Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: NkP2N0gHoxB0AVLD2FKXfHOHtTC05cOd+3T35Ck8XMw=
Subject key identifier: C9:A5:7D:6E:C7:31:D9:68:BE:F0:5B:88:42:D4:72:54:2C:10:09:E0
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 0193568AE4C67F2FEEEDB63C044E4F3D6A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0AF7
Signing time: Sat 23 Nov 2024 01:02:43 +0000
Manifest this update: Sat 23 Nov 2024 01:02:43 +0000
Manifest next update: Sun 24 Nov 2024 01:02:43 +0000
Files and hashes: 1: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: 6q323kzr1m09Po64Vk3PMcEvmgav9QlxARUiD6Eqyfs=)
2: zRlkIuBBfn2JVC4WFddMi11lBhQ.roa (hash: KSJ4zxMRlmihvn9QmrOwmiszZc+NXwH3MSds83+FFM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:e4:c6:7f:2f:ee:ed:b6:3c:04:4e:4f:3d:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Nov 23 01:02:43 2024 GMT
Not After : Nov 24 01:02:43 2024 GMT
Subject: CN=c9a57d6ec731d968bef05b8842d472542c1009e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:ac:c6:ae:73:f0:2b:24:bc:32:29:61:f9:
74:57:81:51:9a:20:4e:26:04:dd:93:c2:5c:43:57:
ba:45:ac:7e:23:c3:d5:2f:7b:d9:56:b8:15:a0:82:
66:89:61:11:4e:6a:16:35:e5:5f:bc:fe:b5:f9:90:
40:3e:d2:ff:87:a6:05:6d:47:7a:4f:80:43:9a:cc:
d7:34:32:ac:9a:46:07:60:f9:d9:25:fa:82:21:a2:
b2:a7:3a:a6:18:c9:ce:6a:9f:52:a6:f9:07:6c:8d:
c3:6c:39:9a:c8:8f:95:91:07:96:79:be:cb:d2:75:
40:fd:49:f4:97:96:1f:b4:14:72:7d:c8:df:84:b1:
2c:2e:38:6e:f1:67:49:a1:9e:33:3b:ce:31:da:ec:
21:d6:0d:75:e0:d3:f2:c9:f3:94:da:84:8c:d3:cd:
e7:c2:2f:b7:c3:c9:11:7c:08:58:72:38:46:9c:d4:
e9:b9:4d:7c:a7:49:7c:98:a8:8a:dd:07:9d:76:84:
20:bc:59:2d:8b:a6:80:81:cc:99:92:47:75:7d:f0:
52:7c:ec:13:90:bc:a6:1c:33:88:3f:34:c6:26:09:
32:8e:45:74:83:77:82:af:53:df:96:1d:6b:ff:93:
68:63:02:40:48:f7:b0:a6:b7:1e:68:46:20:eb:20:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:7D:6E:C7:31:D9:68:BE:F0:5B:88:42:D4:72:54:2C:10:09:E0
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:35:b7:d0:4e:e0:d5:16:db:bd:71:1f:7f:c4:1a:d4:15:
a8:8f:4e:7d:b9:fd:99:76:71:58:6e:fc:d7:ab:fb:9d:21:e2:
9d:9f:56:57:4b:9e:f8:cd:94:ab:94:77:d5:d2:4b:9f:79:49:
fa:1b:49:74:5d:e8:1c:96:2f:dc:6f:0a:9f:18:92:9d:39:4b:
92:51:e8:99:a9:63:c9:f9:da:63:c6:23:1e:fc:77:f3:bf:03:
5e:de:b6:d5:0b:4e:6a:24:9c:26:5b:02:fb:8e:89:98:46:61:
34:71:05:17:7c:a7:7d:0e:41:83:5e:71:32:d7:a2:4f:5a:5f:
04:c1:90:11:7d:0e:7d:a2:8d:86:3f:a8:63:ab:93:a9:37:9d:
f3:87:c2:96:c3:36:c4:5c:78:5c:f9:62:87:19:ed:49:6b:ba:
86:6d:47:88:ff:4a:20:04:be:3d:7a:f4:98:ac:0f:66:fe:1f:
56:02:45:ac:31:02:4d:22:ef:80:97:87:ba:9b:24:28:1e:08:
19:78:71:5e:1e:af:e5:f6:80:0d:5c:ae:11:ef:98:8e:85:5f:
5d:41:2a:af:28:14:4a:b1:f6:b8:bd:cb:fc:34:28:6c:28:f3:
0a:af:d7:65:d3:0f:b6:75:b2:9c:73:6e:df:86:08:42:93:05:
c2:72:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:37 2024 by rpki-client on console-fra.rpki-client.org