Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
File: OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft (raw, json)
Hash identifier: b0ca9B4iFpn8y67WPIM4a5AQn9gaXSd12xULuOM8v8Y=
Subject key identifier: 71:B7:90:0B:76:C7:65:C9:8A:FD:4B:DA:8C:E4:84:C2:A4:AA:2F:1F
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 019357D2419897B0E700A3479F533FAA095B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:00:17 +0000
Manifest this update: Sat 23 Nov 2024 07:00:17 +0000
Manifest next update: Sun 24 Nov 2024 07:00:17 +0000
Files and hashes: 1: OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl (hash: ZrFtjCEVLiv/BnOJmwxOjew6QLGmuaGt11LG1FuXB/A=)
2: bQkOBAwpB6qMNmmRz5oPfNYXX1M.roa (hash: +EXVqF0TKq948trl2BRS0V/z+MzZAZaxD+7hPbkwzak=)
3: iP1P9rTihrv6xWF1TdBOdk-GiKc.roa (hash: 2R93JfkHDbPufW13a+oYsCnpPZB8wl67PTawm5yA1zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:41:98:97:b0:e7:00:a3:47:9f:53:3f:aa:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Nov 23 07:00:17 2024 GMT
Not After : Nov 24 07:00:17 2024 GMT
Subject: CN=71b7900b76c765c98afd4bda8ce484c2a4aa2f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:81:9a:6d:c3:49:0b:14:9c:47:6c:21:71:
25:95:9c:45:22:e8:61:15:92:ff:fe:b8:83:57:43:
a6:12:3e:e5:21:b6:15:ca:4b:b8:de:8b:07:88:43:
f9:6b:a7:58:80:6a:52:e5:3f:5c:25:90:e7:97:ba:
dc:61:d7:b5:7d:f6:9d:02:3f:6e:5e:06:27:c0:05:
93:b6:62:79:ce:0e:20:41:74:fb:1c:09:94:5e:c2:
72:79:ef:cd:53:43:61:09:a2:14:39:21:9f:9c:cd:
83:57:6e:df:29:8f:a0:32:d9:d7:26:b9:d8:18:fa:
52:e7:c8:54:a7:53:b9:a7:5f:fc:aa:6d:7f:a4:16:
56:89:13:46:2c:eb:de:83:11:09:d6:13:9d:97:3a:
e3:36:e2:be:24:71:72:89:c3:62:5b:58:01:b1:94:
98:1b:ba:a5:b6:ed:62:67:fb:47:2a:72:d0:47:30:
90:a8:89:85:80:d4:2d:5a:1d:48:be:2b:e8:f6:5a:
d2:6f:cf:d3:03:7a:40:5f:4e:e4:fc:bc:e3:68:80:
c4:dc:91:bc:40:80:58:5d:65:51:d4:03:3f:6c:14:
47:57:89:97:01:79:78:10:2a:0c:4c:ea:b7:3f:89:
56:3d:6a:a6:b1:47:b0:0b:96:13:00:83:dd:76:79:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:90:0B:76:C7:65:C9:8A:FD:4B:DA:8C:E4:84:C2:A4:AA:2F:1F
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:77:38:a9:cc:7a:6c:af:86:af:90:53:1e:3e:1e:c0:96:
8f:9a:d6:5f:d1:da:2a:c7:0b:58:bd:63:e8:03:72:31:59:1a:
15:92:08:44:e7:14:be:ea:58:46:5b:54:7a:b1:8a:98:e9:0b:
c7:45:e8:65:15:85:31:8d:f3:5b:f3:b4:68:e5:9b:3a:16:2c:
73:e1:ed:c1:70:e7:08:e6:77:b3:f6:a2:d5:58:0c:20:2a:6e:
dc:f5:40:d8:32:e2:9e:b2:80:ae:47:69:5a:b8:67:4b:2b:3a:
0e:84:8c:db:71:cf:87:e1:0f:8e:42:22:6b:46:aa:a0:ce:a8:
0d:59:d6:5d:25:6e:9b:8b:33:e6:d9:62:89:33:fb:b9:68:ac:
22:f3:c0:f5:9d:85:39:38:40:7b:c1:17:9a:b2:69:0e:09:2d:
85:cf:59:70:dd:eb:43:14:6e:fd:a6:2f:70:db:96:bd:4f:a8:
7b:d5:91:63:b2:66:cc:05:fd:f0:09:6b:4a:09:84:ae:aa:42:
29:f5:9c:fd:43:b4:b2:2e:1e:8b:81:41:25:85:fc:3a:12:cb:
49:23:31:ed:0c:d9:89:f4:35:6a:20:21:5f:4f:ae:81:c5:8c:
b0:9f:64:67:7d:22:61:22:f9:af:83:56:3f:91:82:2e:9f:31:
7a:e8:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:11 2024 by rpki-client on console-ams.rpki-client.org