Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: wbeU4hA7ozqbzAJsCLD4QKuvgdwxwu615CFjyNawre0=
Subject key identifier: 58:34:F6:C8:93:D2:01:58:82:6E:8F:62:2D:EA:B9:8C:C4:EE:43:D8
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 0193561AD35F9CF6C2222D438D1277CAD4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 1252
Signing time: Fri 22 Nov 2024 23:00:18 +0000
Manifest this update: Fri 22 Nov 2024 23:00:18 +0000
Manifest next update: Sat 23 Nov 2024 23:00:18 +0000
Files and hashes: 1: KcCU5xo7DnXoSAcYBjJ2ued1knA.roa (hash: TFjQ15MzhldLSvK1ROaK1lpt0fZPXiU4DMZL1NEt3pU=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 68NowVFFFfEbsPR3aHV169Niw77u9xhBSvW6eE0xvIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:d3:5f:9c:f6:c2:22:2d:43:8d:12:77:ca:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Nov 22 23:00:18 2024 GMT
Not After : Nov 23 23:00:18 2024 GMT
Subject: CN=5834f6c893d20158826e8f622deab98cc4ee43d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:37:bf:b8:f0:a1:c0:08:96:d1:b5:18:55:
dd:99:47:ab:f4:94:1b:fc:19:fe:0f:06:1e:9f:f5:
f5:31:9b:08:a3:6d:db:28:63:92:54:7a:f5:48:81:
a9:ef:71:22:21:24:7b:90:01:45:47:44:b9:16:d8:
79:70:b1:8f:81:d7:cc:f7:02:35:b3:76:ab:d3:0e:
56:7d:bf:68:94:5e:93:62:48:b6:5e:2a:cf:02:f1:
86:d6:53:20:e5:a7:34:a5:fc:93:67:47:b4:9a:7e:
e8:06:1b:fd:e2:31:3f:34:e8:c7:06:e3:46:89:42:
05:2e:8e:2e:69:88:81:42:c4:65:df:cc:57:7f:5f:
c7:85:30:55:ab:31:11:88:9b:49:ed:5e:8f:8b:1b:
b4:6c:00:37:5e:26:39:17:df:01:ce:e9:3c:44:0b:
b9:93:16:a4:1c:fe:dd:ba:d9:ce:9c:00:fe:f0:06:
a5:e4:3b:e6:73:2c:9f:b9:fc:d8:63:27:7f:b8:5a:
f2:95:91:93:13:04:08:c4:fd:15:01:eb:90:da:6b:
3b:56:4d:b4:fa:78:81:d5:cf:c8:5e:1f:4c:f4:7f:
5b:6d:e3:2a:fe:08:30:eb:24:48:42:22:ef:01:39:
8f:16:3c:ae:79:a6:8b:c1:74:bd:38:1a:92:f4:c9:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:34:F6:C8:93:D2:01:58:82:6E:8F:62:2D:EA:B9:8C:C4:EE:43:D8
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:2b:32:67:67:97:c0:16:bb:0b:00:e6:7b:cc:d3:fb:31:
b9:60:0b:59:a3:e8:7d:d4:c1:25:44:c8:d0:0d:89:5a:25:00:
bf:39:d3:88:55:60:12:20:2d:58:71:28:c0:12:13:76:ff:92:
05:f3:a5:b7:21:93:a2:cf:de:0c:13:54:2c:e9:4b:e1:e0:30:
5c:c2:f3:79:23:55:db:80:9a:b2:6c:e4:6b:86:35:21:5e:86:
14:83:6c:e0:ab:c9:39:10:b5:1e:81:0c:92:7c:10:e9:3a:1b:
be:19:49:d1:63:13:12:f6:be:8c:c7:d6:ec:9c:20:a3:5e:ac:
c0:de:c0:96:df:20:b9:7b:6d:cb:b0:ca:4d:1e:24:41:98:5b:
e5:a8:3f:4b:64:8d:f7:f5:4c:10:05:24:47:f2:da:12:ba:fe:
a3:b2:9b:bc:9a:cd:e8:cb:7e:c0:bd:65:6c:77:df:42:1d:39:
74:26:ea:a0:03:a9:2f:18:bf:20:c2:b5:4d:9c:73:ec:5d:59:
a5:5b:ed:86:d8:a4:a1:46:5d:f7:ee:27:da:11:b6:c5:6e:6d:
fd:52:19:e1:ea:73:27:e9:1b:b9:92:3e:e0:fc:0d:1f:b7:34:
f1:96:d2:40:76:80:f4:30:67:23:29:1f:90:44:98:30:c7:f1:
56:12:d1:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGtNfnPbCIi1DjRJ3ytTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2
NWMwNWEwHhcNMjQxMTIyMjMwMDE4WhcNMjQxMTIzMjMwMDE4WjAzMTEwLwYDVQQD
Eyg1ODM0ZjZjODkzZDIwMTU4ODI2ZThmNjIyZGVhYjk4Y2M0ZWU0M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGs3v7jwocAIltG1GFXdmUer9JQb
/Bn+DwYen/X1MZsIo23bKGOSVHr1SIGp73EiISR7kAFFR0S5Fth5cLGPgdfM9wI1
s3ar0w5Wfb9olF6TYki2XirPAvGG1lMg5ac0pfyTZ0e0mn7oBhv94jE/NOjHBuNG
iUIFLo4uaYiBQsRl38xXf1/HhTBVqzERiJtJ7V6Pixu0bAA3XiY5F98Bzuk8RAu5
kxakHP7dutnOnAD+8Aal5DvmcyyfufzYYyd/uFrylZGTEwQIxP0VAeuQ2ms7Vk20
+niB1c/IXh9M9H9bbeMq/ggw6yRIQiLvATmPFjyueaaLwXS9OBqS9MkIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg09siT0gFYgm6PYi3quYzE7kPYMB8GA1UdIwQY
MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt
N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj
LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvYrMmdn
l8AWuwsA5nvM0/sxuWALWaPofdTBJUTI0A2JWiUAvznTiFVgEiAtWHEowBITdv+S
BfOltyGTos/eDBNULOlL4eAwXMLzeSNV24Casmzka4Y1IV6GFINs4KvJORC1HoEM
knwQ6TobvhlJ0WMTEva+jMfW7Jwgo16swN7Alt8guXtty7DKTR4kQZhb5ag/S2SN
9/VMEAUkR/LaErr+o7KbvJrN6Mt+wL1lbHffQh05dCbqoAOpLxi/IMK1TZxz7F1Z
pVvthtikoUZd9+4n2hG2xW5t/VIZ4epzJ+kbuZI+4PwNH7c08ZbSQHaA9DBnIykf
kESYMMfxVhLRuA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:54 2024 by rpki-client on console-ams.rpki-client.org