Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: YpAPwQq5urO2dKD7YTpxyMy+2XYOaXy2EoLS99HhhNY=
Subject key identifier: 17:14:E9:C5:52:27:58:EC:27:0E:CC:66:8D:5B:3F:BE:29:58:2E:E4
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 019353BED0A429EC1B4622F13FFCDD069903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 12B6
Signing time: Fri 22 Nov 2024 12:00:34 +0000
Manifest this update: Fri 22 Nov 2024 12:00:34 +0000
Manifest next update: Sat 23 Nov 2024 12:00:34 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: 2qGxAROYEqa0t/Bmp9Sy7jxRVzIul1eo9wQTjAXOy+0=)
2: _9zahHIznNBBCUQcTrRh3_q8MWg.roa (hash: rgXqbM1PPOvYNMAiQDxczru/poPbczjN9cZ9zMH9I6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:d0:a4:29:ec:1b:46:22:f1:3f:fc:dd:06:99:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Nov 22 12:00:34 2024 GMT
Not After : Nov 23 12:00:34 2024 GMT
Subject: CN=1714e9c5522758ec270ecc668d5b3fbe29582ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:60:0c:b4:d6:19:05:ef:c7:d6:a3:51:5f:
08:da:75:c6:74:e3:54:5d:f0:e5:d8:b8:31:c5:1e:
81:8b:f1:02:b7:32:1a:36:6a:43:72:a0:c7:73:9f:
d2:2a:d8:9a:aa:f8:6d:62:5f:b4:2e:68:33:fa:95:
d2:6d:67:ef:d1:c7:82:4a:97:6f:0e:65:25:9c:cb:
09:2e:2b:fa:65:75:b7:0c:79:d1:4a:33:33:a3:0a:
a9:03:b8:47:f6:9d:57:04:1c:ba:fe:32:71:ab:a9:
90:73:d6:0c:2e:be:94:f2:5c:ca:fa:bf:a1:e3:3b:
ad:c4:56:6f:f6:2d:58:fc:e7:f8:d2:9a:81:ac:c1:
aa:62:34:95:20:93:5a:a5:64:d1:5d:5f:b1:f4:85:
77:30:f3:ec:74:1e:de:66:51:5f:22:87:45:14:02:
ed:86:1d:95:06:0d:23:b1:0e:84:50:10:c3:f0:91:
b3:da:8c:0a:59:c4:20:07:1e:1e:e4:a8:89:5b:cc:
69:f7:f4:ed:c7:9c:81:7e:d1:f3:78:8a:32:2d:77:
10:ab:3a:5a:9f:19:2f:08:be:09:0a:45:5c:c7:b7:
a3:1d:01:21:b5:25:90:c0:47:4f:1f:61:91:b6:aa:
b1:ac:03:16:ae:ee:45:fa:f7:57:b3:61:af:64:23:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:E9:C5:52:27:58:EC:27:0E:CC:66:8D:5B:3F:BE:29:58:2E:E4
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:23:44:6b:29:28:41:14:cb:74:47:2d:29:a9:92:f4:65:
3b:89:df:15:35:fb:7d:a6:09:d6:25:e9:e8:57:19:9a:fc:4a:
5a:47:a4:d4:5d:22:79:d3:0f:80:bf:7b:62:e5:22:ce:57:19:
63:69:e9:da:d5:cc:19:48:44:c3:1f:14:4f:91:b0:50:6b:43:
f0:84:c8:40:40:c8:0c:81:f8:98:8a:b4:71:c2:b9:af:12:85:
c0:a3:cd:3f:ec:e3:ab:52:7e:ab:ee:cb:20:8c:42:92:7a:ab:
eb:0c:96:cc:93:91:9f:8a:9c:b3:d5:b7:c3:13:6c:b0:fb:5a:
8d:c5:4c:ce:d3:60:0c:86:c3:f1:ea:e1:3e:aa:ca:98:a5:0f:
20:07:d2:b3:2f:19:50:5a:88:a6:d8:07:56:1a:d2:a3:e2:f4:
15:97:79:70:60:2b:d8:fa:d0:24:f5:6f:ea:b4:46:11:d6:4e:
c1:00:b5:ba:be:4e:02:b4:b8:41:97:44:b3:f8:0e:9f:3d:df:
19:cc:00:78:1c:1c:04:16:9f:3a:e7:46:a5:8b:35:fe:57:67:
3c:1d:b0:39:6d:97:18:eb:04:b4:b7:e3:eb:cf:20:9f:5d:e7:
bb:46:91:f4:af:2b:47:5a:ea:ac:ec:25:99:61:2f:b3:ad:30:
96:e0:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:27 2024 by rpki-client on console-fra.rpki-client.org