Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
File: Pzb_0WIVIeks8ueBQZDTolPgBjc.mft (raw, json)
Hash identifier: 8nEM+Y+1MoJv4b1Ofq+Mr8lMT/IJGc+IYSD+r1WUiHw=
Subject key identifier: 45:8D:2E:EB:A8:9D:46:02:E9:02:A7:53:9D:E0:2C:C9:00:F2:9B:9B
Authority key identifier: 3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
Certificate issuer: /CN=3f36ffd1621521e92cf2e7814190d3a253e00637
Certificate serial: 0193579B77B8CEAFBFF16B97BA491DC976AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
Manifest number: 0298
Signing time: Sat 23 Nov 2024 06:00:26 +0000
Manifest this update: Sat 23 Nov 2024 06:00:26 +0000
Manifest next update: Sun 24 Nov 2024 06:00:26 +0000
Files and hashes: 1: Pzb_0WIVIeks8ueBQZDTolPgBjc.crl (hash: XCJ/Kbong0ZoFpSJ/5tN+fW0Z6cMb0BAAe6iUmQIxjo=)
2: TYIwgrarP7E6S83_5_mppHpWbYo.roa (hash: IvVn+AwOt2D+4d1YECTmDm6iMU5s2JQinUoHiWF92fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:77:b8:ce:af:bf:f1:6b:97:ba:49:1d:c9:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f36ffd1621521e92cf2e7814190d3a253e00637
Validity
Not Before: Nov 23 06:00:26 2024 GMT
Not After : Nov 24 06:00:26 2024 GMT
Subject: CN=458d2eeba89d4602e902a7539de02cc900f29b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:94:25:12:b9:99:03:76:8b:f3:fd:72:99:
7a:fb:d7:fb:62:a3:02:81:17:61:67:61:b5:34:e9:
1d:f2:43:a1:7d:8c:4a:ff:32:be:fc:92:11:13:55:
8d:da:b2:7d:cb:78:8e:7c:e5:70:7e:ce:da:86:a6:
5d:6e:b6:78:c7:2a:78:44:5c:40:b5:cb:47:fa:2e:
6f:1c:e8:23:2a:f6:fc:30:8a:4d:5e:be:74:29:73:
d7:63:4a:54:54:59:1c:e2:cc:7b:c4:cd:4c:ce:2a:
22:e6:3a:9a:a6:fd:d6:a7:8f:8d:42:b9:f7:0d:63:
67:2b:e9:6b:f5:bc:4e:5a:01:e7:8d:a1:fe:b0:cc:
47:cd:2f:72:73:03:3e:83:e3:1a:50:47:e9:49:7c:
df:94:15:3c:5d:29:3b:9b:04:02:fa:37:ad:ca:bc:
9a:99:80:b2:1b:6d:b2:f5:3c:f8:8b:9d:59:78:06:
72:96:c8:b1:63:8e:12:ad:05:3c:10:6c:aa:a8:63:
49:d4:8f:46:46:e2:c5:2f:ad:b1:f9:2b:75:2f:9e:
4f:cb:2e:e5:97:4f:46:36:35:40:9d:16:08:27:21:
cc:d8:a9:ba:36:0c:67:d2:4b:46:f7:ab:e5:b7:87:
40:d1:33:9d:60:0f:d8:e2:a1:20:77:56:12:61:4a:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:2E:EB:A8:9D:46:02:E9:02:A7:53:9D:E0:2C:C9:00:F2:9B:9B
X509v3 Authority Key Identifier:
keyid:3F:36:FF:D1:62:15:21:E9:2C:F2:E7:81:41:90:D3:A2:53:E0:06:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzb_0WIVIeks8ueBQZDTolPgBjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/051b82-06c9-48b7-b548-98d5e5d90473/1/Pzb_0WIVIeks8ueBQZDTolPgBjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:76:e5:ad:5d:00:a7:db:f2:a8:df:6e:5f:12:99:6f:b6:
89:22:d1:22:9e:55:cc:d5:3b:dc:c8:ba:7b:20:5a:9e:ee:aa:
d5:cc:33:43:1d:49:c4:8f:61:4b:a6:4d:d3:a0:70:50:8e:c6:
ec:89:e2:b7:22:e1:36:2b:fa:8a:ce:a1:44:3b:b8:a4:50:cd:
a9:25:32:41:de:06:b9:6c:8a:d1:ab:62:46:2f:40:f1:10:8d:
7a:43:ed:37:11:06:c9:ec:e4:66:37:27:9b:7a:cf:11:da:14:
04:ce:c2:8a:ba:73:25:76:5d:e8:d9:15:c0:b1:de:b4:5b:d0:
fc:13:99:fd:ba:e4:87:34:f4:fb:dc:3a:b7:b4:85:c3:6d:b6:
0a:04:46:0b:c7:40:03:8d:cb:92:08:ca:89:57:37:b1:f3:2f:
14:62:a3:8e:05:07:dd:ab:f4:6c:80:9a:cc:3e:58:c5:9a:ad:
cb:ad:64:fd:34:76:18:e1:af:ed:ef:ae:c8:59:74:33:27:70:
05:21:c0:7e:97:e8:6e:cf:c7:56:41:52:6b:19:69:48:a8:97:
6e:bd:33:22:52:f5:b8:09:c1:33:d8:db:2b:fb:4b:b1:17:b8:
d1:cb:40:00:12:22:3d:ee:fa:e1:fc:6c:b6:94:b0:78:bf:6a:
b8:57:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:41 2024 by rpki-client on console-ams.rpki-client.org