Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
File: Iyrza5wHnaCRgn2j0HycilI2y1Q.mft (raw, json)
Hash identifier: j8v+F97IC+EdYIbPvUo3Z02DeoFyCSRInVs1s5aUvJU=
Subject key identifier: 9F:DA:4A:C8:1A:15:0E:FB:3D:39:90:81:68:D1:C8:65:32:6A:B3:FA
Authority key identifier: 23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
Certificate issuer: /CN=232af36b9c079da091827da3d07c9c8a5236cb54
Certificate serial: 01935879807636B7A15522D20CB6FB33CCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
Manifest number: 0B8C
Signing time: Sat 23 Nov 2024 10:02:57 +0000
Manifest this update: Sat 23 Nov 2024 10:02:57 +0000
Manifest next update: Sun 24 Nov 2024 10:02:57 +0000
Files and hashes: 1: Iyrza5wHnaCRgn2j0HycilI2y1Q.crl (hash: 3qoaSnvSowSkJXQ+eEnoI4tw0V201HMb7DsF8x2gOJ4=)
2: yvRwsOSFZZKsFbEMPLgWT7pnqqM.roa (hash: WvObjivsL6W97ymu7x6shoJ2Uv7iZ8DHg9Nx+NUcY5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:80:76:36:b7:a1:55:22:d2:0c:b6:fb:33:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232af36b9c079da091827da3d07c9c8a5236cb54
Validity
Not Before: Nov 23 10:02:57 2024 GMT
Not After : Nov 24 10:02:57 2024 GMT
Subject: CN=9fda4ac81a150efb3d39908168d1c865326ab3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:fe:32:b5:13:10:8f:a6:b7:00:12:44:4b:
78:31:69:4b:14:c6:07:1a:ee:68:83:aa:a7:6a:ad:
c1:90:cd:e2:8a:02:ff:0f:97:ac:ca:aa:98:92:bc:
23:9d:b4:bb:83:d1:22:d0:50:80:ea:0f:56:04:5a:
06:ad:87:9d:4e:fb:d0:71:b3:2b:1e:0f:ac:7c:3c:
87:fc:1d:9c:1d:c3:f2:b8:c5:ea:8b:4f:fd:0a:cf:
b0:f4:d7:88:a3:5b:00:9a:11:59:b2:6f:a7:0f:08:
db:da:98:25:6b:90:ad:ef:d6:e8:b0:5c:39:48:aa:
50:86:0b:23:c3:9e:0a:a4:6b:e9:83:69:03:3f:b6:
20:e0:a4:56:02:0a:69:f3:b8:31:ac:0c:c5:44:46:
66:26:ee:8a:05:54:16:76:32:b5:dd:a0:30:9e:3b:
3c:da:13:e4:2d:8c:ec:02:97:94:64:f8:1d:31:de:
3c:55:d0:fe:03:ef:c5:6c:81:86:88:9f:fa:60:68:
74:14:a6:b8:b7:eb:50:ea:03:55:36:29:2f:1b:78:
5f:2d:af:25:d3:88:8d:f6:4d:8c:e7:c8:e2:94:2c:
b8:e3:3f:e4:e3:56:b8:7e:26:e3:7b:08:46:d9:d1:
5f:48:1b:45:82:6b:b5:bd:f7:6c:f4:43:a6:43:50:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:4A:C8:1A:15:0E:FB:3D:39:90:81:68:D1:C8:65:32:6A:B3:FA
X509v3 Authority Key Identifier:
keyid:23:2A:F3:6B:9C:07:9D:A0:91:82:7D:A3:D0:7C:9C:8A:52:36:CB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyrza5wHnaCRgn2j0HycilI2y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c2fd33-fd44-4e08-b424-aa1045220b5b/1/Iyrza5wHnaCRgn2j0HycilI2y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:6c:48:d0:e4:bf:0e:0d:d7:f5:bd:f4:59:61:b4:77:d4:
e6:1b:f2:61:fd:ea:fc:35:87:df:77:0f:cf:b3:74:8e:8a:ba:
c5:78:92:64:b5:d4:e5:8c:9e:db:af:be:cd:b7:91:f3:2e:d4:
71:cb:81:a0:dc:01:8e:a8:09:4b:9a:30:af:d0:f1:a8:a0:6e:
55:c8:7d:47:c8:86:c5:fb:33:ae:3c:5e:0b:45:55:d4:b5:a0:
d3:d5:f9:db:65:29:c1:40:0c:9f:01:e5:07:4d:40:4a:04:b3:
ec:89:75:36:ea:01:4d:ac:f5:2c:35:7c:66:41:68:b8:33:e5:
8e:0e:d9:5a:7a:b9:f3:f8:4c:a6:c3:ef:e5:4e:bb:a6:40:c0:
a8:ba:96:79:58:fd:18:6b:90:9a:d3:11:ba:9a:1a:e5:59:f9:
60:22:9a:9b:76:06:d0:42:5d:ea:e3:d8:98:d3:46:76:46:7f:
e3:a2:8a:de:a8:0f:8c:9d:87:d4:d6:eb:82:c8:1f:70:0b:e0:
9a:64:18:a8:bb:f0:53:6a:3b:02:0e:3a:b6:a3:69:99:18:c4:
72:87:bc:6b:84:73:12:82:4a:57:74:5a:7a:a1:35:e4:7b:f8:
e5:fd:14:8a:46:27:13:dc:0b:eb:bc:be:52:a2:f0:c4:22:20:
25:aa:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:59 2024 by rpki-client on console-ams.rpki-client.org