Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: yw0x7CL1NVdGdz42t8YEtFYpXAdCtcqyY8KrP7Dnf9w=
Subject key identifier: 01:FE:C4:3E:13:D8:98:6F:5B:0F:F7:27:0F:83:45:4F:5E:72:01:E1
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019357D2538836B423EF7A9F3BB135B3D645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: hpwBBqbllUPPbwr4+fQXYB3rc+yrN4CBH05WXowG5Rg=)
2: uBuiCDDAumAgedFLSZ5PDvfSj0E.roa (hash: MQzbTOh/Yq9MkFp2PJ8FL1I5NO5u4haxiC8EUgDPA2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:53:88:36:b4:23:ef:7a:9f:3b:b1:35:b3:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=01fec43e13d8986f5b0ff7270f83454f5e7201e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:4b:56:00:7c:a2:26:04:5b:6a:53:6d:db:
f4:b7:86:86:e0:92:5c:c3:80:7d:47:25:bc:90:a1:
90:1c:5c:6e:10:36:4a:0f:9b:39:c1:a5:83:d6:5e:
2d:cd:9a:ee:8f:10:8a:8d:f8:6c:c0:0d:b5:f9:aa:
b7:25:b9:fc:24:ee:d8:6a:8a:3b:7a:27:d1:e9:f4:
26:70:5f:84:7b:34:80:48:7a:e4:b7:78:f5:7f:ce:
7b:c8:20:5d:39:7e:97:fc:65:cd:5f:1a:3c:ab:b0:
09:06:bb:66:74:b2:74:4b:20:46:56:b4:9d:c7:f2:
08:ec:68:71:d8:96:a4:b0:56:db:07:22:b1:2c:b5:
da:ea:8f:65:d3:e1:8e:6e:10:a1:2c:c5:97:89:f0:
44:f0:b4:73:d2:39:23:44:80:f6:66:de:34:7c:5b:
7f:d5:df:fc:90:33:64:cf:60:a9:72:5d:cc:27:4f:
b0:cd:a6:bb:3c:c1:fc:8d:bf:ed:80:59:08:c1:9e:
67:d2:55:47:ba:4b:10:1e:3e:42:57:7e:af:19:e4:
db:8a:65:d4:86:64:f0:06:05:23:2c:ce:b1:31:86:
e8:73:4b:79:63:d6:cb:29:22:3e:56:b0:bc:9d:f6:
2f:8f:64:47:a6:cb:59:56:70:a5:80:93:65:b3:8f:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:C4:3E:13:D8:98:6F:5B:0F:F7:27:0F:83:45:4F:5E:72:01:E1
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:4b:2d:15:2e:b8:bd:85:1d:26:10:0f:3c:30:7b:54:7f:
54:34:95:f5:84:69:73:55:00:6c:06:39:60:ed:6a:d1:04:6c:
f2:bf:10:53:e6:18:ab:8a:95:10:3e:73:d1:0b:bf:d5:e3:c0:
06:93:bb:a6:09:8c:b9:32:0b:be:2a:93:0d:6f:fb:65:bc:19:
c4:2c:bf:10:4b:3b:ed:31:71:e3:72:c0:dc:01:fc:d1:c8:23:
a3:59:b9:5d:e4:23:2f:b1:c4:a8:8a:db:83:a4:eb:50:26:56:
a9:19:a8:62:8b:66:43:b5:77:31:8f:89:f7:eb:dd:ce:d8:b2:
30:07:80:bd:65:e5:c8:aa:4e:95:cc:40:a5:37:d9:f5:6c:6f:
05:a0:a4:bc:67:85:53:89:f5:e0:b0:8a:4d:75:3c:51:ed:db:
6c:06:f7:95:f6:08:b1:af:f3:f2:2c:d8:55:31:8b:a7:7c:33:
46:49:25:29:d6:e7:4e:9e:7b:04:45:da:a5:a5:59:aa:ef:b1:
70:71:a6:46:6f:f2:19:09:81:39:8b:3a:94:f3:47:0e:88:c4:
5f:30:5e:69:2a:3a:6b:b2:71:f4:3d:97:a6:ad:3f:4d:68:5e:
5a:ac:42:0e:75:9e:7c:ba:e8:48:b9:7a:2c:43:98:55:37:41:
1b:04:8c:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0lOINrQj73qfO7E1s9ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi
MjkwYjQwHhcNMjQxMTIzMDcwMDIxWhcNMjQxMTI0MDcwMDIxWjAzMTEwLwYDVQQD
EygwMWZlYzQzZTEzZDg5ODZmNWIwZmY3MjcwZjgzNDU0ZjVlNzIwMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVdLVgB8oiYEW2pTbdv0t4aG4JJc
w4B9RyW8kKGQHFxuEDZKD5s5waWD1l4tzZrujxCKjfhswA21+aq3Jbn8JO7Yaoo7
eifR6fQmcF+EezSASHrkt3j1f857yCBdOX6X/GXNXxo8q7AJBrtmdLJ0SyBGVrSd
x/II7Ghx2JaksFbbByKxLLXa6o9l0+GObhChLMWXifBE8LRz0jkjRID2Zt40fFt/
1d/8kDNkz2Cpcl3MJ0+wzaa7PMH8jb/tgFkIwZ5n0lVHuksQHj5CV36vGeTbimXU
hmTwBgUjLM6xMYboc0t5Y9bLKSI+VrC8nfYvj2RHpstZVnClgJNls4+cTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH+xD4T2JhvWw/3Jw+DRU9ecgHhMB8GA1UdIwQY
MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt
YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll
LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9RLLRUu
uL2FHSYQDzwwe1R/VDSV9YRpc1UAbAY5YO1q0QRs8r8QU+YYq4qVED5z0Qu/1ePA
BpO7pgmMuTILviqTDW/7ZbwZxCy/EEs77TFx43LA3AH80cgjo1m5XeQjL7HEqIrb
g6TrUCZWqRmoYotmQ7V3MY+J9+vdztiyMAeAvWXlyKpOlcxApTfZ9WxvBaCkvGeF
U4n14LCKTXU8Ue3bbAb3lfYIsa/z8izYVTGLp3wzRkklKdbnTp57BEXapaVZqu+x
cHGmRm/yGQmBOYs6lPNHDojEXzBeaSo6a7Jx9D2Xpq0/TWheWqxCDnWefLroSLl6
LEOYVTdBGwSMYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:57 2024 by rpki-client on console-fra.rpki-client.org