Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: TOZ5caQDfeROl2s7dZIbhez3GnIQmvxqWHTYA7Z9+Q8=
Subject key identifier: 2A:3D:F8:70:C5:1F:AF:35:2E:36:40:37:41:9E:A7:B7:FF:F0:BD:2A
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 0193584048DE4FF0171BEBAA586445204E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0847
Signing time: Sat 23 Nov 2024 09:00:28 +0000
Manifest this update: Sat 23 Nov 2024 09:00:28 +0000
Manifest next update: Sun 24 Nov 2024 09:00:28 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: f+ReSslbkV7fXCvQ+naZodKjKyPpER2wM/ljJArH+1A=)
2: tvlSB3DK__oshCBLvo2bgKPJ8jE.roa (hash: Wd8ivzkSiuJgGAb5dbmmBsQf8Tqnq+k/F5ilIG2jsVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:48:de:4f:f0:17:1b:eb:aa:58:64:45:20:4e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Nov 23 09:00:28 2024 GMT
Not After : Nov 24 09:00:28 2024 GMT
Subject: CN=2a3df870c51faf352e364037419ea7b7fff0bd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:c8:45:d8:ab:a5:67:cf:95:9c:84:02:a2:
9d:50:65:15:84:09:4c:15:d5:51:3e:3f:5a:e4:ab:
eb:df:b3:7d:3b:f7:b2:20:7e:d6:fc:c1:54:22:2d:
64:33:14:21:b8:19:99:70:c9:d5:79:22:24:0c:86:
ea:bd:0f:b8:40:c3:01:47:59:da:9f:d6:90:4d:ab:
47:26:27:4d:bc:31:d6:b5:74:11:50:9b:63:ab:e9:
f8:19:f7:09:a2:38:71:ce:a5:ba:93:a2:53:8e:04:
bb:64:4a:66:ff:1b:55:b7:66:ae:05:ba:ca:99:79:
48:e8:a9:1e:f0:49:65:f5:05:8e:04:a7:b7:c3:d2:
66:65:26:fc:88:10:e9:88:48:59:4c:7b:30:da:2b:
8b:cc:8d:67:80:2a:65:b9:9f:98:15:20:a7:9e:da:
d5:08:91:0d:8e:1c:ad:a9:70:55:e4:eb:68:e5:df:
66:17:f3:45:8b:96:7c:70:ff:4c:cc:78:e0:56:bf:
12:d6:48:fd:55:2b:bc:98:15:71:16:77:ae:73:60:
5b:99:8c:5c:bd:5b:45:48:2c:26:82:c3:ed:fd:55:
85:54:59:bc:ee:d1:fc:d9:ee:ec:60:92:89:4e:8d:
e9:ab:ca:64:1d:94:29:17:a0:36:eb:52:68:f5:4b:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3D:F8:70:C5:1F:AF:35:2E:36:40:37:41:9E:A7:B7:FF:F0:BD:2A
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:e6:b6:8a:40:32:b8:ca:45:b0:93:6c:6d:6e:65:26:cc:
f1:2a:6e:ef:78:9f:24:e4:91:f9:f1:93:48:66:d7:47:c8:7a:
c7:87:da:a9:8f:73:46:f1:b0:56:67:b7:f3:c5:7f:83:27:06:
de:6e:a4:d8:77:ed:16:7e:19:15:da:8b:9c:50:e4:d3:b6:80:
6d:3a:a4:40:d8:ca:e8:19:c5:d0:b6:3a:6f:10:99:4d:4d:b0:
df:9f:f9:fe:76:f0:0a:eb:4d:16:40:7f:90:a0:d8:55:80:7e:
d9:7d:38:ae:a4:5e:16:7c:35:ae:00:e8:57:b3:81:06:d1:55:
03:d0:30:ab:50:55:9f:61:f3:e0:22:39:24:af:51:c4:fa:d9:
6e:86:e5:64:0b:0e:14:5b:25:02:ff:d6:5d:1f:e6:b7:ab:cc:
56:91:55:91:09:f1:f0:2b:62:8a:ad:92:4e:ad:31:00:78:26:
aa:d6:b9:9c:c7:33:40:ee:4d:62:d9:50:2b:21:38:18:a2:22:
25:e0:fd:ba:8a:c0:b0:48:4d:f3:5e:3d:55:6c:da:45:74:cf:
90:93:ed:7b:b5:25:1f:1e:65:dc:5a:64:0c:cf:a7:3f:5f:9b:
f3:51:ff:48:66:84:ac:7e:f5:90:5f:21:30:5e:10:8e:92:98:
bb:ee:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:34 2024 by rpki-client on console-fra.rpki-client.org