Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier: Hzp39+zFYQaFulz0iIgq05oqs9qPV2zlONI3N6bbF/I=
Subject key identifier: 29:DE:00:82:F8:F0:E4:3F:60:78:D1:C0:2D:07:62:3B:61:02:F1:C1
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 019355AD434F879B430B7533BAF1E8E9EA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number: 0FEB
Signing time: Fri 22 Nov 2024 21:00:38 +0000
Manifest this update: Fri 22 Nov 2024 21:00:38 +0000
Manifest next update: Sat 23 Nov 2024 21:00:38 +0000
Files and hashes: 1: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: sZsf5rKsQYvQOsKkuu9Xsst7jHVY79tJnFeLN8J+ah4=)
2: kBPXRf28zyiRq98E_wCHdYJQuTI.roa (hash: DQ0DAcXNp5fSgofu+1ekF7JSk7/wTpZAgTJ9w+2Obf8=)
3: zGz0INvPdrTt769D0_hXxTWDTuk.roa (hash: RuOKN0E4t+jkbM9JBe4DhZxW5EKY2n+OBz4QkbAetqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:43:4f:87:9b:43:0b:75:33:ba:f1:e8:e9:ea:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Nov 22 21:00:38 2024 GMT
Not After : Nov 23 21:00:38 2024 GMT
Subject: CN=29de0082f8f0e43f6078d1c02d07623b6102f1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:63:ff:35:99:54:af:81:d4:8c:cc:8d:26:
f8:ad:10:7b:18:6b:3d:79:8f:f4:49:39:7b:52:6a:
93:dd:be:4e:00:f7:7b:ca:50:0a:d2:e0:88:04:75:
60:d5:85:37:56:a6:63:f3:59:5d:41:58:10:1e:a0:
ee:67:63:45:c0:0a:82:c0:d4:c2:69:d7:2d:1d:93:
ae:25:54:a6:d5:3b:ed:de:95:a7:d1:e0:70:27:d6:
0e:68:b6:f6:b7:69:b2:1e:cd:d7:af:cd:3d:8e:c7:
58:eb:76:ca:d9:fe:a4:d9:f3:57:14:ef:ca:d9:05:
c4:21:32:d2:d6:56:23:d2:99:c1:df:c7:05:13:9f:
36:1e:c3:68:99:fd:a9:ab:85:e9:03:e3:dc:6e:57:
fc:5d:3f:3b:24:d6:b9:b5:56:da:a1:c3:33:c4:37:
8e:cf:f8:84:48:69:7b:b4:31:02:29:59:f8:84:6d:
28:eb:19:85:93:39:1d:9f:aa:8a:fe:93:80:0d:3c:
30:58:b5:0a:ab:49:96:bc:2c:10:e0:1f:37:5d:d6:
a6:3f:0e:3f:1b:57:01:b1:5a:bc:58:37:fc:ab:b9:
43:d1:10:64:77:a5:b7:41:18:81:20:ac:f1:53:50:
d9:f2:c2:71:b3:4d:53:79:87:e4:b1:db:ae:5a:93:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:00:82:F8:F0:E4:3F:60:78:D1:C0:2D:07:62:3B:61:02:F1:C1
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:59:80:12:6e:b4:39:07:4e:04:4b:85:88:bb:64:75:26:
c1:2a:5a:90:f7:06:27:5c:d2:f0:87:4d:47:b2:fd:fe:da:d5:
04:4f:a6:0f:a6:0a:07:aa:9f:75:2a:fc:1e:56:bc:e2:34:a1:
ce:57:a0:3a:8c:7b:c5:71:56:18:88:8a:49:01:86:7d:27:05:
7e:a5:87:6e:c2:cc:4a:b3:3b:26:68:3b:52:15:0f:79:65:17:
58:23:bf:ca:e6:f8:26:7e:19:79:64:d9:b8:b9:45:13:d1:be:
52:4b:bd:1d:90:80:01:cf:f5:9d:e2:e0:f2:de:64:87:aa:4c:
59:51:ac:44:dd:e1:d8:9c:a3:24:2a:53:d4:b3:f3:b2:68:a2:
ec:71:14:ff:7c:87:98:05:bc:8c:f3:b5:e4:aa:e6:d9:6e:0e:
00:97:d9:1d:75:1a:6e:03:15:fc:97:42:24:a3:90:39:d2:97:
f8:f8:96:e6:24:99:1f:7a:09:2f:13:96:b0:5c:f9:20:46:d6:
96:ad:06:c3:a0:ce:eb:b1:c9:0a:68:9b:34:79:36:de:15:1c:
e6:e8:bd:8c:a6:7f:4c:91:1b:ea:47:d7:b8:ff:dc:11:64:f9:
af:26:1e:36:ba:b6:d4:60:6b:5b:bc:a1:1b:37:53:01:31:8c:
c6:e0:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:36 2024 by rpki-client on console-ams.rpki-client.org