Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier: w29Sm2gSou/abrp6x2yBJQTYgbM5EiqUiFY12dYRk8g=
Subject key identifier: FC:11:47:84:64:CC:CB:06:7F:E4:68:B3:D3:46:D5:AC:4D:0D:AA:3B
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 01935A656D13A9663D3EB1C7D9A028CC446D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number: 1263
Signing time: Sat 23 Nov 2024 19:00:16 +0000
Manifest this update: Sat 23 Nov 2024 19:00:16 +0000
Manifest next update: Sun 24 Nov 2024 19:00:16 +0000
Files and hashes: 1: 6UZ0DPDC4K1xAEDV1VWgDCfS6so.roa (hash: yJDEJuskkbinwYCj07HEM273TTc8pQFJbuoQz0oTfpY=)
2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: hee6SBuk6kygZtEKlkDwcPlyrbJUu9GgNezNMWsOjxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:65:6d:13:a9:66:3d:3e:b1:c7:d9:a0:28:cc:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Nov 23 19:00:16 2024 GMT
Not After : Nov 24 19:00:16 2024 GMT
Subject: CN=fc11478464cccb067fe468b3d346d5ac4d0daa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:76:80:5d:bd:29:c3:08:db:b4:20:37:f2:
57:55:b3:1f:8d:df:8b:4b:4e:b3:72:7d:b1:04:33:
27:13:d8:2a:1d:1b:2f:ca:b3:9b:32:56:c6:b3:8c:
fc:45:e9:b1:dc:24:a6:cb:5e:37:bf:42:8c:8d:9f:
d6:c4:a7:94:8a:6e:b3:b0:72:da:b2:68:8d:34:85:
56:32:57:ae:bc:99:6d:39:7d:5e:e8:af:84:51:9c:
e1:cc:bc:cd:db:cf:84:19:e2:58:81:a4:3d:84:ec:
7c:2c:e0:c5:53:0c:4f:f6:23:71:52:44:bf:cf:9e:
87:b5:e6:7e:91:c0:f8:ea:54:b1:01:b8:71:4e:a6:
cd:2e:06:84:20:44:91:c8:48:61:7c:36:af:fb:41:
94:53:fd:a4:8e:74:d0:44:6a:b4:ba:26:62:32:9b:
fc:0e:a4:40:32:1c:ab:65:b8:11:46:87:7f:b8:04:
2e:72:0e:e3:13:16:f7:38:ed:97:aa:c3:90:2e:b4:
fe:42:71:43:5b:32:d6:7f:34:cf:0b:b5:60:55:93:
02:ac:5d:cb:11:25:bf:81:21:b9:55:10:bb:3e:17:
09:b2:39:d3:a2:d4:ea:b1:e6:6b:13:d8:2f:50:d5:
17:88:84:0b:af:40:4c:c9:eb:e3:3f:1e:57:56:83:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:11:47:84:64:CC:CB:06:7F:E4:68:B3:D3:46:D5:AC:4D:0D:AA:3B
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:06:10:e7:43:cf:17:0f:51:5e:28:97:20:a2:ae:bd:52:
c9:01:c5:f6:af:77:08:b2:79:9c:cb:bc:16:f4:40:a3:65:89:
0c:1b:40:f2:0c:95:4c:d9:bb:4d:6c:55:7b:5b:7c:71:c3:c1:
8a:31:39:8d:41:17:0d:15:e7:12:3a:2d:3e:d3:25:d8:70:0b:
f2:ae:24:47:78:cb:20:77:c2:81:22:6b:cc:ee:65:e3:a8:76:
b0:4e:af:b2:a3:fc:25:80:24:7c:8e:3e:f9:79:d1:a6:17:12:
ec:a6:e8:de:97:d5:05:a7:a8:63:12:cd:e1:6a:dc:90:23:66:
bd:4c:e7:8b:dc:e1:82:73:23:69:62:81:77:ee:95:9d:6c:13:
0f:cd:57:0f:bc:e5:00:8e:d7:7c:9d:95:47:6c:3a:bd:12:03:
b2:a3:23:be:24:b1:c5:55:be:54:ff:7e:c9:b5:50:43:55:37:
9b:2a:a1:50:9a:1a:a0:6f:89:0b:86:8e:a4:4b:21:dd:4d:f6:
ca:4b:67:df:c8:26:ec:e9:d6:c4:19:d7:3b:d0:d8:04:ba:3f:
6d:87:c0:56:92:9d:5e:79:b1:8b:cc:c0:c3:fd:e2:9b:b4:29:
f4:87:1a:5f:79:5b:64:3e:7c:88:6a:05:97:c2:ec:d2:50:1e:
48:13:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:45 2024 by rpki-client on console-fra.rpki-client.org