Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: G6Kg+YxRL2fravltZ0OMY1d+Tg6F2UEJ2ClXf7rkPvs=
Subject key identifier: FB:0D:86:1A:33:26:31:62:BF:6D:33:CD:C7:23:C3:C1:D0:DA:43:1C
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 0193568AEF30451B1ADE78BF358643A8EAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0CDC
Signing time: Sat 23 Nov 2024 01:02:45 +0000
Manifest this update: Sat 23 Nov 2024 01:02:45 +0000
Manifest next update: Sun 24 Nov 2024 01:02:45 +0000
Files and hashes: 1: FG075zakUUzAGXX0A_PoeqwhD-M.roa (hash: 2a3fynqwo2oKBgvco15SDJFDsgMkRHfnx6cU1fP+DN4=)
2: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: vi1rtBzZB5P6dk7lPuiIR13gs68GQ7C5mw+X1WTHcq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:ef:30:45:1b:1a:de:78:bf:35:86:43:a8:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Nov 23 01:02:45 2024 GMT
Not After : Nov 24 01:02:45 2024 GMT
Subject: CN=fb0d861a33263162bf6d33cdc723c3c1d0da431c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:47:7f:a6:15:7b:93:9d:ef:97:7b:05:49:
e8:53:87:c4:39:04:aa:65:24:ca:df:17:bb:ea:0e:
84:16:9a:98:ae:ed:b5:93:a3:33:2f:7a:6e:fd:08:
f7:ed:7c:b9:95:47:9c:31:16:61:f2:01:84:5d:06:
35:3f:b4:d9:66:2b:c2:f4:ea:4e:84:55:08:70:7e:
97:f9:41:ef:70:67:75:0f:68:50:f5:43:f1:a2:40:
31:77:80:6a:02:27:34:59:6c:f8:f2:9f:be:d0:57:
59:f6:4c:ab:ce:d7:0a:f7:cc:27:c1:ae:01:f9:23:
7c:38:dd:5f:0c:c1:de:e9:6a:c3:78:20:c4:3d:e2:
78:d4:72:96:89:99:60:54:5c:a0:44:1a:0e:c1:fd:
db:02:8d:10:78:cc:bf:03:2b:e1:85:6d:b8:af:ce:
11:bc:1f:c7:b2:fe:66:41:0f:32:5d:25:bd:ef:4c:
85:56:f2:ad:8b:69:95:85:0c:e4:44:09:94:b2:29:
f2:8a:45:78:f5:a9:da:38:74:d8:d4:ba:b0:04:5b:
4a:ff:67:63:a2:7a:f0:33:f6:c2:bd:d8:66:aa:62:
51:07:79:d0:17:7b:c9:ac:5e:45:ad:77:45:c1:2b:
68:09:20:3e:62:73:37:50:5a:ac:e7:96:21:cd:bd:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:86:1A:33:26:31:62:BF:6D:33:CD:C7:23:C3:C1:D0:DA:43:1C
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:bf:35:e4:92:5b:46:c7:d2:54:fe:b9:fd:ac:1c:5a:9f:
ae:6c:a5:0e:26:65:0b:e0:c7:76:07:a5:b3:88:c5:10:79:fd:
34:8e:55:ee:c7:e8:10:bd:bc:37:7f:69:de:58:ff:fb:18:ef:
1e:79:be:c4:e3:0a:64:87:9c:eb:ca:e2:58:29:38:63:84:5e:
70:20:d4:a8:5b:d3:3f:02:32:fc:86:12:c7:9e:bf:80:33:fb:
6f:8f:99:1b:ac:49:16:86:2a:b2:06:c8:98:4d:ac:d0:12:c9:
59:27:8b:e2:b4:ba:22:4b:62:a1:81:a0:fb:5c:a2:4e:ed:60:
1c:2c:9f:6a:0c:58:1c:cc:51:12:ea:ec:a1:23:36:39:b0:c0:
45:07:5a:5c:07:9e:a5:99:6d:d6:9d:fe:a9:69:ed:29:eb:f2:
03:0d:ab:c8:13:93:90:c0:d2:00:14:50:4b:71:39:16:66:b6:
cb:dd:93:ef:e2:34:22:0f:07:0e:29:ee:3b:9e:50:c7:09:ba:
2d:dd:86:5e:10:e7:ec:76:86:b2:ee:c4:c8:7a:67:79:d1:e0:
cb:9a:72:69:ba:ee:e2:99:bd:8e:29:ed:af:e8:91:92:35:b7:
02:29:8e:48:91:92:62:73:c6:3a:87:b0:a6:66:31:2e:bb:c5:
da:2e:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:17 2024 by rpki-client on console-ams.rpki-client.org