Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: IagB/6lfp5vvc1zAEim3+svQ7I3SqRx4HN3IiopDqO4=
Subject key identifier: C6:17:17:E7:5E:08:F3:2F:D1:AA:9D:FE:0B:12:2A:2C:5F:20:14:FD
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0193568A8F97D4BC5E492818BC61DEB7A1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:21 +0000
Manifest this update: Sat 23 Nov 2024 01:02:21 +0000
Manifest next update: Sun 24 Nov 2024 01:02:21 +0000
Files and hashes: 1: MX0_cNa5QGsfYtHm8N_PsnfKcK0.roa (hash: 0xEiXwpypDowIAwaMgRsUBq+/RHgv4BQbe2Fa2390u8=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: KM177oxNSCeMFHolNLJqLhPU9lFaYVuvsax07rVZaI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:8f:97:d4:bc:5e:49:28:18:bc:61:de:b7:a1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Nov 23 01:02:21 2024 GMT
Not After : Nov 24 01:02:21 2024 GMT
Subject: CN=c61717e75e08f32fd1aa9dfe0b122a2c5f2014fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:77:84:c8:b3:4b:2e:c3:dd:4d:4d:1f:26:
bf:dc:3e:e2:0a:64:d0:a4:12:13:1e:c8:76:21:67:
9f:07:df:df:e9:49:c0:90:e8:8a:a7:bb:d1:db:eb:
b0:c7:b2:39:5c:ed:89:57:7f:28:d1:48:9a:05:80:
03:22:51:66:d4:ab:30:5a:21:d5:c8:16:f5:93:37:
44:ef:11:fb:ce:85:e1:9b:f6:a8:c5:36:1c:e6:ce:
d9:c5:67:32:19:79:11:0c:4a:40:03:40:15:a8:eb:
7b:c7:37:23:0a:d0:a2:e5:76:99:f9:64:01:9b:df:
03:42:2b:ce:27:89:f6:02:a0:14:5c:98:fe:e3:19:
e9:86:c2:5d:fb:bc:84:07:fd:2a:08:03:16:c9:21:
e5:a2:f2:7b:70:72:c0:ab:67:76:81:2c:e7:e1:bd:
c8:90:58:b8:1b:2a:bb:6d:53:a0:57:8e:90:d3:a0:
aa:a7:94:e0:b2:eb:e4:af:ef:d0:85:c8:90:6f:8a:
a0:f1:31:0e:1b:cf:78:13:2e:74:26:ac:c2:ff:f6:
c0:45:af:fa:01:85:74:c3:6c:22:84:7b:96:8d:ce:
60:28:76:d5:6f:4d:6d:aa:b8:69:e1:2f:ed:5f:7e:
f5:8a:15:5a:15:24:f3:5e:cc:de:31:2d:1f:bf:cd:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:17:E7:5E:08:F3:2F:D1:AA:9D:FE:0B:12:2A:2C:5F:20:14:FD
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:56:4c:cd:7f:db:fb:ad:ca:1d:ca:c7:47:ce:39:b5:c3:fd:
4d:e5:e2:5d:ae:02:aa:60:88:9c:51:3e:1e:65:23:b5:31:f9:
02:ba:70:82:28:64:72:eb:e2:38:2a:f7:7f:f6:ff:43:1a:81:
3f:31:6e:6b:fc:05:02:53:8f:d9:15:4c:4e:fd:b5:09:e8:47:
4b:73:4d:92:ca:b6:1c:c2:cd:bc:7c:f3:65:84:c6:1f:a7:2b:
4a:dd:68:d8:e2:36:1a:a6:8c:e0:2b:bc:80:73:f2:e6:eb:b2:
3c:44:01:39:18:96:fd:71:69:ba:4e:72:a0:7b:1b:14:97:4d:
f3:09:13:e6:9d:71:90:69:b6:0e:05:42:f9:62:38:1a:a1:af:
3b:8c:33:c9:9e:5f:df:e1:8b:14:dc:2c:ec:8c:b5:10:dc:8b:
94:7f:52:a6:66:6d:fb:6e:24:a1:38:2e:b7:e3:95:af:46:a8:
6f:8d:a1:cf:5d:25:a5:85:c0:80:2b:e3:ba:6c:18:ed:f6:de:
65:4d:ff:83:99:f4:63:7d:e1:2c:7b:1f:73:98:ef:85:dc:e7:
39:f1:46:3f:dc:87:7f:58:7c:fc:80:92:2f:c7:51:cf:a1:4f:
25:13:6f:80:c1:74:ec:2d:60:c3:f2:e8:e9:ca:67:3e:40:2e:
ce:dd:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:45 2024 by rpki-client on console-fra.rpki-client.org