Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
File: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft (raw, json)
Hash identifier: CGNEdgxmhTn3h6REgaDSBwqHL5gPuDOmH9Inr+uIFxM=
Subject key identifier: F9:08:56:C5:3D:AB:F6:F9:A9:45:C2:D1:0A:C2:DE:66:34:74:E1:98
Authority key identifier: D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
Certificate issuer: /CN=d709c9021e40af92a208de35024ca70663d734e4
Certificate serial: 01935689EA46411332E7E5DBCF5CA48CB52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 01:01:39 +0000
Manifest this update: Sat 23 Nov 2024 01:01:39 +0000
Manifest next update: Sun 24 Nov 2024 01:01:39 +0000
Files and hashes: 1: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl (hash: H0+qzKFJeMSBIz8KuBjbznYsG75DIRIn047Q9pWKfKU=)
2: s1WBsZmCvpxfAJ1vJJDtQuy-bt0.roa (hash: 37rRFx3/Lv4ZcyFAYCNrObPBAqt1uY6LJHANmBRt9VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:ea:46:41:13:32:e7:e5:db:cf:5c:a4:8c:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d709c9021e40af92a208de35024ca70663d734e4
Validity
Not Before: Nov 23 01:01:39 2024 GMT
Not After : Nov 24 01:01:39 2024 GMT
Subject: CN=f90856c53dabf6f9a945c2d10ac2de663474e198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:30:09:84:fe:e2:ec:34:2d:2b:a7:2e:78:
2f:f4:79:2e:c9:50:a4:4f:fc:08:34:f8:ee:06:f5:
7c:e6:d0:45:11:96:b3:6e:94:13:61:1c:46:4f:76:
c4:80:34:44:8e:0e:86:15:5c:5a:1e:15:1c:36:f5:
f2:92:48:ed:58:b3:c9:68:5a:db:14:2f:84:cc:61:
e7:64:b8:df:42:07:49:af:8d:81:bb:48:15:6c:95:
5f:bc:15:0c:7e:a5:d4:c9:76:75:ec:b0:75:c6:67:
f8:2c:9b:28:63:ff:0b:45:51:b8:18:5d:3d:f5:86:
b3:83:7f:56:61:e1:f8:a8:6d:55:0c:5c:fc:76:f8:
30:66:67:72:5c:76:4b:d6:71:96:c0:88:f6:83:9b:
98:ae:69:c4:2a:ab:e9:49:24:2e:b7:e9:6b:72:c8:
22:8d:91:d3:9d:86:ad:36:0d:fa:5b:a2:2d:b9:c8:
2a:73:ae:5a:d2:13:cc:19:dd:8c:9e:6d:58:66:bc:
ec:36:7e:c1:7f:46:05:4c:9a:c6:5f:2a:b0:2e:83:
65:2b:32:ae:18:72:33:ac:24:48:9c:61:71:78:c2:
fe:30:db:3d:cd:e6:44:77:e0:2a:43:5b:c0:99:98:
1b:a9:a8:61:82:4a:67:0e:ba:80:17:3e:4d:91:de:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:56:C5:3D:AB:F6:F9:A9:45:C2:D1:0A:C2:DE:66:34:74:E1:98
X509v3 Authority Key Identifier:
keyid:D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0f:6a:9e:fa:1a:7f:22:c1:5c:d9:d6:e5:64:31:a5:2e:ce:
23:6a:2c:f0:49:88:95:27:d5:7d:4b:48:64:f8:a3:a2:7e:e1:
19:76:3a:d3:ff:2c:3d:dc:fb:58:b2:39:3c:a9:2e:e1:13:ef:
65:f5:8d:59:a4:0f:af:55:b5:9c:d8:09:58:10:37:b1:ed:2b:
aa:23:97:fc:ac:21:16:66:30:9d:55:ca:ff:fd:61:a6:e8:a4:
6a:f3:78:82:f1:ea:0e:d7:ae:9b:98:cc:56:36:e8:ab:a0:2b:
20:6f:ca:13:4a:b4:33:4f:cb:0f:0a:45:45:50:43:06:2a:d2:
8e:42:7a:88:8c:31:84:71:a4:ce:a0:b9:eb:67:9a:56:18:98:
9d:b1:f5:ed:1c:c8:dc:a8:d8:d6:1f:64:12:ff:c3:a8:14:ab:
f1:ca:76:08:9a:27:be:00:3b:81:62:65:bf:94:37:0d:99:a2:
cf:41:72:f6:41:0c:10:1f:71:7d:d1:05:00:b4:91:a0:d9:0d:
0b:4a:ed:36:6e:02:0f:94:06:ad:f0:a9:19:c5:46:63:05:9f:
77:bf:a3:41:20:0a:04:f4:0a:a7:20:c0:25:51:20:7c:b8:aa:
a3:71:a8:46:fa:1e:69:7d:53:72:a7:b2:08:49:eb:d7:d1:75:
39:88:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:07 2024 by rpki-client on console-ams.rpki-client.org