Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: FW3M6ypMIZBQqGNwXeMNouwkee9Lk3PrR+BStovVlYE=
Subject key identifier: 67:A1:6E:61:A2:45:57:3D:5F:A4:B2:89:B5:A7:14:FA:9C:98:0E:1A
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019352ABDB1732A6A6FB4BE1BD89D682F98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 1373
Signing time: Fri 22 Nov 2024 07:00:14 +0000
Manifest this update: Fri 22 Nov 2024 07:00:14 +0000
Manifest next update: Sat 23 Nov 2024 07:00:14 +0000
Files and hashes: 1: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: HE/GBN7uycaefw4ND6KSx/EC6njOa7oBYhkOu3JxPHE=)
2: SE0pMMI9V_I2rJjxcQ_0GP0xigI.roa (hash: fa8dh5log1ymig2ba4jG+4x6a08QlyBZCgb9Jfk8QGE=)
3: VQcpAYq4wHZeY1d5fXq7XPVfgxU.roa (hash: 9H4f0QLfE/jBHg1p+c2oVhHoynYhC8pAh/O6Ujl5B2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:db:17:32:a6:a6:fb:4b:e1:bd:89:d6:82:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Nov 22 07:00:14 2024 GMT
Not After : Nov 23 07:00:14 2024 GMT
Subject: CN=67a16e61a245573d5fa4b289b5a714fa9c980e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:63:f4:0f:53:3d:49:16:3f:76:e7:6e:27:
05:86:fc:3b:5e:e9:91:dd:bd:8d:bd:f3:60:5f:bc:
93:01:71:86:dc:1a:7f:93:f0:97:30:c6:fb:29:bc:
63:f0:00:5a:ca:34:05:8e:21:e4:b7:e0:c6:e9:17:
ba:44:c5:60:85:25:18:40:d4:f3:c0:03:00:e9:d5:
de:af:3d:c1:5c:01:58:49:21:e5:8f:53:7c:b8:c3:
e6:3a:76:02:9c:c0:34:3b:5a:55:52:f0:66:a7:9e:
79:95:7c:17:1f:de:85:79:61:d2:ca:90:8d:bd:ea:
9b:af:3b:3d:f8:3d:c8:06:3e:94:67:ba:0f:61:ba:
76:25:8e:9d:02:01:84:36:3c:90:5b:b3:4c:5d:76:
78:5e:c5:89:c5:be:8a:28:f7:ca:72:ba:18:bb:32:
ce:cf:b5:00:d1:ac:6e:9b:bb:29:c8:b0:e4:8d:27:
fc:35:11:27:b3:0e:30:b6:de:95:9c:83:86:a8:e1:
16:05:d3:87:56:43:70:90:49:56:e4:ff:7a:33:18:
64:13:4a:32:0f:a0:62:3d:cf:8d:36:dc:29:14:f1:
1c:ab:4f:c3:f0:6d:97:68:ab:af:2d:6d:62:5e:d4:
b3:83:5d:4a:a1:ae:fb:2c:0c:55:12:41:95:14:cf:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:6E:61:A2:45:57:3D:5F:A4:B2:89:B5:A7:14:FA:9C:98:0E:1A
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:2d:36:59:fa:87:da:bc:c6:b7:9f:8d:2f:36:a0:92:4a:
78:06:b9:4a:66:77:56:ab:ad:6b:93:2f:af:1e:2a:54:1f:3d:
aa:8c:e5:45:ed:d3:77:12:57:da:0d:03:b7:b0:67:67:aa:11:
e6:79:7a:c2:5c:83:31:aa:ae:d7:e5:7a:98:93:d1:60:8e:ff:
5f:4a:b6:7d:98:89:21:e8:2d:47:76:04:4c:1f:75:c8:00:6d:
68:22:30:6d:f8:eb:76:45:bf:90:13:1e:a2:a6:74:25:d5:25:
e1:1e:bb:cf:8a:ff:9b:b1:36:07:f9:cc:89:12:9f:0f:cd:d9:
48:78:00:92:57:9d:68:79:e1:98:ca:c6:17:da:d8:22:6b:2b:
a7:3b:90:b8:dc:ec:d0:b0:82:1c:80:06:7a:a7:5f:26:68:db:
5d:1b:b6:a3:33:87:41:31:a0:5f:7f:06:08:ac:f2:b3:19:aa:
ca:09:98:79:ad:77:5c:66:b8:1c:06:13:c4:29:5b:9c:80:b0:
f7:23:93:a0:a8:50:ce:50:48:25:0d:87:28:30:9a:2d:4c:fa:
c2:b3:ce:6d:a4:ba:da:f0:93:30:44:42:80:e8:c6:cf:b8:fd:
bf:a3:92:7f:c4:68:25:7b:df:41:4a:34:8a:d8:78:74:98:d2:
21:18:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:49 2024 by rpki-client on console-fra.rpki-client.org