Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: GlXAcSWVRlX/LPoxwH9DSuV4396y7v1pAiUSSyt9Xc4=
Subject key identifier: BA:B3:65:EF:54:11:B0:27:46:CF:83:F2:4B:3E:60:08:EF:EC:F3:60
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 0193598A535BE514DA988670CCDEAD855C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 04B5
Signing time: Sat 23 Nov 2024 15:00:57 +0000
Manifest this update: Sat 23 Nov 2024 15:00:57 +0000
Manifest next update: Sun 24 Nov 2024 15:00:57 +0000
Files and hashes: 1: 6EZrHt5YGKXHui6g1a9qUyv97Jk.roa (hash: kr6wWx+knCC/B563f5+ittByBspRq+BztRw6rvg9aeg=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: Xw4SZIxKAULg79AdMy6KCOeO2mvdS5yy+UHwK+Zdads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:8a:53:5b:e5:14:da:98:86:70:cc:de:ad:85:5c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Nov 23 15:00:57 2024 GMT
Not After : Nov 24 15:00:57 2024 GMT
Subject: CN=bab365ef5411b02746cf83f24b3e6008efecf360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:8a:d6:ee:6f:62:78:0a:a5:ab:7d:f3:f4:
2c:9e:8b:5a:a9:ca:df:60:b0:96:d4:f9:0c:6c:3b:
8e:09:6d:29:65:1c:33:6c:2a:9c:69:ee:56:33:76:
41:8e:6a:5c:d9:8d:63:06:7b:a6:6b:5d:91:57:91:
47:76:ce:3c:e5:46:29:ca:a7:ec:79:5a:a3:68:40:
7f:0d:e8:a1:b0:29:e6:53:e6:a6:94:8f:58:a6:3d:
73:e6:02:fd:89:a9:71:10:e6:ed:ae:02:74:4c:6a:
84:a5:72:9e:07:f5:6a:1c:57:e7:b0:8f:9a:3c:bf:
0e:e4:d2:c3:4e:6b:19:c5:88:8e:40:86:e1:df:b6:
e6:b6:e6:5d:d5:1f:04:01:bb:69:a9:44:55:7b:04:
d4:f5:41:10:2b:c0:ae:8c:53:7c:6d:af:57:b2:20:
fe:e3:3b:7c:14:ce:da:6e:9b:19:1a:2e:7e:b7:28:
32:de:d6:b7:cf:2f:42:0c:14:05:68:b1:fc:00:49:
6b:c5:d3:c2:7a:37:10:f5:d6:5d:1f:09:dd:26:79:
0a:cf:15:12:4a:2a:51:4c:c6:ac:48:8a:6c:49:70:
6b:b1:55:07:04:c0:39:81:c7:b0:c1:21:91:a4:c0:
17:f2:93:ba:c3:94:33:63:79:3e:c7:f5:45:1d:19:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:65:EF:54:11:B0:27:46:CF:83:F2:4B:3E:60:08:EF:EC:F3:60
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:e8:2f:0d:57:04:93:a7:5f:c3:03:81:0b:66:e5:ea:94:
b9:48:dd:7a:b4:23:ba:18:69:25:ea:ca:dc:97:c9:ec:11:cd:
e6:33:4c:ff:0f:09:1f:8c:7f:ac:35:b2:6a:62:74:a9:4b:38:
5e:e8:a6:1d:16:2b:27:ba:7a:99:b3:9d:a4:25:72:a7:76:93:
54:ee:b0:c5:7c:55:13:c8:3d:87:aa:f4:18:d3:3d:a1:2a:e7:
e0:c9:7d:4c:ab:83:17:0a:86:6e:3b:92:ce:f2:a5:f0:dc:8a:
c4:74:99:a3:fa:2d:95:ab:c9:f5:50:a7:84:ab:d8:91:8d:9e:
24:8b:8a:83:a0:b2:16:9b:21:bb:57:d3:2b:20:fe:f1:07:62:
a6:b8:22:2b:2e:98:eb:bc:2d:4d:c3:1b:38:78:36:e3:e6:50:
2f:cf:16:72:b7:a9:1a:63:f2:1d:9f:85:7c:fa:b4:d2:a1:ef:
75:fe:e5:37:a3:87:c6:5d:a3:67:32:22:8d:0b:f5:3e:db:46:
52:48:24:68:1f:0e:df:8b:b0:d8:ad:07:bf:4b:d5:28:cf:eb:
7a:5e:14:e6:46:83:75:bf:f6:22:bc:dd:b4:a9:66:02:ee:5c:
c3:dc:47:30:0c:74:49:cc:62:02:03:36:36:5d:3e:6a:61:7a:
9a:b5:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:57:11 2024 by rpki-client on console-ams.rpki-client.org