Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
File: Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft (raw, json)
Hash identifier: sUvO2bzDbzp5giEnCqtu83ZZ5oZD14Lvh/VjK9/wnU8=
Subject key identifier: 6A:A5:C0:9F:43:A6:52:48:1C:04:79:28:56:29:B2:9F:15:8F:71:CD
Authority key identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8
Certificate issuer: /CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8
Certificate serial: 01923AA86960CAEDC69124412E6B7CC22000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
Manifest number: 12DB
Signing time: Sat 28 Sep 2024 22:02:48 +0000
Manifest this update: Sat 28 Sep 2024 22:02:48 +0000
Manifest next update: Sun 29 Sep 2024 22:02:48 +0000
Files and hashes: 1: Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl (hash: y9dWOp3vfQtyZb6ojvL7pX6gvvCF7ANmxMdapYqTAXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a8:69:60:ca:ed:c6:91:24:41:2e:6b:7c:c2:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8
Validity
Not Before: Sep 28 22:02:48 2024 GMT
Not After : Sep 29 22:02:48 2024 GMT
Subject: CN=6aa5c09f43a652481c0479285629b29f158f71cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:87:e2:5a:8d:a5:aa:44:72:5c:65:65:09:
4c:32:6f:cd:4b:aa:9d:f9:a2:3b:cb:53:dc:8a:1b:
dc:8c:01:58:e2:92:f1:1a:75:b8:86:b7:66:d6:93:
94:a3:e2:b7:f3:51:61:e6:6f:57:ac:da:d9:16:08:
68:fb:de:33:ab:0e:35:db:48:01:17:d7:c9:de:06:
62:da:dc:dc:fe:28:40:5d:05:20:15:4a:77:b7:b4:
27:1b:ce:66:87:9e:e7:87:86:5b:2a:e5:c2:fb:c2:
41:e0:22:24:ac:53:10:d7:00:e1:24:96:bd:ce:cc:
ff:01:c9:8e:48:0c:e9:fd:77:77:ac:48:e0:ea:fb:
52:68:90:c8:86:bb:5e:8b:cd:f7:41:5d:c6:79:12:
fb:07:da:df:e2:f3:9a:1a:25:65:50:be:56:61:f0:
29:38:70:3a:ae:b2:c2:cf:9a:91:be:79:82:9a:50:
f5:85:12:45:c2:17:ed:4c:02:a0:96:e4:1f:8e:02:
af:9a:95:71:f0:bb:eb:6a:4c:91:73:48:2d:1a:c4:
f7:c4:36:84:11:78:c0:c3:a9:f1:fb:6c:71:11:51:
2f:7a:70:8a:27:a8:72:43:55:2d:a9:d6:9e:34:97:
ee:e3:7f:d6:23:2a:38:13:05:09:07:c5:f1:ff:0c:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A5:C0:9F:43:A6:52:48:1C:04:79:28:56:29:B2:9F:15:8F:71:CD
X509v3 Authority Key Identifier:
keyid:39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b5:ad:52:19:63:5c:31:5a:7e:c7:cc:1d:01:2d:fe:ca:5b:
f5:30:5e:76:b2:5a:31:6b:f5:9e:6f:14:21:8e:be:89:9c:7a:
07:1b:42:b1:ac:05:b8:22:3b:a7:4a:df:a3:4f:9b:50:fd:42:
26:3a:d5:f6:9d:f3:48:b1:16:be:bf:fa:f2:0f:cb:03:9d:9b:
6e:dc:0c:d5:c0:12:05:de:33:21:4d:65:93:8a:b5:6e:1b:1d:
5a:46:51:3c:82:4a:25:d1:42:65:38:51:9a:7f:93:e2:1a:60:
7c:97:8d:f4:14:9c:17:41:22:96:59:d3:ba:12:90:69:6b:94:
bb:7d:b2:47:b0:d6:b6:42:6c:52:ab:7e:86:a6:e8:96:c3:c8:
15:ce:21:9b:12:e8:db:37:be:1d:4b:ae:04:04:f2:17:2c:10:
65:90:f4:7a:75:da:46:4e:03:e7:aa:bb:dd:9c:41:a7:7b:8f:
16:1e:4f:91:dd:5e:03:b1:6a:60:c6:a7:9a:32:60:fb:49:47:
60:f6:9a:c5:de:7a:7a:c2:55:4b:fd:df:e2:27:1a:a1:66:26:
f3:ce:01:e2:d8:b7:66:a8:b1:d7:cc:07:1d:29:fd:c1:60:84:
6e:ce:0b:6d:cd:0c:1e:6a:55:ef:ce:68:d8:e0:d8:74:af:ca:
25:04:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:11 2024 by rpki-client on console-fra.rpki-client.org