Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: xRargwJvqlVe2/Re6aeeorrZLW5UP9MSTcHX68OPTOY=
Subject key identifier: 32:62:CA:98:AE:CF:74:5A:92:03:0B:68:3D:08:8D:97:7A:9F:56:B7
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019355AD56D5250B12034B1148DE1E449A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1304
Signing time: Fri 22 Nov 2024 21:00:43 +0000
Manifest this update: Fri 22 Nov 2024 21:00:43 +0000
Manifest next update: Sat 23 Nov 2024 21:00:43 +0000
Files and hashes: 1: BJR7OJMV8vL-C9jNWzX3xRkhXfs.roa (hash: 98rnOPi5nkLPd0ZRZ5kaMyd5vtAKBFC0rEffdIZu/eo=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: gJsJ1DQenNe95MU4Y+NFbNWOcAxtYZQdEHOlchfiInw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:56:d5:25:0b:12:03:4b:11:48:de:1e:44:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Nov 22 21:00:43 2024 GMT
Not After : Nov 23 21:00:43 2024 GMT
Subject: CN=3262ca98aecf745a92030b683d088d977a9f56b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:45:96:49:96:11:fe:a2:96:2b:ec:38:ec:
d4:3f:d9:1a:dd:11:99:31:2d:b9:f7:c3:a2:db:04:
29:6a:89:30:4d:24:c4:b5:a7:3f:82:d6:dd:42:bd:
3d:4e:a6:67:e6:eb:35:4e:1a:08:6b:ea:58:b3:09:
e3:fd:d6:a9:a7:56:ac:22:9e:b9:78:65:e8:53:5b:
cd:60:e0:d0:0c:18:07:96:28:84:b3:fa:81:a7:5c:
28:76:ce:8d:27:9c:d0:01:02:95:02:4d:fd:5f:56:
cb:6c:3d:10:b1:55:55:d0:a6:b6:61:85:b6:e5:d1:
59:bb:64:9b:53:75:50:16:db:7b:4a:a2:7c:93:f6:
8e:26:ad:0d:ae:df:ed:bc:90:6e:8d:67:31:01:36:
7e:fd:e3:05:4e:e2:9f:03:74:aa:c6:7e:d0:77:82:
b5:8a:f3:4b:87:5e:44:e0:84:8b:15:00:60:9a:5a:
22:6d:b6:f6:86:4c:ed:e6:bd:d6:50:50:db:ff:bb:
6c:65:b0:b2:b1:48:a9:c6:f2:e4:8b:49:79:78:32:
ba:c9:44:7d:ad:64:43:59:72:15:1d:90:b4:96:be:
92:28:4a:4b:3c:2f:02:cf:a2:e1:e3:79:0c:a0:a3:
9d:2d:b5:3d:c4:fb:be:d8:78:f8:58:8b:47:30:62:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:CA:98:AE:CF:74:5A:92:03:0B:68:3D:08:8D:97:7A:9F:56:B7
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6d:3d:c2:8e:01:fa:b6:4e:d3:db:10:f8:24:a3:c6:e6:32:
e9:38:f9:17:c3:18:1f:66:b0:1c:13:c1:57:f9:97:21:b6:9f:
6f:5b:b4:cf:4a:31:c1:cf:f7:43:97:e6:44:2d:39:ff:fa:ee:
02:fb:63:77:d7:ad:ed:2f:a4:6f:56:23:9b:ff:19:54:65:e0:
52:8c:2e:af:c4:2c:b5:e3:8f:9d:2f:cd:1d:fd:49:76:56:aa:
ee:54:32:66:22:b0:ed:ce:5b:e0:ff:c2:98:3f:41:85:51:d3:
ba:ea:88:e2:04:ec:ec:fa:6b:66:01:63:22:19:c4:62:c6:e6:
06:d5:85:15:90:40:61:ab:f8:67:3a:e8:d4:ee:4e:08:07:d9:
85:80:2a:3b:dd:b7:c8:95:68:88:8d:ba:9c:fa:15:fa:ce:15:
ed:ba:f5:8c:df:78:99:69:f0:57:e6:eb:a9:42:51:3d:aa:6e:
b8:97:4c:30:b4:7c:54:e3:4f:d6:1f:d4:15:22:16:4a:67:54:
ee:6f:c5:0f:f5:e0:36:6a:c2:f3:b7:3a:ab:f4:a1:cd:2a:bd:
21:e4:d9:2e:6b:19:af:45:89:4d:04:9d:f8:c8:71:ee:63:c1:
a3:20:e8:5d:be:53:10:45:4b:7a:b7:c6:3f:55:21:f2:7d:c4:
80:47:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:51 2024 by rpki-client on console-fra.rpki-client.org