Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: X5HSpnyGR3FBVKuw3lHbE3+XfCd6VdP6Nrf9kPTyd30=
Subject key identifier: 71:B9:43:59:29:9D:67:58:F8:DD:E6:B8:86:6A:3D:2E:E3:CE:5B:DC
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 0193568AD6A47DE28A736347140525C6CE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 01:02:39 +0000
Manifest this update: Sat 23 Nov 2024 01:02:39 +0000
Manifest next update: Sun 24 Nov 2024 01:02:39 +0000
Files and hashes: 1: GllneJsOvkbNWGFoIpSB46bkf40.roa (hash: Ye1KUdV2nIqvT74ScmbpLZeA5G+fCHiqth7X+a5b2SQ=)
2: IpEVMyNqW7hxc4zShK2ZSuOl0nQ.roa (hash: pycniZZSfh5l1bTeOmLpuBa25Hf5f5HBO08nF4dGNxQ=)
3: KPIGTz0WSENQCh6uJN7IdWjJ5oU.roa (hash: q/4pfSZAG3LYOVTpAnJm7KSEFurpUhYTbRb7URc7zKI=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: VIliaO9Be74jKdLfz/Hdv3XwHvZyIzYcvLckAsQl4jU=)
5: qL27UohQTzm4QCE38AYMY8jF020.roa (hash: qbZEfi3sgrwfezgKn66BSvMt5Bkdpo+Y1aMmbtPIIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:d6:a4:7d:e2:8a:73:63:47:14:05:25:c6:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Nov 23 01:02:39 2024 GMT
Not After : Nov 24 01:02:39 2024 GMT
Subject: CN=71b94359299d6758f8dde6b8866a3d2ee3ce5bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:6b:de:9d:8a:7a:19:63:72:06:0c:f3:9b:
f6:27:0d:48:94:57:4f:0a:10:bc:47:d0:be:75:55:
9a:05:dd:69:f7:bd:c3:91:a3:13:c2:40:78:65:23:
c9:60:2d:dd:fe:db:a4:c6:cd:38:ac:8e:a2:c1:f4:
6b:4c:ec:df:63:3d:77:56:95:7a:94:8e:5b:c3:a8:
a2:21:5b:95:84:84:05:ea:84:10:bf:35:b5:8b:c0:
eb:23:6b:cf:c8:c4:74:9a:01:ea:0b:13:0e:bd:1e:
00:de:b9:2f:57:0c:45:5c:6d:22:80:58:9b:84:18:
34:61:3c:3a:6e:fd:06:f4:0f:ad:2f:14:8b:0a:0e:
f4:13:e0:8a:e6:f2:1a:27:d9:8a:62:91:ba:9b:7d:
8c:b1:ba:95:2a:3f:74:71:dd:31:da:22:57:0d:18:
d0:95:b7:53:27:78:94:fd:cc:01:58:f5:49:b9:ea:
93:a4:1b:73:b7:e1:4a:98:a4:85:00:b4:13:69:b4:
63:aa:a0:df:7f:2c:20:14:02:c7:16:a5:cd:5c:5d:
e0:57:7e:dc:80:9f:a3:58:8b:58:1b:29:70:4b:c9:
55:a2:5c:4f:2c:49:b3:e3:5c:73:76:35:49:eb:69:
8c:a6:a6:77:ae:14:8d:42:87:c2:f2:b5:23:28:a4:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:43:59:29:9D:67:58:F8:DD:E6:B8:86:6A:3D:2E:E3:CE:5B:DC
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8c:08:80:7e:0b:3d:cf:da:f1:b0:eb:4b:14:6c:d3:f9:9d:
