Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: OP+caGbWG9lQj++Q2NIQiMW1vPk5F+YmgUPOgqVkJE8=
Subject key identifier: 66:6A:F6:20:0C:70:2F:CA:5A:42:57:C3:60:90:44:74:BB:33:A8:9D
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019352AE0D986F1C8054E05D26B8515BCDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 0E70
Signing time: Fri 22 Nov 2024 07:02:38 +0000
Manifest this update: Fri 22 Nov 2024 07:02:38 +0000
Manifest next update: Sat 23 Nov 2024 07:02:38 +0000
Files and hashes: 1: HNVXsKAHIc5PErIvpg7BQwXWQ8o.roa (hash: C2TQG2PuvKXKQXo4iDDNaUqRR+KZNYxl8SunmUVNJRw=)
2: MwDNe3rLHRg6OUdlloenNnJbsVE.roa (hash: 9T5PGPICoFYtLQC7R4giuRcMSiGcWgrQD96f0oOsoVo=)
3: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: 1MpYiugDZsZIkyTvWcE0XClvp0DD710GIXyVlKk3esM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:0d:98:6f:1c:80:54:e0:5d:26:b8:51:5b:cd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Nov 22 07:02:38 2024 GMT
Not After : Nov 23 07:02:38 2024 GMT
Subject: CN=666af6200c702fca5a4257c360904474bb33a89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:24:eb:b0:cc:55:8f:cd:93:ee:8d:91:9e:
74:1c:80:a8:31:cc:06:65:30:65:21:39:d7:6d:c9:
ca:5c:4b:fc:9a:ca:64:b3:25:cd:e1:d4:0f:d0:83:
54:c6:ae:be:4c:f5:ab:44:e1:61:d5:4b:be:d5:2f:
15:23:6b:fd:f3:b8:b3:01:3e:b9:37:f7:20:e5:1c:
b2:47:f8:14:b7:30:44:51:aa:ae:f9:4a:6a:fa:15:
43:f4:a0:72:dc:be:d7:1a:1b:d6:67:a3:93:10:0b:
1f:57:3a:2c:ed:ed:f0:9b:fa:e4:e0:4a:f9:93:67:
bd:e5:de:05:dc:4d:29:1d:cc:02:da:0f:c4:f6:91:
3e:c2:81:bd:be:17:c8:3d:fc:a0:89:98:d1:b7:f0:
c8:cc:6d:63:18:b0:be:d3:4f:91:44:01:5b:2f:fa:
11:c7:63:24:98:87:48:bd:1e:fe:70:a8:9a:24:4c:
f4:5a:d8:f1:43:23:98:0e:ba:45:6c:a3:c9:ec:bf:
9f:c3:ef:0d:3b:c9:bd:87:e2:2c:96:63:e9:b1:82:
a5:ed:c1:30:f2:b1:ee:c7:b1:ff:7c:7a:a2:6f:8e:
a8:df:d7:a9:39:24:a1:e7:ab:63:17:dd:fe:74:8d:
f5:83:f5:20:2a:4a:90:98:26:49:b5:a4:e9:b3:83:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:F6:20:0C:70:2F:CA:5A:42:57:C3:60:90:44:74:BB:33:A8:9D
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:46:1f:9b:89:22:ea:4e:65:e8:7f:70:5d:08:50:a9:af:
6b:53:09:9a:91:31:27:97:d8:21:0b:1c:cf:ba:d7:10:8c:6f:
af:71:01:e2:5c:c1:47:0a:a1:4d:23:66:a6:82:51:35:0d:c7:
8b:e1:d6:84:5c:1e:ba:db:c7:fa:4b:c1:67:ec:da:d9:d4:cc:
8c:1b:c4:b6:87:a6:15:3a:b6:56:e1:55:58:08:7e:7f:d1:80:
31:4f:4f:23:91:f8:67:e5:4e:0b:9c:9d:10:58:b0:2a:fa:24:
5c:92:66:fb:51:47:ed:92:49:a7:99:dc:5d:61:92:1e:ba:de:
70:69:d1:5d:c5:9f:23:a4:ea:86:fe:90:e1:17:b6:c3:18:02:
d0:5b:92:5e:f3:fd:e5:26:68:cf:86:85:28:e1:f3:08:75:96:
4d:d7:b6:1f:9b:a7:b2:c6:11:f9:0d:f1:e3:c2:fa:56:26:80:
b7:2f:d8:9e:8f:4f:87:47:1a:db:6c:14:22:95:38:67:8d:a5:
c9:75:36:00:d3:80:99:f7:51:19:0c:f6:9b:64:50:8f:b0:45:
5e:75:31:d1:cf:3e:72:9c:e1:f6:14:59:26:22:5b:80:54:10:
48:27:40:68:cd:8f:eb:e5:6d:b4:ed:00:ff:8d:31:45:f9:21:
d2:6a:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:59 2024 by rpki-client on console-fra.rpki-client.org