Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: 02Tl3VF+7TjuElMrRPh4Zx+I4LEre9xHVJ/7qD9PZ5M=
Subject key identifier: 84:CE:14:21:05:5D:B8:5A:89:AD:57:DE:33:2C:79:B5:E9:BC:69:EE
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019359535D614BF3D1D6F884CEC801AAE6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0457
Signing time: Sat 23 Nov 2024 14:00:55 +0000
Manifest this update: Sat 23 Nov 2024 14:00:55 +0000
Manifest next update: Sun 24 Nov 2024 14:00:55 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: cEgKCZAg7iE/LuzBV/cCmBvbXb4fvJVS1bXrB1A4Qts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:5d:61:4b:f3:d1:d6:f8:84:ce:c8:01:aa:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Nov 23 14:00:55 2024 GMT
Not After : Nov 24 14:00:55 2024 GMT
Subject: CN=84ce1421055db85a89ad57de332c79b5e9bc69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:fa:1c:e4:5d:c8:0e:6a:52:55:9e:e3:c2:
b8:23:50:ad:d1:b6:4f:97:25:bc:7d:c2:e0:74:b8:
30:1f:44:62:10:81:05:9a:ec:ff:4a:94:3e:7c:6a:
d3:a6:3f:64:58:f7:3e:63:c9:35:3c:37:08:77:1c:
20:5e:0b:1b:23:be:ef:27:6f:db:50:06:51:57:dd:
07:b7:52:4a:c6:a3:1b:30:32:d5:dc:56:52:83:bc:
85:e6:3d:66:44:24:e8:7e:ea:97:dd:e7:25:21:22:
bd:be:79:39:5a:11:ce:64:83:dd:82:23:18:78:0c:
bf:97:61:a8:35:e4:58:8d:f4:41:61:ae:e5:75:0c:
9b:9b:7b:0f:29:33:e4:41:00:ef:d3:d6:a5:96:4b:
b2:16:0f:b6:2e:53:30:d3:e6:bb:47:d9:84:85:c7:
49:53:53:62:8d:20:79:64:0d:69:e1:95:d7:af:2b:
c2:53:ad:76:e6:c4:73:16:29:64:ea:ef:04:11:c5:
76:ea:7f:68:a6:2f:07:5f:24:6e:4a:00:8e:56:a2:
e5:c9:ab:47:f7:4e:f9:92:90:d3:dc:33:f6:b2:46:
40:37:09:de:5c:3d:9d:87:53:9e:f8:42:6a:89:c9:
0a:70:19:14:e4:c7:b0:1e:aa:ab:ad:5d:50:a4:b5:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:14:21:05:5D:B8:5A:89:AD:57:DE:33:2C:79:B5:E9:BC:69:EE
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ec:e4:1f:ae:ae:4e:f7:35:37:0b:3f:b1:c6:f7:7f:a0:85:
d3:0d:6d:74:be:29:49:49:e9:ba:d7:44:24:a4:8c:88:f0:4e:
45:b0:57:2a:f5:a6:ef:7b:28:1b:f0:de:cf:9c:ec:07:31:78:
d9:29:54:eb:ec:af:a4:25:b7:5b:b6:b1:10:c4:cf:16:0c:05:
30:34:dc:79:71:78:94:ae:93:3f:22:b3:a4:e8:fc:02:f1:91:
0f:ce:f7:e5:52:76:21:28:ea:cc:d3:c2:d0:bf:22:5d:0f:02:
b8:02:52:40:bf:2d:48:45:ab:b7:f1:56:97:e4:a7:98:ca:2e:
57:0d:13:de:55:5a:a0:c9:17:74:71:7f:b2:3c:fd:4b:93:8b:
ea:22:ad:41:02:55:d6:bb:5c:a8:08:1b:c6:dd:b0:c6:07:af:
f1:95:97:7d:75:b3:27:65:a9:05:2f:01:f2:04:86:2a:fc:f6:
61:15:4a:b6:98:7d:ed:20:82:39:a6:9a:85:0c:e9:41:0f:a7:
b4:d0:57:89:dc:54:81:2a:06:e3:1b:0a:f9:e2:ea:56:e1:2f:
12:aa:9e:85:97:36:6b:95:21:bf:92:c4:ad:7d:b6:ba:29:19:
22:db:03:01:02:0b:2c:3e:ce:ea:c6:08:db:58:b6:44:37:d1:
72:67:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:32 2024 by rpki-client on console-fra.rpki-client.org