Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: 4hCaBz1Pb0/ipYzifTacm8bHJ1YfjS5g0JDH6qwdEiE=
Subject key identifier: A2:94:30:EC:DA:30:10:BA:DC:5C:D0:EC:8F:96:71:F2:14:9D:A5:91
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 0193549C1D99A91E6E8C6D95E05B868A92E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 12D6
Signing time: Fri 22 Nov 2024 16:02:17 +0000
Manifest this update: Fri 22 Nov 2024 16:02:17 +0000
Manifest next update: Sat 23 Nov 2024 16:02:17 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: M3be5HTphqq4ds76+4EVWkVjdzFEviAfaP3iPT3plFo=)
2: aTqIfhHYtCUd0jXuRoeYM0hQ4DQ.roa (hash: 6wLHa1xWl8HABpjamyuy5yqri41pn94ZmAPdMXiyO+E=)
3: tV4yKV1KjsiwEU4zPqOuE-ebLHI.roa (hash: 5tPNgMabqFm37Dd3PTiHvabBlXD69/WkPnjMwyChUHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:1d:99:a9:1e:6e:8c:6d:95:e0:5b:86:8a:92:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Nov 22 16:02:17 2024 GMT
Not After : Nov 23 16:02:17 2024 GMT
Subject: CN=a29430ecda3010badc5cd0ec8f9671f2149da591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:5c:4a:18:1d:9b:d4:20:be:fb:d5:76:27:
30:9e:30:09:b0:25:6b:14:fe:17:5e:a8:0c:62:ad:
88:e3:de:31:ce:4b:8c:f6:b4:30:08:5d:0e:05:05:
a4:1f:cd:91:7b:4e:df:31:4a:fc:a0:d3:db:c1:ad:
43:2f:86:ca:21:82:08:83:9e:38:fa:50:73:58:e1:
e3:4d:24:2e:97:94:e9:f9:a8:29:03:03:b2:ec:d9:
6d:8d:a0:d3:03:c4:f5:59:7e:a4:b0:13:f3:4f:f8:
2d:4b:d3:78:69:16:37:cf:b5:e2:f1:5f:fc:f9:1f:
9d:72:d2:a9:8c:fe:82:55:bc:a4:dd:d7:d9:39:eb:
22:9d:82:21:75:e1:90:9d:0f:aa:b0:73:99:9e:c6:
0e:73:de:3c:ac:50:10:cf:be:a5:f5:5e:56:48:4b:
c1:ac:7a:2a:52:73:75:16:fd:1b:61:aa:0f:e5:ae:
31:49:0f:90:6f:d4:98:bc:14:b7:29:a2:c0:e4:91:
eb:d7:18:2a:8e:5f:b9:00:af:22:a4:16:15:f9:1e:
95:e6:7c:a3:e4:e2:2d:07:2e:ba:a3:56:3e:cd:ad:
db:56:b0:4b:a1:49:f2:0c:3b:02:44:27:22:71:07:
f1:12:7b:1a:32:25:4c:7c:d0:a7:24:b7:cb:6d:28:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:30:EC:DA:30:10:BA:DC:5C:D0:EC:8F:96:71:F2:14:9D:A5:91
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f2:e8:05:0b:a6:63:52:05:9f:e2:b9:35:dd:a0:26:40:e4:
89:ed:e4:e3:96:db:f1:fe:23:48:62:b5:54:91:7c:f3:d4:c5:
82:d7:74:96:31:d4:a8:ac:e3:70:14:c8:6b:3b:d9:5b:4f:f8:
bb:cf:5f:1e:f4:72:98:34:9f:74:a3:54:9b:00:ef:3c:47:00:
14:54:31:1a:fe:be:d9:9f:e1:8e:7a:e1:98:8f:5c:da:2e:84:
73:cf:7f:49:6d:f3:e2:c1:1b:bf:b2:5e:4a:a5:0f:8a:46:e1:
70:f7:ed:45:14:f8:1d:20:d2:f5:06:f3:0b:bf:d1:c0:e6:75:
7b:21:80:ef:1a:c1:2a:d2:44:5b:e6:36:ea:52:a1:b0:df:f6:
86:3f:e6:7c:5d:b9:77:12:92:5f:99:72:4a:2a:3e:0f:e4:30:
9b:4c:cf:d7:29:b9:a8:95:ff:3b:68:fd:18:92:11:16:a4:20:
5b:b9:6d:af:b0:43:f5:33:93:00:83:5f:38:a9:7a:95:43:02:
0f:84:37:3f:7e:33:ca:6e:83:a4:96:91:6b:6b:46:a2:7c:dd:
e7:ac:e7:69:6d:b7:11:7f:2b:3c:e3:17:d7:67:1c:01:06:a4:
70:36:0b:af:ba:e6:fe:7d:0a:12:1f:86:28:2b:82:04:47:f9:
1c:45:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:39 2024 by rpki-client on console-ams.rpki-client.org