Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
File: i5-syiLMDGDiN6eyBBaiYARaXGg.mft (raw, json)
Hash identifier: DAloR7BCw22Ac8whvXNPuk+7PAVtxfB5FFRY5LTSpJ8=
Subject key identifier: AA:F6:2A:F6:D3:D2:9E:F7:77:ED:B8:BD:3A:63:87:79:86:3C:46:2A
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Certificate issuer: /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial: 019353F5B2293D778233B4876333CF5085DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
Manifest number: 0BB3
Signing time: Fri 22 Nov 2024 13:00:30 +0000
Manifest this update: Fri 22 Nov 2024 13:00:30 +0000
Manifest next update: Sat 23 Nov 2024 13:00:30 +0000
Files and hashes: 1: XtVuvxsrI19gYgViRbMw08tZC-k.roa (hash: P/mcj+c7Q2Sf+lS9z42rgCjeKPTGb/tFEkDDph3CJe0=)
2: i5-syiLMDGDiN6eyBBaiYARaXGg.crl (hash: 2o3LxHht1mOrY/7nPynnpMP3OD1vF4fzlpmByXjATzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f5:b2:29:3d:77:82:33:b4:87:63:33:cf:50:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Validity
Not Before: Nov 22 13:00:30 2024 GMT
Not After : Nov 23 13:00:30 2024 GMT
Subject: CN=aaf62af6d3d29ef777edb8bd3a638779863c462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:43:4f:56:b3:ef:98:3b:2e:3f:c9:cb:1e:
81:94:59:d4:76:fa:7a:e9:de:60:f1:23:b8:a6:01:
b3:f5:30:03:02:2a:28:df:93:5d:93:14:e7:95:c8:
38:54:4d:32:ee:51:cb:05:04:6b:e9:db:81:81:7a:
ca:70:75:9a:e3:a0:19:a2:6f:96:73:cf:8c:40:56:
40:e9:40:54:14:3d:08:0c:f9:a9:c3:35:e0:f7:86:
cb:7b:f6:b7:24:95:28:f8:4b:35:07:c4:61:c5:a8:
27:5e:b5:dc:c0:1f:33:31:f5:ae:36:91:92:cc:9e:
17:bb:17:f3:cb:c8:07:98:6b:88:1f:5c:12:75:3e:
99:0d:91:be:61:16:43:75:1c:84:ab:ec:96:7a:a8:
f7:9c:fe:b8:5c:71:51:d7:72:b1:14:69:37:af:76:
4e:0c:84:08:93:c8:d9:a4:72:42:28:b6:6a:dc:63:
e0:1e:70:47:63:ea:cd:a9:fe:b2:d3:07:68:2b:74:
cc:8f:1f:91:cb:ac:4d:d2:27:08:95:43:af:64:10:
39:be:74:50:94:ba:cc:17:1c:2a:12:7c:89:64:82:
c5:6c:c1:a2:bd:47:12:c9:88:33:4c:e7:b6:2a:98:
60:be:75:8b:84:84:5a:58:f6:82:10:1c:4e:a8:93:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F6:2A:F6:D3:D2:9E:F7:77:ED:B8:BD:3A:63:87:79:86:3C:46:2A
X509v3 Authority Key Identifier:
keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:5a:1c:a5:ab:9a:18:71:ea:a2:61:b6:20:d4:dd:fd:ef:
8a:f1:fd:ef:61:07:05:a5:b9:5a:db:d7:62:46:6e:05:ba:54:
2f:7e:aa:f0:4c:4b:dd:16:d8:18:8e:4f:6a:a9:66:36:8c:ff:
23:eb:e2:99:1f:a7:4e:95:c1:61:17:ad:d3:da:17:0b:b8:b9:
50:aa:55:2d:32:3d:b1:96:06:7f:2d:14:ec:00:83:35:7a:70:
27:98:34:04:c4:48:c3:c6:38:c6:ba:14:74:66:8a:51:bf:3d:
9c:26:ca:31:3b:95:ef:73:f1:0b:e4:2f:5d:67:6d:94:99:27:
bf:b1:5e:cd:c3:3d:39:03:ce:ab:ec:58:57:2d:21:78:0f:6a:
e8:1d:bd:b4:e4:a3:8a:a4:3c:7f:41:35:2a:0b:a8:48:19:9d:
96:6b:4a:da:d5:4f:39:61:13:02:f3:0e:36:8c:cd:a8:c7:ea:
d4:26:ef:78:5c:32:90:5b:f8:d4:58:ca:83:46:ae:47:a1:48:
d7:29:e2:61:7d:b9:ce:16:57:08:f3:b3:c6:4f:11:80:62:0b:
72:a3:d7:29:74:76:16:64:24:77:86:1b:e7:0b:8b:af:88:b1:
92:0f:fd:db:0b:3f:c3:22:b3:6c:34:1a:b9:32:9b:8e:b9:e7:
0c:91:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:54 2024 by rpki-client on console-ams.rpki-client.org