Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: IgGEQZBbRayP29Lq59kUiv2taKlvJ+gBHkVCXGivkos=
Subject key identifier: 1B:2B:9A:05:56:3F:55:63:63:3D:8C:1E:EC:A0:F4:97:D0:AF:AA:E4
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 01935B413A72C88777933380D3A5697600B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0844
Signing time: Sat 23 Nov 2024 23:00:21 +0000
Manifest this update: Sat 23 Nov 2024 23:00:21 +0000
Manifest next update: Sun 24 Nov 2024 23:00:21 +0000
Files and hashes: 1: 6M64KGEnDKpkvFXsRb9OJ7bzvgE.roa (hash: nFQqMPni1JWxJ2lsdXi2HlvknLtWIBYUOBydsqQWTH4=)
2: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: Y9o015kAn3ziZMyEahoMo+SXldjIw7N4fHRGXXMvf70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:41:3a:72:c8:87:77:93:33:80:d3:a5:69:76:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Nov 23 23:00:21 2024 GMT
Not After : Nov 24 23:00:21 2024 GMT
Subject: CN=1b2b9a05563f5563633d8c1eeca0f497d0afaae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:4a:9c:2d:93:b0:92:56:0d:47:71:35:4b:
cc:9a:44:37:4b:6b:a3:0d:0d:c9:b1:b4:ac:f2:ed:
96:81:23:e2:6a:4b:97:18:72:84:6a:33:4c:e3:8e:
3b:8d:9b:05:ca:7f:d0:1a:89:f3:ef:66:4d:29:61:
38:38:13:1d:f9:1c:fc:3f:ff:c8:01:36:54:91:a1:
cf:20:df:53:09:13:6d:1d:ef:93:ae:97:97:14:65:
76:c7:a7:00:1f:1c:80:31:f0:bb:80:b6:ff:83:c9:
68:6d:ed:67:76:f8:03:da:29:ff:2b:9a:66:ef:ce:
df:c4:5d:f5:ca:02:7d:a5:42:70:f1:91:dd:47:29:
37:0b:2b:e2:1f:97:25:f0:f5:45:4b:9a:d9:ed:b3:
36:04:b7:e3:95:d6:1d:c5:94:2c:7b:da:84:96:27:
0f:eb:e8:7a:07:9e:de:e5:4a:e0:d3:89:bd:9f:33:
e5:f6:b1:d5:e8:99:6c:c0:5c:de:5d:b9:22:02:2f:
55:eb:67:b2:9c:15:ca:92:a8:3a:aa:ee:80:36:23:
a8:5d:b8:41:d9:64:a5:53:9e:fc:be:d8:07:c3:7e:
61:9e:04:15:20:28:4a:3d:ce:51:df:4a:13:1b:14:
b0:03:ae:29:1b:93:d4:9c:36:10:9e:f2:47:1d:61:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:9A:05:56:3F:55:63:63:3D:8C:1E:EC:A0:F4:97:D0:AF:AA:E4
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7b:f2:f1:97:9e:00:98:2a:f3:69:11:db:57:f3:26:bd:0f:
bb:c9:0c:6d:55:07:40:89:fe:6b:e5:3a:35:8b:15:77:a6:07:
d8:72:f3:1d:fc:46:58:f4:6e:81:62:8d:d2:3d:2e:f4:65:a2:
c9:56:76:a0:61:4c:a7:aa:bf:b7:4c:d2:c8:c3:46:17:d1:fd:
ff:92:4a:ff:9e:d7:7d:c5:bd:2e:0f:5f:0f:7c:44:77:e0:b0:
c2:78:5b:45:73:17:78:d8:a9:1c:ec:bf:5b:9a:47:22:1f:e2:
ad:d4:19:e9:22:0b:5e:d9:83:6a:33:85:19:85:91:43:36:4f:
9f:3a:df:34:2c:cc:1f:6a:39:58:73:7f:69:ae:54:65:c5:cc:
b5:53:1f:dd:c0:aa:bf:bf:26:32:fb:8a:ff:b5:6a:3f:d7:d9:
9d:68:53:85:09:bb:f4:24:b5:96:f6:2c:b7:74:1e:30:f5:bb:
61:7d:56:f0:6c:3c:73:97:56:8c:a3:02:04:e2:8f:c1:63:2a:
36:e1:cb:8f:d9:ab:b6:42:c7:d7:d7:c0:41:98:d4:82:45:23:
a7:2e:05:24:b4:02:0a:3d:0c:26:5e:ca:74:e9:f9:ec:e4:44:
57:28:de:a7:ef:29:69:86:95:4a:a6:36:36:55:fb:ea:df:84:
9c:ad:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:20:53 2024 by rpki-client on console-ams.rpki-client.org