Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: eiDu0Hbn0b9GY5+ERFSPr9So3UEo4K4/3YRvBSMb9ao=
Subject key identifier: 8C:6D:ED:6D:C2:40:BC:2D:EE:F8:2E:F8:74:F2:33:22:D4:D6:AB:9C
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 01935162BC0F460A0830D25AF13EBF690844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 01:00:45 +0000
Manifest this update: Fri 22 Nov 2024 01:00:45 +0000
Manifest next update: Sat 23 Nov 2024 01:00:45 +0000
Files and hashes: 1: 0yAUXLNTaL2gPAHZCC0ACAkiiZQ.roa (hash: DDEVjBEWu/DIWshghZTipjlXJu5RP824AxMwo3ksFmY=)
2: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: Sr7QBfPEV1zpy0PR0lpz3Odl16d5oOxhuX0f2Pni+4A=)
3: LeblHkGAnJpzPlSE591sdoJIzmE.roa (hash: +oLAVnq4AyrEAO0nXs8nUvs4P5V8OL/EjXr5jRq5phc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:bc:0f:46:0a:08:30:d2:5a:f1:3e:bf:69:08:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Nov 22 01:00:45 2024 GMT
Not After : Nov 23 01:00:45 2024 GMT
Subject: CN=8c6ded6dc240bc2deef82ef874f23322d4d6ab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:93:bd:23:7b:55:c7:d4:b3:46:3c:31:41:
ba:f8:2e:a1:95:a8:3c:2f:f7:94:b9:f9:0b:9d:d2:
2c:09:28:f5:f0:26:cc:ea:99:c7:df:fb:df:37:df:
0a:6f:fe:d5:3d:5b:9e:33:5a:ce:77:80:d0:1c:fa:
a2:7e:bd:5d:cc:86:8d:19:9e:39:0c:08:86:8d:d9:
6b:1d:20:18:5b:4b:34:29:7c:ec:89:10:a1:59:16:
63:c7:2b:2f:0c:62:0b:19:09:36:ee:a5:ba:da:ed:
01:59:5d:fd:87:92:25:52:c0:59:39:e7:32:e9:c3:
5f:52:6b:60:4d:07:09:32:67:f9:9d:1b:fd:99:7c:
47:06:5d:30:e7:9b:b2:52:7d:24:1a:79:76:8a:de:
9a:d4:a4:7a:10:df:69:3e:5d:8c:b7:4e:20:80:58:
f1:85:68:6c:3b:da:94:56:37:69:10:97:e4:3b:f8:
f6:d2:2e:60:7f:8b:c1:79:01:bd:1c:9f:4b:dd:3e:
cb:4a:0f:be:b9:d1:49:30:07:d7:a5:6e:fb:aa:eb:
e0:3a:5d:a1:2a:76:fd:02:fc:0c:33:d5:ab:00:7d:
bd:33:2c:3f:89:e0:5c:11:19:66:2b:61:41:5b:8b:
68:6d:76:03:b8:cf:24:ff:8f:f5:f8:e8:a2:25:4c:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:ED:6D:C2:40:BC:2D:EE:F8:2E:F8:74:F2:33:22:D4:D6:AB:9C
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7e:22:72:9c:27:ef:18:c7:36:a7:79:e8:6a:75:d7:1c:1f:
bd:93:37:ac:8a:de:69:6c:2b:d9:ae:bd:7c:25:28:0e:b2:91:
10:01:d9:9c:f0:bb:5b:3a:69:7a:f3:54:4e:20:5c:7c:02:8a:
c7:09:cc:28:74:70:3a:2f:7f:fd:04:00:b0:4a:7a:6d:e8:3b:
01:dc:e5:77:07:aa:0a:cf:20:72:c6:97:84:9c:e8:7f:44:ac:
68:13:95:b9:b9:82:b8:37:e1:6b:eb:ce:ee:85:cf:a6:fb:88:
50:eb:2a:e3:ad:96:af:03:4d:1b:d1:aa:59:ed:3c:9a:eb:5b:
02:db:b9:d7:54:00:40:5b:b6:94:7e:93:91:3b:0b:44:e4:4c:
23:fc:7f:61:5c:e5:1a:47:c5:b7:f2:6d:f0:36:42:41:71:56:
a4:ce:9d:63:ea:e3:11:ea:fa:c2:3e:d0:94:63:92:d2:49:b6:
d6:d7:8a:52:d7:2d:74:52:f3:26:27:01:2f:b5:70:a8:7a:88:
4c:12:cc:4a:cc:d3:f3:1b:04:e7:a8:02:f9:b5:1a:60:86:81:
d3:50:80:d0:b4:cd:2a:88:02:fd:01:2f:86:73:8d:5a:77:ca:
68:0a:85:5a:3b:00:b7:68:95:e7:d4:9e:71:a2:80:53:38:ff:
79:80:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:08 2024 by rpki-client on console-ams.rpki-client.org