Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: pvL9py1Oydt9ysQyhRf0sI14gFtQXTJEQhreRvWeIuM=
Subject key identifier: 53:86:9D:E4:64:EF:0A:9D:3D:09:94:E8:45:F2:AB:2C:8C:E7:D6:3F
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 0193568A17FEBF34B0BFD80AA2DCE2E90A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:01:50 +0000
Manifest this update: Sat 23 Nov 2024 01:01:50 +0000
Manifest next update: Sun 24 Nov 2024 01:01:50 +0000
Files and hashes: 1: 6jQ3xTr0DIH9j5gjCwFzp6Mvd2I.roa (hash: ncr2QxgHYD4NU6BEHv1sH7MKgOyN/gtD0TuynRqqXm0=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: otNbsoAFZXnQXmsN4IUUzzmatCwcmTWMSGf3ww/R8tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:17:fe:bf:34:b0:bf:d8:0a:a2:dc:e2:e9:0a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Nov 23 01:01:50 2024 GMT
Not After : Nov 24 01:01:50 2024 GMT
Subject: CN=53869de464ef0a9d3d0994e845f2ab2c8ce7d63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:60:c7:6f:8b:ee:20:0d:29:e2:c7:ff:1a:
42:8f:2a:de:ce:8b:d5:7d:f3:d1:db:54:27:1a:e7:
de:4f:50:28:69:cc:32:1d:8c:2a:b7:cb:d3:3f:0e:
d2:20:87:ce:0f:2c:b1:c8:c6:4f:09:e8:a7:a3:f0:
87:fa:cc:25:6c:1e:9d:da:3f:2a:44:63:77:d4:60:
73:27:68:74:9a:46:4e:82:b1:cb:de:83:58:f8:7c:
0d:cd:16:cc:c2:7c:ad:3f:df:0d:3a:68:5c:98:e7:
2c:16:27:ed:a9:a9:c3:b0:f4:a4:3c:56:db:c8:36:
a6:0f:05:88:83:b5:9a:c0:90:5f:d8:65:a5:ff:0b:
5a:72:e4:68:87:b8:35:29:99:71:df:5b:b2:63:8c:
5b:0d:63:a2:5c:51:11:d8:b7:03:81:43:98:6c:6f:
69:5c:c5:62:26:08:02:67:f7:87:08:72:ce:c4:ae:
d2:90:ff:2a:85:07:fa:11:60:cf:53:1c:2e:41:1c:
e4:39:38:35:50:1f:54:74:27:f6:2d:77:9f:68:52:
30:0b:b1:c6:2f:76:f5:71:eb:ff:f4:0e:80:80:cb:
76:0a:5e:7a:de:d1:c7:de:fa:ca:2b:cb:20:a2:c7:
29:20:7d:6f:9d:1e:bb:93:68:c6:af:18:b0:f0:fc:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:9D:E4:64:EF:0A:9D:3D:09:94:E8:45:F2:AB:2C:8C:E7:D6:3F
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:77:b3:e9:2a:21:29:bc:02:22:fb:5c:2d:aa:d0:1e:77:
fb:37:4f:a3:95:07:dd:39:8e:66:65:5d:3f:61:e9:25:9a:49:
f1:91:51:be:b6:0a:05:7f:23:c3:69:26:ac:96:c6:a9:39:5c:
cc:aa:85:1c:b6:97:83:b5:21:df:60:3c:54:94:2a:f9:64:d0:
6f:cc:2d:cf:ab:60:5a:d9:25:e1:31:37:94:8f:a4:90:c7:fc:
af:0e:b2:4d:86:f6:2f:fd:46:48:42:3c:ad:ef:5e:5d:a8:ae:
89:93:c4:ba:50:9c:1e:9a:d2:8a:56:38:de:4b:c3:5e:91:3e:
26:f6:07:9e:14:dd:15:e5:80:d4:8b:bf:c9:e7:79:1c:9f:68:
33:ca:81:c4:2c:44:07:26:99:0d:ed:f2:7e:06:8e:f2:3e:86:
c8:1e:b9:5d:03:ad:7e:d0:62:6d:dd:ef:63:d0:79:ab:fb:7c:
ea:91:86:c1:35:ba:08:7f:0a:94:92:00:fa:18:43:e4:19:df:
b8:77:0f:e6:d9:09:41:f0:7d:ef:9d:3f:66:bd:86:8a:47:6c:
cb:54:51:db:5b:ff:22:cc:ee:e2:11:b3:e7:dd:5b:96:d1:90:
4d:ec:9a:4b:e8:fd:41:96:71:c8:f7:87:f1:11:9c:10:56:45:
96:12:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:45 2024 by rpki-client on console-ams.rpki-client.org