Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: VHlQaoQl9qWnILo82k0RlueBBeEMrbEscGsWW5Wq1wc=
Subject key identifier: 45:2D:0D:72:35:FC:2B:7E:64:3A:24:FE:20:BB:DC:1B:89:69:96:53
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0193579B80A226C8E43F2D8EF0DC8F4785A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0A0F
Signing time: Sat 23 Nov 2024 06:00:28 +0000
Manifest this update: Sat 23 Nov 2024 06:00:28 +0000
Manifest next update: Sun 24 Nov 2024 06:00:28 +0000
Files and hashes: 1: _kEwtdTOGivmdoorfmmxgmx8Esw.roa (hash: uvTj6Klz9rm1/NXY4UowO0yf2rrMKZkpHMMz84l39eA=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: ydT0lX5uH0FqXtLoJYz5x07vEtTpx5EORAaOk4GA/Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:80:a2:26:c8:e4:3f:2d:8e:f0:dc:8f:47:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Nov 23 06:00:28 2024 GMT
Not After : Nov 24 06:00:28 2024 GMT
Subject: CN=452d0d7235fc2b7e643a24fe20bbdc1b89699653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:13:67:8b:0c:e2:8c:a4:5b:02:a6:a0:7e:
90:ce:69:c0:59:0b:0c:8f:f4:f5:27:40:b3:6e:ae:
e4:12:5a:d8:6a:2b:4c:c6:07:09:42:6e:a5:6e:78:
9c:d5:0e:ff:8a:8b:2e:39:4a:a1:82:2a:a2:c3:0d:
93:19:e3:81:88:7e:71:b7:5c:21:26:b9:9a:0e:34:
dc:58:33:cd:3b:46:11:b1:54:29:18:38:c4:3d:ce:
cd:38:a5:48:b7:89:f6:cd:cb:48:31:09:67:eb:a6:
bd:ca:a9:12:97:7a:a2:f8:ed:97:e7:1d:37:10:94:
8c:d9:7c:0a:28:c8:64:d7:6e:2f:19:17:06:76:9e:
aa:5a:f0:e2:46:62:fd:a7:b3:e8:6b:a4:f2:a6:cc:
ba:42:f7:e4:6a:06:3f:7d:60:79:bb:ff:0f:34:ac:
bf:d9:35:c7:0c:f3:d2:5d:5b:98:66:4d:32:b7:85:
a7:b6:16:6f:a6:5c:08:1f:2d:43:7a:47:6d:9c:21:
e0:3a:4a:3e:dd:e5:0e:23:91:10:f9:a5:3d:b0:7b:
e1:9f:40:60:5e:b0:34:a1:42:77:a0:af:95:20:ec:
cb:95:d2:ad:fb:83:13:09:f8:77:58:e2:d9:49:85:
52:b1:a2:51:76:a4:2b:53:60:ca:8d:3e:fc:0b:78:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:0D:72:35:FC:2B:7E:64:3A:24:FE:20:BB:DC:1B:89:69:96:53
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3c:fa:65:54:5c:52:60:7a:66:fa:8c:30:32:dd:07:65:2c:
b2:12:19:2f:47:05:bf:8b:fa:61:b9:b6:fd:20:2c:38:89:88:
24:74:64:04:6b:14:1c:04:a1:21:fc:22:b4:e1:df:e4:0a:cb:
91:8e:82:a4:0d:22:fa:30:d8:53:cd:5c:e6:b3:ad:9b:31:db:
a5:05:4a:ee:0d:35:c3:2d:01:1e:24:a0:a9:5a:a1:b8:d3:8f:
d6:00:35:59:14:7d:ff:b1:f9:af:63:97:03:50:7f:af:a0:7a:
5a:71:db:2c:ef:1d:fd:f5:fa:5c:08:f0:60:c3:35:5e:1e:9c:
f4:06:50:aa:7f:3a:94:cb:e6:cd:47:fd:eb:78:b3:4b:8b:69:
54:6f:87:42:94:b1:1b:a0:76:11:63:13:93:60:dd:4a:38:91:
ff:29:3e:51:40:4e:ad:89:54:11:3c:11:b3:06:2a:20:2b:52:
28:e2:2f:5c:ff:f9:b0:66:d3:45:74:6f:f6:e9:6f:33:3d:7f:
ec:74:c5:fb:5f:de:ab:c7:69:da:49:08:e5:31:b2:18:17:1c:
2d:ea:9b:bf:b9:0f:d3:a0:51:57:41:5e:48:9d:2d:87:f4:ac:
48:6f:82:00:32:16:8c:44:15:c9:a9:23:0d:72:c5:0a:8a:58:
60:b7:c7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm4CiJsjkPy2O8NyPR4WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDFmNjczYzZiMGZmODgzNWVhMDJmYWVkYmE1YjQ5Y2Yx
NDIyNGUwHhcNMjQxMTIzMDYwMDI4WhcNMjQxMTI0MDYwMDI4WjAzMTEwLwYDVQQD
Eyg0NTJkMGQ3MjM1ZmMyYjdlNjQzYTI0ZmUyMGJiZGMxYjg5Njk5NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp8TZ4sM4oykWwKmoH6QzmnAWQsM
j/T1J0Czbq7kElrYaitMxgcJQm6lbnic1Q7/iosuOUqhgiqiww2TGeOBiH5xt1wh
JrmaDjTcWDPNO0YRsVQpGDjEPc7NOKVIt4n2zctIMQln66a9yqkSl3qi+O2X5x03
EJSM2XwKKMhk124vGRcGdp6qWvDiRmL9p7Poa6Typsy6QvfkagY/fWB5u/8PNKy/
2TXHDPPSXVuYZk0yt4WnthZvplwIHy1DekdtnCHgOko+3eUOI5EQ+aU9sHvhn0Bg
XrA0oUJ3oK+VIOzLldKt+4MTCfh3WOLZSYVSsaJRdqQrU2DKjT78C3hCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUtDXI1/Ct+ZDok/iC73BuJaZZTMB8GA1UdIwQY
MBaAFIkB9nPGsP+INeoC+u26W0nPFCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMt
NTNjNGQ1NzYyZDFhLzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMtNTNjNGQ1NzYyZDFh
LzEvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzz6ZVRc
UmB6ZvqMMDLdB2UsshIZL0cFv4v6Ybm2/SAsOImIJHRkBGsUHAShIfwitOHf5ArL
kY6CpA0i+jDYU81c5rOtmzHbpQVK7g01wy0BHiSgqVqhuNOP1gA1WRR9/7H5r2OX
A1B/r6B6WnHbLO8d/fX6XAjwYMM1Xh6c9AZQqn86lMvmzUf963izS4tpVG+HQpSx
G6B2EWMTk2DdSjiR/yk+UUBOrYlUETwRswYqICtSKOIvXP/5sGbTRXRv9ulvMz1/
7HTF+1/eq8dp2kkI5TGyGBccLeqbv7kP06BRV0FeSJ0th/SsSG+CADIWjEQVyakj
DXLFCopYYLfHpA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:32 2024 by rpki-client on console-fra.rpki-client.org