Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: ehNfAhh3k7myS2bRhkW32Syfo/fZVZpl5mq9twIq+ew=
Subject key identifier: 44:70:E8:64:CD:FB:7B:29:D2:20:1B:69:7F:5D:D6:52:27:E4:91:9E
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01936AB4B4528DA28CBBCC7D658058B9837D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0ACA
Signing time: Tue 26 Nov 2024 23:00:47 +0000
Manifest this update: Tue 26 Nov 2024 23:00:47 +0000
Manifest next update: Wed 27 Nov 2024 23:00:47 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: C2y/y8v/FrkvsvAHrF7i1EEqDsUhnkX9GGS5w0veZq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b4:52:8d:a2:8c:bb:cc:7d:65:80:58:b9:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Nov 26 23:00:47 2024 GMT
Not After : Nov 27 23:00:47 2024 GMT
Subject: CN=4470e864cdfb7b29d2201b697f5dd65227e4919e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:be:17:33:a5:13:3e:be:93:2c:21:06:3b:
1c:97:23:0d:df:6b:6a:5f:1b:28:9c:96:32:16:a3:
9f:b8:59:ba:fc:2b:65:f3:1d:90:aa:1c:d7:5b:54:
84:e1:d8:79:56:ad:bb:85:3d:3a:48:0a:0b:11:5d:
67:cd:aa:26:7a:67:9c:4c:a8:50:23:b7:8a:52:cb:
40:8f:c7:50:5e:24:33:a3:2a:11:41:7d:69:31:80:
c6:e7:a2:21:fc:b5:10:b2:90:76:c8:f9:37:5b:1a:
c6:94:78:13:a8:1f:06:60:8c:77:d1:2b:b9:be:f9:
4b:90:1c:17:0e:2f:a7:0d:23:4e:f7:23:13:4d:8d:
e3:7e:ee:fa:1c:bf:6b:12:28:8e:72:65:84:d5:de:
d4:58:f8:4b:19:21:32:7f:18:7b:61:11:cb:14:e1:
4a:61:4b:a2:1c:fc:86:65:02:3e:c8:75:69:03:61:
e6:36:85:a3:cb:46:38:5f:4d:ae:64:0e:fd:b8:2c:
5d:f1:34:92:a8:43:8b:32:6b:92:91:ab:e0:06:c9:
5d:8b:66:0c:e9:4f:44:17:0a:3c:0c:97:c7:67:be:
0a:32:f8:7f:69:0d:11:27:f2:10:35:7f:51:e2:8c:
87:8e:d4:f5:e4:54:d6:af:12:e0:1f:d1:89:85:a7:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:E8:64:CD:FB:7B:29:D2:20:1B:69:7F:5D:D6:52:27:E4:91:9E
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8f:b2:b6:58:9e:8d:48:33:4a:9e:86:e4:5f:c0:76:ba:8d:
98:ed:27:76:20:39:b8:b9:1e:b2:a3:f4:73:85:65:9e:99:d3:
77:1e:f8:a3:fc:d9:82:66:53:73:d7:c5:b8:ad:87:e0:c9:01:
af:b5:9a:15:20:d8:97:51:1a:1e:93:f0:ff:f7:3f:f3:11:28:
5e:e1:36:38:bc:b3:63:dd:dd:e7:05:34:50:3c:69:20:92:57:
3a:d5:39:05:df:b8:af:f4:07:15:ac:f1:fb:30:c2:73:14:73:
17:99:23:d5:19:80:cc:e2:14:c4:fa:ad:71:9d:95:9f:05:82:
b4:63:e7:bb:61:fa:13:c1:66:3a:77:f6:3e:06:73:bd:f1:57:
7b:6d:f6:48:08:a5:ea:12:6f:7c:7e:ff:28:47:09:1f:36:82:
03:c1:6c:6a:2a:2b:3a:c9:2f:31:49:1b:42:48:1b:e3:3a:25:
d8:75:ea:aa:32:30:c3:b2:32:cd:24:0d:83:ca:11:41:13:9d:
dc:0a:e1:6a:01:18:09:4a:7f:3a:29:04:37:28:6e:9d:93:32:
7f:aa:40:6f:8b:5c:46:7b:c9:6d:87:c5:b6:a0:ba:cc:21:c8:
e2:3c:38:11:f0:ed:04:06:75:cf:2c:05:5c:a7:ff:75:b4:26:
c6:81:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:39 2024 by rpki-client on console-fra.rpki-client.org