Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: 04FgU5yIc+7sN54pmjHPAvqkdGXF/g/YWic9jvIif2c=
Subject key identifier: 97:4A:72:D4:B6:CB:87:9B:35:82:FD:30:24:B0:76:A7:18:00:6C:EC
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 0193568AED8AB8AB7D1B729D2CEF7490A168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 06B8
Signing time: Sat 23 Nov 2024 01:02:45 +0000
Manifest this update: Sat 23 Nov 2024 01:02:45 +0000
Manifest next update: Sun 24 Nov 2024 01:02:45 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: /jz6DO04GxsK9HjGgWvFqHtqHQROYF5L6Dx4Z/JwvRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:ed:8a:b8:ab:7d:1b:72:9d:2c:ef:74:90:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Nov 23 01:02:45 2024 GMT
Not After : Nov 24 01:02:45 2024 GMT
Subject: CN=974a72d4b6cb879b3582fd3024b076a718006cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:05:3f:54:bc:ef:5e:16:fd:52:70:70:f7:
47:da:9c:58:72:49:6f:bc:73:b9:7a:87:a8:08:c6:
be:ce:62:18:c0:76:5e:60:1b:7b:c2:74:03:51:fc:
23:f3:ee:95:d0:6d:31:8b:fb:bb:e1:89:ff:ce:7d:
9a:97:57:45:41:ec:d0:d8:ea:d7:b1:5c:80:af:1f:
97:7a:42:cc:fe:82:15:64:1c:03:45:c3:08:fb:3d:
91:d3:7c:87:f3:ef:08:79:d1:cc:22:9a:8e:64:7e:
d7:6c:a7:ff:4c:2d:e6:06:79:ec:0f:30:07:0f:f4:
26:0c:3d:99:d4:a8:6c:c0:83:56:4f:6e:5e:e7:28:
1b:aa:aa:ff:82:80:9a:3f:fb:d0:b7:1b:58:3c:a8:
be:28:0f:f8:4f:4b:96:87:a9:ce:1f:c0:e3:47:c2:
66:28:45:9b:c1:d6:ac:ae:a5:eb:13:36:6f:3b:97:
69:fc:e1:c7:b7:8a:e5:07:b7:cb:e2:0b:59:44:2d:
1f:b2:d5:4f:2c:b6:c0:2e:4a:8d:a8:58:d1:21:cc:
b3:c0:0b:b9:73:1b:08:6b:67:03:44:b5:0b:5a:0c:
ad:16:bd:b3:f6:c4:5b:a7:35:ea:8a:36:cf:ac:15:
78:7c:a9:0e:e4:b2:d3:c3:b1:35:c5:65:a9:65:14:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:72:D4:B6:CB:87:9B:35:82:FD:30:24:B0:76:A7:18:00:6C:EC
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:e5:37:35:c6:4f:0a:8b:f6:8d:71:64:ac:42:c7:0e:45:
aa:13:a0:5e:f5:5b:7d:e4:5c:3d:c0:6f:8b:65:68:95:7c:10:
14:e2:49:f6:67:3a:cc:61:2e:7b:33:4e:f0:92:1a:84:68:32:
db:7c:d1:72:14:8b:53:f8:37:88:64:82:b0:a5:1e:e7:1b:2e:
b8:d1:ae:d6:86:24:7c:8c:0a:22:d7:cd:ae:30:99:02:77:1d:
a2:9d:bf:ce:2a:d2:81:e6:d1:38:01:c8:98:09:1b:77:78:6f:
5c:d5:b5:10:6d:33:dc:29:6f:1c:cd:3b:6c:94:ff:f7:58:94:
c4:c7:07:e3:5f:dc:ee:1d:50:0c:13:c8:e3:bb:7e:61:e5:2e:
7a:03:79:a2:2b:ef:bf:3b:74:8e:15:f8:7c:e9:ea:d8:1f:bf:
20:f7:34:6b:b2:1b:91:78:a3:1a:53:29:d9:31:c7:56:6f:94:
2a:a3:93:fd:ce:a4:72:66:f4:5e:1e:88:65:c6:e4:fa:f3:b5:
f7:9d:85:c3:76:6c:87:1a:e7:c8:4f:1a:ab:6f:5c:21:22:ff:
c2:45:94:67:1c:3c:15:21:0e:8b:fa:af:2d:4a:b4:3b:65:d8:
a9:6f:6e:24:fc:f5:c3:da:ed:c6:0b:84:23:83:5c:8b:88:c0:
e8:b2:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:11 2024 by rpki-client on console-ams.rpki-client.org