Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: 8u9tGvuivh/Vyws2qsv5m0/ZztVI9oIYYhuHWHlNK68=
Subject key identifier: 30:9A:24:B8:E2:CB:92:2B:ED:D9:71:31:F4:9B:34:91:5D:7A:52:E8
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 0193576506FC932A1A17E1865A0AA1DABF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0A52
Signing time: Sat 23 Nov 2024 05:00:58 +0000
Manifest this update: Sat 23 Nov 2024 05:00:58 +0000
Manifest next update: Sun 24 Nov 2024 05:00:58 +0000
Files and hashes: 1: 0uHVoAUNN-73npmI3kbuiw7V50s.roa (hash: FDLU5P/eBvX5iHOmJnmCLjC5bBw7IihuKmWYnHPCqPA=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: 7ybQ2mCLg1IgQI0hos5d6c3iIOJIPOJHe5i9ybVTi6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:65:06:fc:93:2a:1a:17:e1:86:5a:0a:a1:da:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Nov 23 05:00:58 2024 GMT
Not After : Nov 24 05:00:58 2024 GMT
Subject: CN=309a24b8e2cb922bedd97131f49b34915d7a52e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:6c:ed:27:d1:bb:05:4e:33:dd:29:0c:eb:
a2:07:28:ca:b0:62:ae:e7:d6:a9:0f:b3:d2:d2:13:
4f:59:67:d7:b1:03:2e:5f:a7:37:99:02:eb:3e:3f:
fe:a5:73:1a:f7:b4:d8:1f:4b:f1:ba:bc:b8:7a:33:
e4:cc:b2:9b:a7:7d:6e:16:47:8d:6b:8a:71:1a:80:
fb:d9:04:df:a1:da:43:44:aa:6d:1a:83:3b:43:12:
5e:0a:f3:27:32:14:ab:25:63:6f:d7:b1:cb:78:30:
e7:00:17:96:66:42:06:e3:3c:5f:fa:1e:a1:4d:ce:
4a:e4:03:ed:95:f6:da:c2:a2:7e:60:0f:bd:58:15:
d1:fe:e7:8e:52:e2:75:04:42:e3:91:99:2a:db:bf:
6c:f4:ef:28:74:e8:f8:c7:8f:23:3f:02:d0:b6:e5:
aa:9e:8e:f9:1b:f3:c3:0f:85:a6:3a:0a:21:1a:b4:
9a:54:1b:42:14:13:19:59:64:c9:1b:6f:ed:b7:3f:
26:62:af:41:f2:2e:22:db:c8:d6:19:e4:4c:de:f2:
8c:87:8b:2e:3f:05:f2:43:23:f0:fe:8d:64:b9:20:
3f:5f:a5:85:5f:75:3f:98:5e:55:a3:ca:b9:07:0d:
a7:5f:10:25:4c:44:e6:2d:d0:0c:2b:27:30:1f:16:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:24:B8:E2:CB:92:2B:ED:D9:71:31:F4:9B:34:91:5D:7A:52:E8
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:65:42:31:c3:6d:63:c1:d4:20:34:1c:c3:fe:0b:b4:36:27:
c2:49:13:6b:9f:e7:63:94:20:86:4d:8e:dd:f0:13:64:d2:72:
8c:53:c0:f7:eb:01:37:68:c0:b2:97:10:ae:ec:bf:24:e6:34:
06:e4:88:56:de:45:40:29:a8:c9:78:1d:27:08:9d:88:f2:18:
51:31:21:f0:84:55:cc:af:52:76:18:6f:d1:55:b1:9a:26:c1:
65:7d:8a:2d:75:75:3e:9f:b9:34:4b:6a:54:dd:f9:d3:91:bb:
de:47:2c:33:38:eb:77:c0:44:e9:44:1a:d0:60:ef:8a:31:1f:
0c:66:2d:b9:80:87:48:da:8d:99:d7:91:ba:1d:1e:39:28:4a:
ac:24:55:17:18:91:bf:04:14:fd:cc:4f:1d:3d:f8:b0:32:ab:
b3:80:94:34:96:ad:f5:e1:9c:3b:31:7c:d4:08:47:06:00:19:
a4:88:1a:c4:f0:84:92:f8:6b:c3:8e:f1:c0:52:64:e3:68:2e:
9c:10:2f:f5:3f:14:fa:22:84:af:79:d9:6f:ae:ad:64:98:b9:
b3:af:05:d6:db:2a:bf:23:14:a6:dc:3a:9c:b8:08:c7:d4:8d:
2b:b1:44:db:3f:d1:01:3d:71:76:c2:c8:a0:78:a8:da:51:44:
1a:92:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:49 2024 by rpki-client on console-ams.rpki-client.org