Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: TyOAMg0rS68r6Paf75FWTFTicm10qhMl0/89unUCc8U=
Subject key identifier: 88:83:5F:78:73:63:46:04:E3:AA:59:E5:B9:15:B4:E1:0D:62:EB:B7
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 01936C35722978A610A3BF17CA4DC2440B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 0FA2
Signing time: Wed 27 Nov 2024 06:01:01 +0000
Manifest this update: Wed 27 Nov 2024 06:01:01 +0000
Manifest next update: Thu 28 Nov 2024 06:01:01 +0000
Files and hashes: 1: OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa (hash: LJC/RrSECoNqowsXs03UcOteY4G71Po9yCm7BzQtUyw=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: r7l/FgexdyBUcm4Js/MZpqQE00lgLKvg0AqJbObXRHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:35:72:29:78:a6:10:a3:bf:17:ca:4d:c2:44:0b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Nov 27 06:01:01 2024 GMT
Not After : Nov 28 06:01:01 2024 GMT
Subject: CN=88835f7873634604e3aa59e5b915b4e10d62ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:47:26:ed:eb:72:ab:28:94:c6:0a:4d:86:
d0:2e:7c:2a:77:18:72:b1:0f:3e:94:cc:b2:aa:28:
58:e9:46:f4:ce:c1:37:a1:39:b9:19:9d:34:ce:d9:
74:83:0c:b6:93:17:42:c6:5d:02:10:c7:7d:ec:16:
01:a5:e9:66:da:a3:4b:a2:ec:b9:de:8f:65:c7:bf:
7c:b5:07:df:dd:ab:9d:f4:f0:61:0c:51:7f:5d:c8:
b8:97:d5:e0:36:44:07:52:f8:c2:bd:c4:7c:18:e7:
65:c6:0b:bf:22:5d:55:34:fe:2c:92:61:e7:1b:2b:
ba:39:13:e9:07:00:88:22:61:ba:65:b3:4c:2e:b9:
5a:33:03:d4:e0:1f:7b:99:9e:78:a5:3e:54:69:a3:
cf:6a:15:da:d9:53:ba:53:69:f9:99:cd:f6:b9:85:
4b:84:53:90:85:93:b1:52:10:6b:01:5f:70:db:fe:
2a:33:68:8a:5f:af:86:1d:ab:30:e1:5d:1f:67:fd:
98:13:16:39:13:36:17:51:27:d6:21:ba:c5:71:f5:
2b:23:c1:37:de:e3:1a:b6:04:47:2d:34:0a:ed:6c:
f2:0e:f5:51:c2:3d:fa:1a:38:65:f0:13:8b:17:7d:
3c:10:79:af:29:74:c7:ac:d2:38:88:a5:0d:e0:c2:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:5F:78:73:63:46:04:E3:AA:59:E5:B9:15:B4:E1:0D:62:EB:B7
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a8:67:79:6b:31:b9:db:e0:09:04:3c:4d:17:0f:05:51:5a:
1d:fe:7a:5c:c9:e6:03:8e:85:8e:47:0e:c9:bc:91:23:ae:be:
c3:86:06:d6:91:2b:64:02:65:50:76:b9:49:27:33:c0:17:6e:
81:a2:39:46:aa:eb:8a:c9:3f:1c:1d:c0:70:1f:a0:a5:4e:26:
7e:29:6b:ee:fc:02:78:55:8f:50:35:c5:e5:99:b6:b8:52:1b:
2e:1a:b8:a1:bf:4e:d0:c5:fa:54:80:a9:e1:cf:ed:c4:43:ed:
77:bb:3c:22:ad:7c:98:d6:d9:0a:6e:ba:ad:44:fc:e2:fc:ba:
06:c1:38:36:66:e6:d8:5f:20:c0:8f:e5:9a:4f:64:01:f9:f6:
96:66:71:e7:cd:07:c0:f8:92:78:d5:4a:a2:f8:0c:17:a0:09:
9f:23:6d:c8:e0:56:09:63:c8:e9:99:f5:73:98:99:7a:22:0a:
fb:f5:55:71:12:d4:4d:dc:cc:52:30:1d:18:8e:36:8b:31:04:
4a:88:65:5f:fa:f9:27:cc:0d:ea:a2:cb:04:02:a9:ae:b3:29:
3c:4f:28:f0:2f:d1:1c:8f:c1:56:6e:42:05:7e:ec:e0:cb:69:
10:ee:82:35:7f:24:eb:7a:10:2e:5d:3d:51:6e:ea:1a:74:ed:
7f:b8:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:45:44 2024 by rpki-client on console-fra.rpki-client.org