da:fa:37:5b:84:a6:63:2b:70:ef:00:8b:5c:6d:b6:fe:27:43:
9a:ab:4a:19:d8:ff:16:a0:6e:a6:9d:f3:ef:1e:85:3c:d1:6f:
79:73:3c:c9:82:1d:5c:3d:9a:2b:88:93:d8:fc:ff:a2:24:f3:
de:28:73:a2:e4:f1:12:c5:bb:ed:35:32:71:4c:46:06:83:de:
ae:34:9c:c4:71:ec:94:58:e4:59:aa:76:a6:32:ba:4c:0f:ae:
48:13:4e:53:6b:db:03:e3:66:36:b8:9e:69:62:eb:71:cc:05:
e3:8a:6d:31:cf:8a:fc:cf:e1:be:bf:76:c4:fc:67:c9:ec:96:
7b:f6:38:91:16:2f:24:ed:9a:68:2c:43:24:ec:b7:90:31:cc:
aa:6d:17:33:12:0f:53:0b:f0:d5:e4:47:79:09:a6:62:8a:8b:
c7:b5:cf:19:df:4b:b8:b8:ed:2d:69:c8:bc:c4:ae:34:5d:d2:
12:e8:9b:cd:42:4e:3b:50:df:b4:44:38:a5:b6:9d:da:6f:d1:
be:74:ea:66:a3:f9:c7:05:b3:bf:67:2f:8c:7a:b5:c0:ff:61:
18:20:9f:37:60:ce:9d:da:59:3b:c7:ae:d3:b4:73:da:5d:df:
f0:1e:8f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWitakfeKKc2NHFAUlxs5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MjAwMGM0ZjRlYzRhMDNjZDRkMzY1N2UwMWI3MDAzNGVj
MjNiOTcwHhcNMjQxMTIzMDEwMjM5WhcNMjQxMTI0MDEwMjM5WjAzMTEwLwYDVQQD
Eyg3MWI5NDM1OTI5OWQ2NzU4ZjhkZGU2Yjg4NjZhM2QyZWUzY2U1YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIFr3p2KehljcgYM85v2Jw1IlFdP
ChC8R9C+dVWaBd1p973DkaMTwkB4ZSPJYC3d/tukxs04rI6iwfRrTOzfYz13VpV6
lI5bw6iiIVuVhIQF6oQQvzW1i8DrI2vPyMR0mgHqCxMOvR4A3rkvVwxFXG0igFib
hBg0YTw6bv0G9A+tLxSLCg70E+CK5vIaJ9mKYpG6m32MsbqVKj90cd0x2iJXDRjQ
lbdTJ3iU/cwBWPVJueqTpBtzt+FKmKSFALQTabRjqqDffywgFALHFqXNXF3gV37c
gJ+jWItYGylwS8lVolxPLEmz41xzdjVJ62mMpqZ3rhSNQofC8rUjKKQfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG5Q1kpnWdY+N3muIZqPS7jzlvcMB8GA1UdIwQY
MBaAFKQgAMT07EoDzU02V+AbcANOwjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2It
MGYyMmQ4OTY4OWEwLzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNjNkNzctNGZlYS00MTMxLWJlY2ItMGYyMmQ4OTY4OWEw
LzEvcENBQXhQVHNTZ1BOVFRaWDRCdHdBMDdDTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4wIgH4L
Pc/a8bDrSxRs0/md2vo3W4SmYytw7wCLXG22/idDmqtKGdj/FqBupp3z7x6FPNFv
eXM8yYIdXD2aK4iT2Pz/oiTz3ihzouTxEsW77TUycUxGBoPerjScxHHslFjkWap2
pjK6TA+uSBNOU2vbA+NmNrieaWLrccwF44ptMc+K/M/hvr92xPxnyeyWe/Y4kRYv
JO2aaCxDJOy3kDHMqm0XMxIPUwvw1eRHeQmmYoqLx7XPGd9LuLjtLWnIvMSuNF3S
EuibzUJOO1DftEQ4pbad2m/RvnTqZqP5xwWzv2cvjHq1wP9hGCCfN2DOndpZO8eu
07Rz2l3f8B6PXA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:21 2024 by rpki-client on console-fra.rpki-client.org