Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: HE1lZe+a6tZdCzqp5R3HGGGIVAJ03tA42ivBzATcbHU=
Subject key identifier: A8:44:10:0B:76:06:07:93:9D:C8:40:3D:5E:89:46:79:46:B5:DE:CC
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 01936A46DBB70D8DE9C1CE5DC4DD4CD0FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 04D6
Signing time: Tue 26 Nov 2024 21:00:48 +0000
Manifest this update: Tue 26 Nov 2024 21:00:48 +0000
Manifest next update: Wed 27 Nov 2024 21:00:48 +0000
Files and hashes: 1: 5GQXJbhxY1SXnJkP5m15uJD4A-0.roa (hash: af3Y9kc85cSD3GW26QZSvT5y8YcjAQeFIMrDK0AQmCg=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: 0Z4U9ZghPQxgwq7fgCe6MXg2Ur6JpYViDd7bTWWs4Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:db:b7:0d:8d:e9:c1:ce:5d:c4:dd:4c:d0:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Nov 26 21:00:48 2024 GMT
Not After : Nov 27 21:00:48 2024 GMT
Subject: CN=a844100b760607939dc8403d5e89467946b5decc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:15:dc:ea:cb:85:62:19:ec:9f:c6:88:8d:
29:85:aa:ee:6a:b4:ea:9b:ea:e6:ee:53:d4:00:40:
c4:e7:77:ad:61:ed:36:76:bd:82:35:2c:58:ac:80:
29:72:6c:08:b9:da:f1:3f:1b:f0:be:56:d2:8c:2e:
8b:ec:15:bb:03:27:6f:f6:bc:2b:97:44:5f:a4:fe:
57:67:db:df:f2:02:d3:bf:9c:0c:39:cb:68:22:ae:
d5:da:cd:c9:69:d7:15:67:a2:f7:6a:40:3b:31:b7:
5e:d6:97:50:1a:04:64:af:29:51:02:38:85:f8:45:
76:05:9a:3c:68:83:92:1f:72:3e:2f:5b:af:57:51:
b6:76:44:d7:c8:94:60:de:80:e3:2f:b8:1c:21:9f:
a9:27:af:bf:59:b6:0f:73:5c:fd:1f:1b:00:8c:63:
db:78:67:d6:ae:11:dc:c3:a0:5c:5a:e0:01:36:db:
12:ab:1f:6f:94:4f:4c:47:6c:06:42:ee:32:24:fa:
ca:3a:ae:f3:ea:75:0c:a0:16:df:b3:56:04:ea:4c:
0f:9e:ea:72:70:96:25:42:e4:c8:b5:be:0d:46:a6:
2e:18:21:13:9f:02:62:02:2c:63:64:90:33:41:fb:
24:46:c9:f5:c4:20:e0:3c:73:c8:c4:c4:6b:bf:e5:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:10:0B:76:06:07:93:9D:C8:40:3D:5E:89:46:79:46:B5:DE:CC
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f6:04:76:42:c9:ea:d9:9d:10:2c:f7:a9:ec:33:fb:e9:91:
06:3b:9c:12:d4:a5:0b:6d:ea:92:ea:f2:6e:c6:6a:52:af:df:
b9:ab:b1:e8:d5:6e:4b:2c:d2:e0:e2:1c:1d:a6:7d:c5:d0:81:
8d:41:f1:4a:c4:40:0f:1a:e0:69:bb:b1:04:50:4e:10:e1:8d:
c7:a7:c6:f6:21:59:95:dc:53:3c:0e:ee:f2:ad:c9:da:d7:c1:
43:90:54:8b:0a:70:97:a0:b3:c4:b8:1e:95:ed:8d:cd:f7:bd:
8a:0f:b6:d6:0f:4d:a0:00:e6:b8:e6:41:57:98:49:21:14:75:
bd:f2:61:68:ce:9d:4a:97:a5:1d:75:7b:2d:10:0c:76:c4:a5:
e6:44:93:dd:10:12:19:ee:fb:84:93:d4:ea:8c:61:d6:09:2b:
77:bd:b3:29:b5:4d:fd:91:e5:d0:1c:0a:4b:0c:5c:94:05:6e:
19:e1:db:ec:25:cf:99:a9:58:8b:51:fb:78:51:31:3b:f5:c1:
91:64:3d:ba:74:05:62:6d:73:b4:3c:d7:2c:a1:57:df:be:2f:
f3:dc:f7:8f:a2:94:2a:8d:e0:79:b5:50:2c:3b:a2:4b:f1:51:
2b:39:08:e4:ad:7d:23:67:7b:c7:7a:82:75:0e:db:24:56:49:
9b:e4:5d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRtu3DY3pwc5dxN1M0P7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2ZhZmRiODZkMzhmMzdiZjBjMjZkM2YyNzMxZmRlZjZi
MTRlNGEwHhcNMjQxMTI2MjEwMDQ4WhcNMjQxMTI3MjEwMDQ4WjAzMTEwLwYDVQQD
EyhhODQ0MTAwYjc2MDYwNzkzOWRjODQwM2Q1ZTg5NDY3OTQ2YjVkZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojcV3OrLhWIZ7J/GiI0pharuarTq
m+rm7lPUAEDE53etYe02dr2CNSxYrIApcmwIudrxPxvwvlbSjC6L7BW7Aydv9rwr
l0RfpP5XZ9vf8gLTv5wMOctoIq7V2s3JadcVZ6L3akA7Mbde1pdQGgRkrylRAjiF
+EV2BZo8aIOSH3I+L1uvV1G2dkTXyJRg3oDjL7gcIZ+pJ6+/WbYPc1z9HxsAjGPb
eGfWrhHcw6BcWuABNtsSqx9vlE9MR2wGQu4yJPrKOq7z6nUMoBbfs1YE6kwPnupy
cJYlQuTItb4NRqYuGCETnwJiAixjZJAzQfskRsn1xCDgPHPIxMRrv+VgHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhEEAt2BgeTnchAPV6JRnlGtd7MMB8GA1UdIwQY
MBaAFLB/r9uG0483vwwm0/JzH972sU5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2Qt
NDkzOGI4ZDBjM2RlLzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNmQyNjMtMjlmOS00NjEzLWJiN2QtNDkzOGI4ZDBjM2Rl
LzEvc0gtdjI0YlRqemVfRENiVDhuTWYzdmF4VGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/YEdkLJ
6tmdECz3qewz++mRBjucEtSlC23qkurybsZqUq/fuaux6NVuSyzS4OIcHaZ9xdCB
jUHxSsRADxrgabuxBFBOEOGNx6fG9iFZldxTPA7u8q3J2tfBQ5BUiwpwl6CzxLge
le2Nzfe9ig+21g9NoADmuOZBV5hJIRR1vfJhaM6dSpelHXV7LRAMdsSl5kST3RAS
Ge77hJPU6oxh1gkrd72zKbVN/ZHl0BwKSwxclAVuGeHb7CXPmalYi1H7eFExO/XB
kWQ9unQFYm1ztDzXLKFX374v89z3j6KUKo3gebVQLDuiS/FRKzkI5K19I2d7x3qC
dQ7bJFZJm+Rdqg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:42 2024 by rpki-client on console-fra.rpki-client.org