Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: 5IIuv1Hr3X8UCv9BjbVroPHB1wdBI/QOnzn8xlBmN4U=
Subject key identifier: A9:FF:09:81:93:A9:ED:2E:D4:61:2F:5B:AA:38:F6:AA:D6:86:73:1F
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019357D297A3D020C65F9BBF3B6C67E2B5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 023A
Signing time: Sat 23 Nov 2024 07:00:39 +0000
Manifest this update: Sat 23 Nov 2024 07:00:39 +0000
Manifest next update: Sun 24 Nov 2024 07:00:39 +0000
Files and hashes: 1: 1OfjQFfteISQNabjcczR-9dReks.roa (hash: ZhCiLAig24bZkHg5MrEQz97yFa08vAxonxd0npz5Tb0=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: BbPNK2PqAiPxMFQ9tlaW0B9ynNWeTprVipO6vdXG26I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:97:a3:d0:20:c6:5f:9b:bf:3b:6c:67:e2:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Nov 23 07:00:39 2024 GMT
Not After : Nov 24 07:00:39 2024 GMT
Subject: CN=a9ff098193a9ed2ed4612f5baa38f6aad686731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:07:9a:d8:bd:14:b3:6a:e7:e6:66:bf:17:
17:bc:14:65:f9:39:35:96:e1:63:5e:94:b2:b0:c7:
5c:05:4c:f4:e0:4e:10:af:4c:e0:45:9d:c9:f7:5e:
e5:a3:fd:17:29:d0:1c:12:ed:cf:09:ee:6c:35:5c:
20:51:a5:f9:a7:50:b2:9d:f9:11:69:00:74:0b:82:
26:75:25:66:d8:ad:2d:2b:5a:d4:4e:38:2b:f9:f8:
ee:b3:e7:74:36:8e:fc:7e:0a:f3:7b:bb:67:ac:f8:
a6:1b:f0:e0:49:1d:0d:f1:dc:e9:3e:f0:dc:f3:1d:
37:f9:9f:ed:a6:b5:e5:6e:f3:e7:20:52:11:44:1e:
d9:b7:f0:dd:ed:46:17:4f:bc:73:66:d0:1b:af:4d:
06:03:13:f9:64:7a:4c:87:b8:f2:5c:5d:f4:46:e0:
3c:9c:60:e0:9d:a1:0e:95:bf:4e:48:20:2c:c9:d7:
8b:ac:0b:3f:d9:34:40:81:ba:5f:18:04:55:cd:b2:
a6:b6:30:e3:22:4f:d4:1e:86:2b:28:ef:82:ef:20:
c0:d9:ab:05:bd:c7:76:a5:7a:c1:4e:47:79:e8:f4:
58:24:0f:01:ca:63:53:d2:44:ba:d9:a0:7a:f2:d4:
dc:e3:88:0a:2d:11:8d:16:83:c6:a3:42:e8:e2:95:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:09:81:93:A9:ED:2E:D4:61:2F:5B:AA:38:F6:AA:D6:86:73:1F
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:fe:7c:9b:32:52:17:b3:6f:6b:a4:f5:c4:18:72:3e:41:
a2:05:5e:6a:0e:fb:2d:b4:f8:5b:a6:9d:ff:2c:9b:86:23:be:
47:fa:96:24:1a:9c:91:db:cd:17:db:29:2f:11:a9:51:5e:07:
1b:b7:72:94:24:e7:d7:6c:be:f0:5c:88:6d:1d:34:91:47:3a:
ca:40:69:e0:63:69:ee:71:7e:5a:c5:de:6f:b3:14:7a:2a:b5:
0e:fb:c8:0f:57:e7:5b:5f:df:a2:29:73:38:43:2f:f5:7b:22:
eb:77:9d:94:55:45:29:8a:9e:d2:a0:ca:d5:95:6a:d7:d5:fa:
11:b2:a8:26:ce:d1:dd:1e:f9:34:1d:4f:1c:ee:a8:e3:6d:6e:
60:03:a2:1c:e4:d8:01:dd:2e:f3:e0:95:c8:37:fe:35:e5:e3:
d3:8d:98:37:33:3d:35:17:98:a1:77:22:73:ce:f3:d3:82:4d:
72:eb:cd:3b:dd:67:f1:ca:0f:c0:45:86:76:75:93:18:ab:f9:
7c:8c:2e:7f:b3:96:2b:8b:3e:c1:11:a8:03:bc:60:2d:e4:e6:
b3:e9:28:5e:6f:5f:cb:65:11:c5:bf:18:d7:ff:c0:64:9b:cd:
3e:58:a4:95:2f:76:4b:f6:8a:58:54:29:16:4d:89:59:cf:07:
f8:3b:6b:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pej0CDGX5u/O2xn4rXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj
OWQ4ZGEwHhcNMjQxMTIzMDcwMDM5WhcNMjQxMTI0MDcwMDM5WjAzMTEwLwYDVQQD
EyhhOWZmMDk4MTkzYTllZDJlZDQ2MTJmNWJhYTM4ZjZhYWQ2ODY3MzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUMHmti9FLNq5+ZmvxcXvBRl+Tk1
luFjXpSysMdcBUz04E4Qr0zgRZ3J917lo/0XKdAcEu3PCe5sNVwgUaX5p1CynfkR
aQB0C4ImdSVm2K0tK1rUTjgr+fjus+d0No78fgrze7tnrPimG/DgSR0N8dzpPvDc
8x03+Z/tprXlbvPnIFIRRB7Zt/Dd7UYXT7xzZtAbr00GAxP5ZHpMh7jyXF30RuA8
nGDgnaEOlb9OSCAsydeLrAs/2TRAgbpfGARVzbKmtjDjIk/UHoYrKO+C7yDA2asF
vcd2pXrBTkd56PRYJA8BymNT0kS62aB68tTc44gKLRGNFoPGo0Lo4pVnaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn/CYGTqe0u1GEvW6o49qrWhnMfMB8GA1UdIwQY
MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt
NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm
LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUH+fJsy
Uhezb2uk9cQYcj5BogVeag77LbT4W6ad/yybhiO+R/qWJBqckdvNF9spLxGpUV4H
G7dylCTn12y+8FyIbR00kUc6ykBp4GNp7nF+WsXeb7MUeiq1DvvID1fnW1/foilz
OEMv9Xsi63edlFVFKYqe0qDK1ZVq19X6EbKoJs7R3R75NB1PHO6o421uYAOiHOTY
Ad0u8+CVyDf+NeXj042YNzM9NReYoXcic87z04JNcuvNO91n8coPwEWGdnWTGKv5
fIwuf7OWK4s+wRGoA7xgLeTms+koXm9fy2URxb8Y1//AZJvNPliklS92S/aKWFQp
Fk2JWc8H+DtrCg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:10 2024 by rpki-client on console-fra.rpki-client.org