Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
File: ooinzLTItWvoPCxXZZ3A2W6VZig.mft (raw, json)
Hash identifier: QpmOwZm/AWcanZSSFlDM6IkrbMCdTqiMPue79QUPcF8=
Subject key identifier: 24:31:7A:0F:06:A2:4F:4D:28:88:8F:2D:3F:C9:39:FC:2B:DB:D1:14
Authority key identifier: A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
Certificate issuer: /CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Certificate serial: 0193568892DCD1C78CE4DC8857ED94CE97DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
Manifest number: 0638
Signing time: Sat 23 Nov 2024 01:00:11 +0000
Manifest this update: Sat 23 Nov 2024 01:00:11 +0000
Manifest next update: Sun 24 Nov 2024 01:00:11 +0000
Files and hashes: 1: ooinzLTItWvoPCxXZZ3A2W6VZig.crl (hash: W/x02aTtYzI8HDENz7YyyIU2qKVWGpjaH+dtR0+nC0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:92:dc:d1:c7:8c:e4:dc:88:57:ed:94:ce:97:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Validity
Not Before: Nov 23 01:00:11 2024 GMT
Not After : Nov 24 01:00:11 2024 GMT
Subject: CN=24317a0f06a24f4d28888f2d3fc939fc2bdbd114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:7b:f3:f5:c5:af:2e:2a:ca:bb:ad:20:00:
77:20:64:cd:65:d9:c4:e1:63:d0:01:74:32:48:b9:
b5:58:79:96:1f:b6:01:d2:4f:29:99:67:1b:b9:f8:
4f:ed:6a:19:be:2c:22:66:b9:a2:e6:40:00:24:e9:
b6:9a:6b:e6:26:ce:e9:4b:15:95:90:54:be:81:72:
aa:00:d3:4d:87:a8:89:6c:23:f9:d9:87:68:9b:d8:
38:51:af:8b:12:53:89:ad:61:a5:ba:2c:40:c7:72:
85:01:e9:98:7c:1b:0d:2a:fb:a5:56:69:d2:e5:7e:
5b:7c:c9:70:7d:31:d4:06:e1:b5:b1:37:45:f7:67:
a1:b3:8c:77:73:e7:b2:c0:1e:77:f7:e5:f2:47:42:
3a:ce:e3:81:fe:d9:2b:cc:f9:82:9d:e1:77:e7:12:
eb:28:f5:f2:79:32:be:29:0f:9e:9e:79:fc:e2:04:
b0:fb:32:d9:61:49:67:29:68:90:2e:29:dd:a8:90:
0c:39:7c:0e:45:bd:fa:63:d8:4c:b2:19:b5:1e:33:
09:00:9e:1c:4e:59:e5:fa:cb:5b:ce:25:b7:37:4d:
24:fb:8a:45:6e:9f:5d:d6:19:cc:54:fb:01:f2:78:
ce:c2:0d:09:cf:0a:cb:2d:98:5e:98:62:2c:85:cb:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:7A:0F:06:A2:4F:4D:28:88:8F:2D:3F:C9:39:FC:2B:DB:D1:14
X509v3 Authority Key Identifier:
keyid:A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:5b:69:5c:ad:b2:b4:ff:0e:5a:cc:4b:84:6b:89:69:fb:
11:59:52:9f:c7:41:4c:39:9c:c9:cb:a7:2e:4c:a2:99:52:24:
2c:2a:d1:15:0f:ad:7e:01:92:1c:2c:3c:6b:37:c3:28:ae:56:
ce:98:f6:33:aa:4f:5a:16:34:0a:cf:f7:2f:e1:9d:5f:ca:ee:
f9:ea:eb:8b:96:45:32:bd:d9:c1:29:e1:7f:b5:5b:0c:fd:84:
a5:02:f0:0d:aa:42:b9:d4:4d:78:15:78:bf:cb:18:01:29:96:
e0:96:e1:a9:ec:9d:85:33:cf:d1:6e:f3:27:ce:c6:64:c1:ff:
41:72:7d:c8:48:b0:c6:d3:04:7f:56:37:c5:fd:61:56:b7:2c:
7d:b7:a9:e6:5a:78:3a:bf:b6:6a:3b:bb:5a:b0:29:57:a6:58:
ab:6b:39:be:4b:5a:07:fb:a3:5f:21:da:f3:10:5b:28:a2:8a:
39:65:e3:d7:a1:2b:7a:ef:60:07:4b:80:ac:eb:83:9c:3e:86:
17:b8:ee:63:49:80:b8:fc:32:4f:f8:fa:ff:8e:bb:6d:49:a5:
0a:50:cd:14:74:0b:ac:ca:bb:91:78:a1:73:5d:c3:53:d3:8f:
8b:fb:1a:fe:9b:d5:b9:6e:7a:86:5c:8f:3f:87:a7:6d:15:e5:
fe:f6:28:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiJLc0ceM5NyIV+2UzpffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODhhN2NjYjRjOGI1NmJlODNjMmM1NzY1OWRjMGQ5NmU5
NTY2MjgwHhcNMjQxMTIzMDEwMDExWhcNMjQxMTI0MDEwMDExWjAzMTEwLwYDVQQD
EygyNDMxN2EwZjA2YTI0ZjRkMjg4ODhmMmQzZmM5MzlmYzJiZGJkMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YZ78/XFry4qyrutIAB3IGTNZdnE
4WPQAXQySLm1WHmWH7YB0k8pmWcbufhP7WoZviwiZrmi5kAAJOm2mmvmJs7pSxWV
kFS+gXKqANNNh6iJbCP52Ydom9g4Ua+LElOJrWGluixAx3KFAemYfBsNKvulVmnS
5X5bfMlwfTHUBuG1sTdF92ehs4x3c+eywB539+XyR0I6zuOB/tkrzPmCneF35xLr
KPXyeTK+KQ+ennn84gSw+zLZYUlnKWiQLindqJAMOXwORb36Y9hMshm1HjMJAJ4c
Tlnl+stbziW3N00k+4pFbp9d1hnMVPsB8njOwg0JzwrLLZhemGIshcuN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQxeg8Gok9NKIiPLT/JOfwr29EUMB8GA1UdIwQY
MBaAFKKIp8y0yLVr6DwsV2WdwNlulWYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjYxMjgtMTM5ZC00NDE2LWI1MDYt
MjY2NzdmOGE1MDU1LzEvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84ZjYxMjgtMTM5ZC00NDE2LWI1MDYtMjY2NzdmOGE1MDU1
LzEvb29pbnpMVEl0V3ZvUEN4WFpaM0EyVzZWWmlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4lbaVyt
srT/DlrMS4RriWn7EVlSn8dBTDmcycunLkyimVIkLCrRFQ+tfgGSHCw8azfDKK5W
zpj2M6pPWhY0Cs/3L+GdX8ru+erri5ZFMr3ZwSnhf7VbDP2EpQLwDapCudRNeBV4
v8sYASmW4JbhqeydhTPP0W7zJ87GZMH/QXJ9yEiwxtMEf1Y3xf1hVrcsfbep5lp4
Or+2aju7WrApV6ZYq2s5vktaB/ujXyHa8xBbKKKKOWXj16Ereu9gB0uArOuDnD6G
F7juY0mAuPwyT/j6/467bUmlClDNFHQLrMq7kXihc13DU9OPi/sa/pvVuW56hlyP
P4enbRXl/vYoEA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:02 2024 by rpki-client on console-fra.rpki-client.org