Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: KNEp5CDuyyqInApeTHDyrsTxKB1w52nipSMPx051f7g=
Subject key identifier: 59:15:E0:35:13:56:6C:8A:37:95:ED:51:6E:05:2C:90:26:35:2D:CF
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 01936BC8CD70D090C803759D3DD2E97DA5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 101D
Signing time: Wed 27 Nov 2024 04:02:22 +0000
Manifest this update: Wed 27 Nov 2024 04:02:22 +0000
Manifest next update: Thu 28 Nov 2024 04:02:22 +0000
Files and hashes: 1: 5k053VRgaR-B9Fw14yhkd-ZuBqQ.roa (hash: 9OJWbi9XeRmElAXu0fLjcaYC4HqKTGy2ESP+ptLPPCo=)
2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: CxqB4hXn4U880Tcf+sIOBuuCVeZdHKyDhXkFJQVj/Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c8:cd:70:d0:90:c8:03:75:9d:3d:d2:e9:7d:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Nov 27 04:02:22 2024 GMT
Not After : Nov 28 04:02:22 2024 GMT
Subject: CN=5915e03513566c8a3795ed516e052c9026352dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:93:1e:9c:d2:10:fa:46:28:64:8a:64:d6:
ab:d2:f3:ff:d5:4b:da:b8:94:d8:17:e0:19:19:30:
c4:05:a5:33:0f:1d:df:de:cb:b2:a4:76:36:69:79:
8c:3a:71:a0:3a:99:f4:97:f1:12:6e:92:5c:6b:d7:
e7:e9:d8:75:91:64:ec:03:79:0b:37:77:a6:ea:7e:
01:57:cc:3e:9b:a6:66:ba:c6:c7:b6:ba:d9:63:cf:
1c:bc:e8:b2:2e:fb:7a:d5:21:6c:93:69:bb:73:7c:
52:12:18:85:79:23:f1:d4:0d:db:66:64:71:2e:d4:
eb:da:48:87:b8:88:4a:25:8b:e3:8a:e4:13:94:b1:
49:d8:18:ce:b3:b2:e0:d8:28:32:31:74:40:81:6d:
48:82:ea:76:a3:b6:9f:ea:ad:67:61:ea:dc:99:d3:
c3:f7:c1:96:91:59:23:ac:5e:d9:f0:91:8b:28:94:
74:5a:9e:30:c5:b6:08:b8:0d:26:59:b1:0b:75:b7:
8a:fd:d6:3a:54:65:53:68:ab:95:f6:8c:a2:ca:6d:
a4:87:16:0d:b0:ef:90:c5:2e:65:57:42:a8:17:ab:
1b:66:21:53:23:ba:1f:6f:31:2e:34:8d:31:8e:30:
47:b4:34:88:59:b2:e4:41:95:08:2b:b0:8d:78:e8:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:15:E0:35:13:56:6C:8A:37:95:ED:51:6E:05:2C:90:26:35:2D:CF
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:6e:69:65:34:56:44:12:98:20:aa:37:b2:9b:b7:d7:ff:
d5:9e:67:f8:a8:13:9c:f4:63:5b:af:e1:70:f7:d0:41:e4:80:
ad:69:6d:a9:ca:77:67:7f:f2:08:4e:21:5a:f4:ed:fc:73:68:
50:90:35:41:c5:92:07:bf:69:40:bf:44:e1:b3:13:54:fb:05:
da:ad:62:29:95:b7:06:8f:36:9f:39:49:cd:3a:18:51:92:04:
09:a9:45:22:1d:55:ef:7b:e1:50:b5:01:51:9e:6c:32:e2:d5:
97:43:14:63:6a:ea:67:53:85:80:ca:5f:34:72:25:de:49:16:
65:97:c0:a2:e2:6c:f9:37:69:f5:1a:61:81:4a:0e:77:a4:2c:
8d:15:b6:6e:c0:fb:61:80:c9:e2:5d:88:2b:30:9d:87:27:b3:
f8:d3:25:44:e8:41:65:23:63:fd:1c:6f:e2:c0:99:6e:04:ad:
55:e3:f9:1d:c8:59:bc:1c:5c:1a:84:3b:ba:2b:ee:45:88:f9:
ac:96:fc:f8:a1:5a:18:eb:eb:a7:ca:ec:78:2f:33:13:61:b5:
29:28:aa:e2:b0:fe:97:af:d8:2e:11:58:ba:60:60:79:bb:0d:
17:47:9e:af:e7:9d:b8:31:a0:73:bd:63:7b:e7:39:2d:ed:cf:
11:60:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:43:06 2024 by rpki-client on console-fra.rpki-client.org