Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: XeZ59A/kcY6FsrekPSKKcHkGwy0dQ7N1XaZD8wF84po=
Subject key identifier: B7:28:53:A8:0F:A3:35:6C:E5:D0:8D:A9:24:C8:0D:51:D0:E5:2B:76
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 019356F6BE514F4FCE7352CFAEE732360BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 03:00:31 +0000
Manifest this update: Sat 23 Nov 2024 03:00:31 +0000
Manifest next update: Sun 24 Nov 2024 03:00:31 +0000
Files and hashes: 1: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: FstN7wWSeXHFfFwute5pFQhOM304Cr+MT5awIILCKcY=)
2: dDElJ7RP68mS5t8HoYIZBMYw-wY.roa (hash: vz4BlLEhjEvPgAgOz6lLj/CQtWd/qqZ6q6j+JUNFfe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:be:51:4f:4f:ce:73:52:cf:ae:e7:32:36:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Nov 23 03:00:31 2024 GMT
Not After : Nov 24 03:00:31 2024 GMT
Subject: CN=b72853a80fa3356ce5d08da924c80d51d0e52b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:9d:f0:2c:9e:72:d3:91:c4:fb:a3:93:20:
f1:15:bf:c1:f9:69:cb:3d:a5:47:c0:63:ef:ca:28:
a9:1b:0a:29:1d:1e:68:b3:58:dc:f3:17:89:56:3c:
c4:29:27:c6:ef:57:38:dc:da:30:82:ce:d9:aa:66:
40:9e:ec:36:bc:3d:b5:da:b9:97:e1:c9:d4:24:34:
ef:44:ca:13:3f:b7:bd:55:b3:db:f7:8e:09:f1:93:
fa:9b:9f:1f:77:fe:dd:b8:84:82:be:ac:8e:30:25:
45:3b:68:91:d2:78:39:af:61:9a:1e:e8:c5:60:c1:
59:d4:3e:09:f8:41:33:15:25:5c:d3:21:7c:2f:4c:
14:f6:ab:d4:7f:c7:8f:10:ab:4a:da:23:85:a3:45:
a0:9c:13:77:c7:2d:85:50:93:25:17:d1:25:68:79:
d5:cd:fd:72:79:b4:51:a4:2c:a1:16:58:88:26:b9:
4d:9e:1e:f3:e4:e5:e8:2f:f4:b1:41:6f:77:b9:08:
e5:95:0f:b1:6a:d2:d7:de:71:77:77:80:f5:55:30:
f1:4c:f0:d2:f6:05:46:68:0f:dd:63:75:20:af:ec:
5c:fa:b1:93:73:c3:8a:c4:34:fd:e5:43:35:20:00:
f4:c3:70:95:11:5d:2c:9f:14:df:1e:a9:d6:37:ca:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:53:A8:0F:A3:35:6C:E5:D0:8D:A9:24:C8:0D:51:D0:E5:2B:76
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:0a:4b:b9:55:a9:3c:32:c3:71:ca:0c:ef:b2:11:a9:c4:
ec:ab:f4:be:a0:95:4a:d9:75:8e:39:bb:bb:fb:b5:8b:a9:9f:
9a:68:46:65:1e:37:88:fc:ee:b4:6d:04:9e:58:0d:5f:b2:08:
ce:22:64:53:bd:ea:55:48:31:06:6e:68:5c:7a:bc:f3:76:85:
39:94:44:f8:b8:a2:f0:1c:2a:b0:61:1d:83:cf:4c:7f:82:66:
df:88:39:55:a8:03:d4:c9:92:46:26:38:5a:79:dd:e7:17:47:
b9:8a:39:8e:8c:79:69:dc:92:0a:78:98:2b:c4:5c:36:63:cd:
5f:87:1a:f6:c3:73:46:87:07:02:72:65:b7:b4:55:f3:8a:a6:
aa:85:5b:63:cb:0e:47:58:c8:1b:0e:b9:b5:ef:1b:8b:b5:1d:
ad:73:b9:60:60:e8:1e:57:65:d8:19:06:f6:39:13:9e:44:fa:
da:59:07:f1:0c:2d:89:9d:e4:1e:1f:8d:55:46:57:80:b6:24:
55:9d:33:22:07:91:ab:fe:e9:93:6e:57:47:2a:a6:5c:e8:c6:
b8:53:42:c1:b3:f2:39:5c:02:ee:2c:5f:2a:13:8d:1b:06:fe:
91:fe:c5:f5:7f:61:fc:6e:6c:9d:e7:cc:b2:01:89:18:88:87:
b0:b2:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:01 2024 by rpki-client on console-fra.rpki-client.org