Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: 8mjtU8pHXaHYnqxMdijhG6Fzj6TEwt+tX2QO7jzwOMo=
Subject key identifier: 42:58:1A:F7:73:1A:49:C3:05:75:7A:20:C5:35:AE:31:B3:06:C3:23
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019357D2464BC99C064AA4671925DBDE61E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:18 +0000
Manifest this update: Sat 23 Nov 2024 07:00:18 +0000
Manifest next update: Sun 24 Nov 2024 07:00:18 +0000
Files and hashes: 1: 1_WLlox2SDo-pFfBeZxe1nV0UNg.roa (hash: eikqbQbNkZ1vTQoZZUb+mRRbTn+UqntTvkGGl1tQCBA=)
2: gKHzlzbsFKe4jwhtrp76m4rdTUg.roa (hash: /b2LKoj6hsE4fo2A5N/TKPouYgNF0RlxlnpIa1s7VIE=)
3: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: NCnzSvHdUXDn6EezkN0U3tKSwQIMRujcKrUS2ME/a64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:46:4b:c9:9c:06:4a:a4:67:19:25:db:de:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Nov 23 07:00:18 2024 GMT
Not After : Nov 24 07:00:18 2024 GMT
Subject: CN=42581af7731a49c305757a20c535ae31b306c323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:9d:ee:56:65:3d:6f:06:de:24:0a:0e:55:
6c:1f:0e:d3:40:1d:96:ce:00:92:29:39:61:9f:64:
b5:27:2d:58:db:71:c3:b5:32:30:58:69:67:cd:21:
83:8a:ef:08:aa:32:7c:03:c2:1c:68:e1:36:7d:57:
40:15:ce:54:d8:63:4f:fd:c8:29:c9:08:7e:e2:e6:
78:49:dd:c2:83:19:ab:58:9d:5e:15:97:58:5f:65:
c0:68:68:d9:1e:5e:be:a7:3a:73:5e:68:0f:c1:aa:
00:a7:93:49:31:dd:17:32:e4:ff:80:1c:30:67:3e:
9c:0a:3d:b4:df:b7:5d:49:18:c4:e0:22:4c:e4:93:
e4:cd:c8:26:57:f9:34:d1:65:fc:46:9a:07:66:cc:
d4:c4:d5:d4:ed:87:69:6c:04:24:19:9b:16:3e:5b:
6b:f7:7a:9e:68:62:c3:a8:f1:5a:e9:80:3f:8a:4f:
45:d6:5e:f3:f4:19:a4:63:c8:86:85:f3:d6:5c:c0:
a8:b3:f6:e0:3a:ff:d8:04:4f:08:5e:a7:cd:70:19:
dc:64:d9:31:6c:a8:90:f1:b7:b2:3d:d7:2c:6b:de:
63:82:d9:07:38:9e:38:aa:b0:26:9e:84:32:3c:75:
20:31:5f:af:4d:09:7d:d0:7a:58:46:ed:4a:1b:f0:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:1A:F7:73:1A:49:C3:05:75:7A:20:C5:35:AE:31:B3:06:C3:23
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:fa:b4:1c:d6:42:1b:49:4e:b5:60:32:63:57:55:26:58:
2b:ff:60:a7:03:07:1e:1c:45:35:02:cc:d5:18:64:b0:34:27:
f0:84:66:b4:39:65:b5:3c:13:96:66:01:38:7c:69:66:ba:f3:
cd:c5:3b:1f:f8:dd:32:df:ea:74:79:c2:e5:4c:e3:00:9b:61:
e1:18:24:35:41:90:13:7d:74:0a:ef:a9:b7:9a:69:81:7c:a7:
40:8f:48:83:e5:86:36:7a:fa:9e:cc:3e:81:d4:b5:78:bb:fd:
06:37:17:a7:c9:c4:8d:35:13:55:0e:38:13:30:eb:65:1c:b7:
c5:4a:d1:2d:b0:d6:3e:ce:4f:83:8a:e0:d6:fc:64:3a:31:25:
f3:73:3a:42:0b:b4:04:30:58:40:12:d7:9f:b8:ca:55:aa:d2:
f5:7a:0b:65:20:7d:ed:54:9e:43:48:b3:1d:ea:a8:fa:2f:bb:
8a:c5:11:86:dc:7e:2a:8e:6a:60:04:47:62:b1:f8:52:1d:42:
a6:15:3d:8a:0e:f7:ac:da:4b:57:98:ac:ac:13:d2:29:ae:8e:
37:86:db:ba:39:07:96:32:81:d9:15:da:ea:2a:43:34:89:cf:
c8:d8:46:3c:b4:f4:92:82:55:f6:60:6e:d2:c1:06:83:d2:33:
6e:98:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:13:13 2024 by rpki-client on console-ams.rpki-client.org