Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: yB6E/zF+wXKyFG7zUgw5SCkRcsUXPe1Jd4D/HLWM4h4=
Subject key identifier: AF:BD:C4:02:72:F2:5B:78:0D:9B:09:78:ED:11:76:25:99:A7:66:52
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 0191F9D959D9338CD865356D03AF81A021B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: CA
Signing time: Mon 16 Sep 2024 08:00:56 +0000
Manifest this update: Mon 16 Sep 2024 08:00:56 +0000
Manifest next update: Tue 17 Sep 2024 08:00:56 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: IWKDnIvUJcFnTAx7m9P0PHARzuSVzkNsfcgBSSjeku4=)
2: iXZOHA6PnId5_gFeR2sLaRMALSg.roa (hash: b/N3GNLnZgJpmAKw0+FQ0ZDvremGQTnMV6lErjiYD1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:d9:59:d9:33:8c:d8:65:35:6d:03:af:81:a0:21:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Sep 16 08:00:56 2024 GMT
Not After : Sep 17 08:00:56 2024 GMT
Subject: CN=afbdc40272f25b780d9b0978ed11762599a76652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:d8:c2:89:f7:31:3a:95:4b:19:0a:78:f7:
8d:21:d8:01:9f:1a:4d:94:f8:bd:7c:59:de:ce:9c:
92:6b:28:ae:fa:38:d6:63:ff:7f:9c:3d:32:45:58:
64:3f:68:77:7e:8f:cb:37:2d:41:11:93:20:65:5b:
93:48:9f:38:6b:1d:57:80:2b:bb:ed:61:c7:78:78:
e8:0c:7a:7b:64:4a:32:f6:0f:92:a1:3a:27:e4:c3:
c2:5c:73:7c:04:9d:2e:c2:5a:4d:aa:5f:7b:5d:e5:
a7:bc:2f:cd:94:77:88:2a:70:f5:50:6b:85:9f:d8:
0f:2b:46:1e:a4:dd:ac:1e:37:61:94:ce:a5:c1:1e:
33:be:9f:ba:65:b4:09:14:8c:e3:ee:62:cc:72:9e:
18:ff:90:95:0a:2c:2f:76:7a:6f:12:66:01:ff:71:
45:1c:f6:7c:a7:d4:f2:0b:23:ce:b6:7a:a9:d5:4a:
eb:ae:35:15:58:48:e3:60:70:37:46:f5:85:3f:de:
65:3a:5c:2b:97:09:0e:1e:e7:e2:3c:c2:d8:e0:1e:
6a:a3:23:ae:3e:92:ed:91:ef:f2:19:7d:57:91:88:
17:18:38:bf:66:41:ee:1f:20:3e:2b:5f:5e:b4:01:
6a:e6:12:f4:26:c5:ad:5f:1e:3c:0a:88:e9:25:97:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:C4:02:72:F2:5B:78:0D:9B:09:78:ED:11:76:25:99:A7:66:52
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:3f:f6:47:9f:32:f6:8a:0a:4e:52:4a:eb:a0:46:38:3e:
3b:ea:8d:c4:87:13:b3:1a:76:fa:11:fc:aa:04:fa:90:40:c7:
cc:82:23:71:bc:6b:3a:4a:fc:31:45:5b:06:db:a8:ef:25:96:
b4:b8:9f:eb:5d:98:f8:2e:db:e5:bf:b5:6a:fd:cc:98:49:39:
0f:1f:6c:40:22:88:90:0f:0f:c3:62:42:d2:29:76:6f:9e:f5:
91:e8:a2:ff:e9:85:05:e5:a6:fb:47:58:da:cc:0e:47:7f:99:
65:3e:96:67:c8:9d:48:08:04:54:6e:06:22:fc:92:0f:d9:69:
85:f6:cf:be:22:cc:ae:28:ec:ee:48:94:86:f3:2e:7b:e5:50:
74:0d:4f:cb:58:41:0d:f1:8c:ad:5b:13:a9:13:d0:13:7a:82:
77:db:f2:c2:d7:71:ad:ff:0c:92:f6:26:70:34:0d:f5:62:08:
05:dd:da:82:34:a1:a4:4e:f6:70:96:f9:8e:8c:30:38:74:11:
24:27:29:01:b1:1a:d2:68:63:5f:e0:a3:8c:47:87:c8:53:7e:
38:5c:05:d7:c1:86:fd:c4:f6:e4:23:23:29:4c:11:3c:43:7c:
d5:b4:d9:16:36:ee:93:5c:5e:02:1f:5b:6a:96:74:26:0b:a7:
ed:2c:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:31:30 2024 by rpki-client on console-fra.rpki-client.org