Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier: oEO+AkB4vwnNFhmRK7JDYeC9nJV46Db0uWmDo9gFv8E=
Subject key identifier: B1:07:13:3C:71:4D:01:B9:57:1E:FE:26:F8:8C:A6:B6:0F:24:86:B7
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 019357D29C1090D779C5D01FBAD2C640E5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number: 1073
Signing time: Sat 23 Nov 2024 07:00:40 +0000
Manifest this update: Sat 23 Nov 2024 07:00:40 +0000
Manifest next update: Sun 24 Nov 2024 07:00:40 +0000
Files and hashes: 1: JmtgsDo5DNq-vhZ6IYVuhvzPgD0.roa (hash: WtuLUC0Aa5KAgIEp4S0FbLjHvrr18rVfsxxlE5lP0OA=)
2: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: unx/Zx/qZR+Z6d64r95Gz+P387sYoq+ywkuex1LW8i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:9c:10:90:d7:79:c5:d0:1f:ba:d2:c6:40:e5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Nov 23 07:00:40 2024 GMT
Not After : Nov 24 07:00:40 2024 GMT
Subject: CN=b107133c714d01b9571efe26f88ca6b60f2486b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:9c:64:dc:19:85:f6:66:85:8a:c5:73:a6:
19:fd:e2:fe:54:db:ba:32:85:2a:52:7a:15:91:ba:
2f:f9:dd:07:77:6b:1e:ba:5d:b0:19:d6:08:43:b3:
c0:e2:b8:af:d1:12:f4:f7:24:cc:e7:23:45:3a:c8:
d9:46:32:9e:68:c5:cd:0d:f1:e9:7f:22:4b:52:18:
58:31:f5:1d:79:55:9c:4d:e1:f9:ab:07:0f:45:b0:
e2:30:5f:26:07:20:c8:42:79:ab:91:01:ef:03:4e:
91:78:86:5a:d8:1a:63:f7:34:b6:20:71:5a:4d:40:
ba:3d:d1:09:63:d2:0a:46:1d:4b:ea:12:b3:6f:ce:
c9:f6:a7:43:ba:5a:4b:37:44:1a:c2:02:1a:87:4f:
5e:a1:b4:c5:fa:22:70:6c:b1:39:7d:3b:df:29:2b:
95:63:2b:16:07:12:e7:f5:00:0f:68:6e:68:a5:c7:
46:1d:f5:3e:9d:5f:11:a3:69:dc:fe:39:ef:97:3f:
5c:79:02:21:46:5b:ab:71:34:07:bb:5e:b8:84:49:
6f:07:05:ed:44:59:66:d0:62:77:17:86:ac:b5:c4:
e9:bd:b8:14:3b:f5:71:ff:91:43:63:bf:55:cf:c1:
95:f5:0a:05:80:2e:20:7c:3e:1a:f0:16:57:8e:ea:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:13:3C:71:4D:01:B9:57:1E:FE:26:F8:8C:A6:B6:0F:24:86:B7
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:09:0c:e3:3f:12:21:f8:ba:ff:c3:45:7e:1e:a9:65:b3:
42:ec:f5:51:2b:fb:c0:f2:fa:01:5d:05:bf:ac:81:ba:a9:ea:
10:71:8a:23:c0:ed:01:a3:58:e5:2d:c7:8b:2f:79:e3:ad:09:
a8:e3:b2:e8:a7:c3:58:04:bc:4f:f7:56:9d:7b:82:9b:52:74:
58:ab:7b:0f:30:e7:69:ab:cf:8e:0a:04:b5:84:fa:6c:b6:33:
66:2b:d7:c1:85:ec:ab:e0:0f:06:63:12:c7:06:be:7a:bf:1f:
31:0c:a2:e0:45:53:c7:04:3b:08:a5:42:cd:80:b2:ae:29:1d:
e4:19:81:d3:d0:b5:6c:3e:e0:a3:1a:2c:7f:aa:0b:9c:6f:7d:
9c:00:60:fa:02:a0:ae:d4:3a:43:4b:c0:fc:af:60:88:8b:e8:
1a:40:0c:e5:25:4b:87:21:03:19:8b:d1:76:89:52:90:4b:cb:
e4:b7:62:dd:16:a0:c7:12:dc:2b:16:cf:e1:19:46:1d:f8:b2:
2f:77:d6:69:ca:38:f8:85:58:0e:86:e7:d4:50:20:b4:94:d3:
4b:03:16:cf:bc:0d:7e:c8:ea:f5:e6:92:6e:20:5c:b3:d8:13:
b6:92:ce:98:50:9d:40:6c:57:c7:27:de:64:d3:ca:db:6d:0c:
cb:23:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:49 2024 by rpki-client on console-fra.rpki-client.org