fe5a220c06923108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:d8:05:42:d8:10:33:5f:32:6c:a1:59:fc:
8b:84:6c:49:fc:c3:86:d6:4c:38:05:37:d2:4a:2f:
70:98:1e:b5:0e:d2:e4:ff:e9:9a:b7:fe:a5:0d:81:
22:93:8d:ec:7d:dc:e8:1e:29:2c:41:00:d3:2f:fc:
ae:66:e5:4b:a1:32:18:9b:ff:f5:f7:dc:79:8a:2f:
4f:08:a9:04:cc:df:a1:72:a2:84:24:7b:39:19:16:
b7:04:67:df:f9:16:a1:17:4c:bf:be:39:1f:03:ab:
2b:87:d8:ef:b5:9a:ca:d3:79:5b:f7:1c:3a:b4:05:
33:83:98:03:56:db:c2:07:e6:b5:9b:ec:7a:9c:87:
90:2f:7f:82:f2:ef:39:4e:76:22:c0:89:0a:24:a4:
33:93:9f:b0:a1:5f:5f:80:ae:d4:5f:94:97:cd:42:
f7:71:9d:9d:92:7d:aa:3a:7d:5d:3e:b0:b8:d6:e9:
23:5e:1f:a5:5b:6c:fe:e5:3e:e3:8b:d1:65:1f:66:
e3:c2:0f:17:dd:08:30:96:d1:e8:4b:34:1f:a1:9a:
57:7e:54:62:f1:85:1d:50:d2:fc:ca:35:6b:1d:df:
6f:b6:4e:87:5e:a9:94:ff:5f:31:e7:2f:45:13:45:
e8:1a:7a:30:79:1e:3e:26:94:d3:aa:37:05:80:bc:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:B8:54:61:B2:0A:5E:AD:B6:5E:30:FE:5A:22:0C:06:92:31:08
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3c:71:29:66:eb:60:10:21:f0:e5:48:21:46:4e:a9:12:68:
68:44:41:cb:b3:52:6d:4f:97:2e:ce:9f:de:d0:a9:57:8b:c8:
35:16:93:2b:06:53:bc:13:59:70:bd:78:6c:36:25:14:06:85:
59:04:11:ea:e9:50:0d:17:f8:30:34:7e:0b:be:8c:52:29:66:
bb:15:ee:61:51:d8:0d:99:4e:7a:20:d5:81:18:d7:4f:4e:ae:
89:da:46:58:80:ed:1b:a2:8a:b4:08:3d:ed:0f:22:ab:b7:dd:
74:26:37:aa:17:63:ed:25:01:48:73:0b:5c:e4:62:0d:17:1e:
e2:f5:77:9f:60:ec:6e:2d:19:90:68:75:0c:b4:c6:c5:88:c7:
88:f5:bc:98:85:22:d6:3b:40:fd:23:08:8d:5a:9f:28:98:46:
15:98:42:ba:3e:8e:ec:fb:ff:25:da:62:9b:13:6b:52:54:b7:
29:5f:a4:92:2e:c2:d1:0d:7e:d1:7e:6c:56:a2:ed:6a:c3:93:
b3:24:1b:f5:18:f6:ed:78:01:c3:c2:a0:83:c7:88:07:a1:79:
1e:7d:3f:4d:e3:15:e7:e7:18:ee:83:2f:cc:d6:1d:87:c9:99:
38:59:e3:78:9c:b6:70:89:ad:91:1b:54:06:74:4f:ad:2d:d0:
e1:2f:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:27 2024 by rpki-client on console-ams.rpki-client.org