Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File: ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier: tQu4QioqS4ofISeWFuWuvjjAHc2+rRQTErm+3d+37Bc=
Subject key identifier: 15:4A:00:B1:AF:17:34:B6:D4:CD:D7:C6:53:79:32:0D:42:48:C6:1F
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer: /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial: 019406EAFD0E458D5AA78B0AE12E06617DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number: 0A40
Signing time: Fri 27 Dec 2024 07:00:51 +0000
Manifest this update: Fri 27 Dec 2024 07:00:51 +0000
Manifest next update: Sat 28 Dec 2024 07:00:51 +0000
Files and hashes: 1: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: 567wXFFs3Sa/BbsC3tve8JrklEQOni3V7fM3BIOujCA=)
2: QsvG-ZT_Jk80D8tftr-3_xY89m0.roa (hash: KA/mjJgdDYUtAEheMEHTNQwSBqxfrbOeCDtaBQpE0VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:fd:0e:45:8d:5a:a7:8b:0a:e1:2e:06:61:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Validity
Not Before: Dec 27 07:00:51 2024 GMT
Not After : Dec 28 07:00:51 2024 GMT
Subject: CN=154a00b1af1734b6d4cdd7c65379320d4248c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:0e:47:5d:82:c8:b7:bf:48:a1:2b:ad:45:
7e:95:3e:9c:33:62:8c:bd:d1:1b:d8:a1:2d:47:0a:
5f:df:c6:24:f7:2d:97:25:7f:83:d1:e9:17:f9:ba:
36:b6:37:63:fa:70:74:c9:f7:bb:32:39:c7:00:48:
65:9f:92:a2:4f:e9:9a:3a:ac:94:c1:58:ba:2d:74:
6c:79:c6:69:71:97:c6:5a:de:fd:11:9f:67:41:02:
74:2f:80:db:e9:b1:7d:c9:5e:6c:af:5f:44:2a:dc:
61:51:e3:76:7e:64:ae:05:03:ff:6e:9f:b9:78:d7:
6a:84:3e:ec:68:a4:be:b2:46:35:ef:51:d3:45:4d:
41:c6:fb:b9:54:fd:9c:0b:33:77:7b:4c:c9:30:f7:
10:13:d3:10:a2:b2:bb:fb:b0:7d:55:dc:d2:58:24:
87:23:9f:95:a0:36:31:ba:ac:78:0f:d3:22:93:68:
5a:63:f0:f5:da:cf:a1:e1:ab:68:9c:9f:25:9c:dc:
45:7c:58:4d:43:a5:bd:1c:b7:86:6f:ca:23:77:ec:
4c:fc:aa:b7:2f:75:5c:28:8c:bb:04:da:16:b2:8c:
f2:7e:7a:2e:39:b7:f1:96:6f:03:27:17:11:2c:10:
70:a2:12:03:be:93:c4:88:e9:0f:14:e3:ea:2d:9c:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:00:B1:AF:17:34:B6:D4:CD:D7:C6:53:79:32:0D:42:48:C6:1F
X509v3 Authority Key Identifier:
keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:d4:e4:8a:39:d9:a3:b5:f5:73:59:ed:b1:81:c9:60:87:
bf:ef:18:ca:73:ed:fb:e8:07:1c:c6:70:da:db:b2:91:bf:1c:
07:94:2f:48:e5:62:d2:b3:c2:66:fd:ab:25:68:32:df:f9:5a:
b9:1a:0c:6f:1d:74:33:cb:16:e2:52:1e:91:f3:a8:ca:c6:8f:
66:8c:f8:76:3b:8a:e1:bd:f3:04:73:ea:88:69:e9:35:8e:d2:
22:90:91:10:99:f0:67:a7:12:45:ae:77:60:57:18:0b:66:0c:
fb:56:5b:52:ba:be:57:31:bb:d4:8a:cf:4a:2e:6c:88:0e:10:
57:99:47:74:06:42:89:91:77:33:94:7b:aa:93:75:79:96:fc:
51:8d:63:ae:19:c5:54:07:af:a8:4b:ff:1a:06:4b:e2:72:b1:
cf:b0:6c:9d:1a:aa:50:ef:4f:95:2e:74:af:d4:b6:60:ed:3a:
76:1b:b4:42:ae:47:19:6b:27:cb:c7:20:4c:34:98:f0:44:c0:
cf:9b:db:e1:e0:da:d9:f6:b5:42:d6:09:6a:81:77:c8:24:7b:
a7:67:f4:8d:a8:e7:3d:8b:19:9b:af:3a:38:f8:bf:70:53:71:
02:a7:7a:85:05:08:64:84:2c:04:12:cb:ce:f2:83:ee:fe:7b:
fc:27:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:04:50 2024 by rpki-client on console-ams.rpki-client.org