Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: oICLeB2ZQ7/7r2WHR9fCZuTFHJntx0CH1G7WJzWS4LY=
Subject key identifier: 29:E4:99:F7:96:99:43:38:F3:12:62:95:F6:32:88:25:90:8A:19:78
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019358786A038A24D646153A3C60CF576D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0666
Signing time: Sat 23 Nov 2024 10:01:46 +0000
Manifest this update: Sat 23 Nov 2024 10:01:46 +0000
Manifest next update: Sun 24 Nov 2024 10:01:46 +0000
Files and hashes: 1: XyeCzG_wBf12nrFjyUT3zOVrgF4.roa (hash: B6WE3T2VnI0Q/ZB8p5ymbmWBBlTF/QgWmv6nMptwgFw=)
2: v5B6XJkuiUlxr77y-BFXalUmc7I.roa (hash: /t0ISmqyWZkTNYepoE3TrSigo0dNPkY5O1NlIYNgxZ4=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: O2uqQoBn746LLgU0n4lQmJMceH4p7xMKvMN588s/c9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:6a:03:8a:24:d6:46:15:3a:3c:60:cf:57:6d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Nov 23 10:01:46 2024 GMT
Not After : Nov 24 10:01:46 2024 GMT
Subject: CN=29e499f796994338f3126295f6328825908a1978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:cc:0a:b8:a9:f5:8a:1e:05:53:d7:26:86:
fa:78:be:19:5a:3d:e8:fa:cd:d5:20:dc:80:20:28:
32:4a:f7:5b:ef:c7:76:ba:27:af:0d:f9:91:0d:52:
66:3e:fd:15:b0:38:5e:97:72:fb:d3:09:f3:02:7b:
67:fa:dc:4c:79:d7:09:ca:c6:d7:2a:5d:47:09:64:
8b:c0:a7:79:99:cf:39:af:de:c7:f2:34:c6:ce:59:
15:eb:8d:41:b9:82:72:01:3d:2c:08:0e:bb:2d:07:
4d:e3:b0:21:ad:ca:57:2d:6e:6e:72:54:1e:a7:ee:
cb:d3:aa:b8:35:3a:77:ef:7a:dc:df:37:5b:45:10:
e9:d3:ec:52:16:af:ac:8d:e4:e2:34:24:d4:d9:db:
cd:18:56:31:14:ee:65:16:2d:17:91:f7:57:d6:0b:
8d:03:0f:d3:64:1a:1a:46:ad:6e:76:bc:ce:a6:d5:
6e:58:9e:3d:c1:5c:e3:fc:72:a6:a4:68:27:87:c5:
d2:74:5d:d1:8d:eb:5f:67:57:9e:51:7b:9e:d6:30:
b8:cd:6f:7c:c5:ee:2a:d1:60:94:98:a4:60:8f:12:
4f:09:b2:9a:9d:be:17:a4:bc:31:f4:34:3b:aa:81:
63:f6:8f:e0:80:5d:05:da:b4:60:bf:d7:83:70:23:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E4:99:F7:96:99:43:38:F3:12:62:95:F6:32:88:25:90:8A:19:78
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:ae:1b:6f:fd:45:e6:4a:5e:38:d5:ec:bf:42:30:99:b8:
dd:d8:6f:93:2d:02:5a:5b:35:57:63:1b:f2:36:56:fb:22:19:
4d:71:a6:ff:03:24:5c:d4:f7:10:f2:22:2d:44:d5:bd:f3:b3:
53:36:f1:21:c1:7c:92:3b:99:ac:79:23:24:65:c0:c9:6a:6f:
b2:7d:1f:ce:fc:06:80:54:62:9c:c1:40:4c:e4:0b:15:e7:0a:
b7:5f:9e:ce:8e:2a:b7:ed:06:eb:f4:54:ac:9a:07:eb:fd:b7:
4b:38:b2:dc:0e:b5:e3:89:b2:8e:cb:a8:cf:0d:fc:11:1e:24:
86:2e:23:0f:dc:3f:ab:78:04:44:92:88:c3:c5:43:26:c0:19:
18:60:74:03:7f:5e:a1:32:c2:c1:5a:46:22:2c:05:c4:14:c7:
aa:74:99:f8:43:aa:f5:0c:21:79:ee:a7:25:8a:5b:10:5b:65:
ae:e3:0d:46:bd:38:fc:e9:b5:a7:b7:f2:84:87:4b:02:f6:e8:
64:24:76:86:8a:67:ad:c5:66:2c:ba:f2:90:85:8d:2c:bc:9a:
41:44:d5:ca:8b:9e:8a:ce:c0:5f:b4:74:bf:76:58:08:6c:04:
11:20:ec:cd:a8:26:f9:34:a6:17:2e:ba:7e:5f:3b:13:cc:58:
59:70:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:58 2024 by rpki-client on console-fra.rpki-client.org