Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: t0eE+R9L1LQzctsHBOT1bUEpkUtCpGufTdZBeT3DfBg=
Subject key identifier: 42:0F:4A:7A:4E:57:95:C5:5E:7F:A4:AF:A6:3F:76:27:04:BD:2B:C7
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0193549C7E05E7A10C7F20F34A8F6AE7D762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 16:02:41 +0000
Manifest this update: Fri 22 Nov 2024 16:02:41 +0000
Manifest next update: Sat 23 Nov 2024 16:02:41 +0000
Files and hashes: 1: b_28mtE99e-SZ_iQ97YM1PbCs24.roa (hash: lqOUCzm8kA3sGIpXj3e1DGwNFjeTOH9jEWEGTg7S5UM=)
2: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: t/SQBlYxuSETndFEkLs1gB0g4y4XSEecC56p4GA+NkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:7e:05:e7:a1:0c:7f:20:f3:4a:8f:6a:e7:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Nov 22 16:02:41 2024 GMT
Not After : Nov 23 16:02:41 2024 GMT
Subject: CN=420f4a7a4e5795c55e7fa4afa63f762704bd2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:19:b4:f0:02:75:06:8b:7b:d6:75:a2:ec:
6a:13:41:6f:4e:de:0a:13:c2:52:22:fe:be:fd:1b:
81:97:9c:c7:36:af:3b:12:b3:f5:ce:2f:e1:2c:fe:
a3:e8:11:00:d4:cc:94:59:8d:3c:9f:9b:2c:eb:24:
ce:44:52:da:53:23:6b:4c:a3:8a:0c:0a:fb:57:0a:
10:61:97:44:40:ca:40:fb:eb:c7:39:27:cb:7d:7f:
70:b5:77:00:f0:09:cf:be:03:14:75:2d:15:74:f0:
08:b3:a5:a2:f2:7f:98:c3:63:d2:35:cc:d0:e3:d0:
94:d4:30:8a:b4:50:01:a2:cd:1e:83:2a:bd:0f:e6:
79:cd:89:43:8f:15:36:21:eb:10:2f:f2:ef:56:4d:
f6:9a:09:f0:cc:d3:e9:e1:fd:cf:72:da:29:18:4c:
bb:83:cb:dd:ef:5c:85:b7:26:07:06:3d:f0:ab:24:
06:a4:9b:02:bb:db:81:94:dd:91:35:97:fa:f2:64:
ae:08:17:83:30:87:0b:89:f6:c4:9a:0a:3e:16:24:
5f:cc:f6:aa:3c:1d:d3:c4:8b:77:56:bd:b7:10:72:
34:b2:1b:0c:30:de:f5:28:85:47:c1:e6:bd:29:4e:
95:99:e1:9c:33:c2:ac:6d:8f:b3:91:f9:63:06:1b:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0F:4A:7A:4E:57:95:C5:5E:7F:A4:AF:A6:3F:76:27:04:BD:2B:C7
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:bd:4b:54:90:c4:47:c1:a1:80:dd:5f:79:53:d3:44:cb:
c1:c7:f9:ef:57:c0:fa:f6:3c:16:31:9d:e0:a4:55:d9:d6:e1:
3d:a2:ae:45:88:1d:e6:fd:46:a8:d6:04:23:fb:36:c6:35:24:
87:0d:83:d4:cc:0c:3e:34:3b:a3:ce:68:47:d0:54:e1:09:a7:
55:4a:e9:3a:43:11:02:e6:cf:63:bc:f9:a7:82:9a:6b:53:0d:
fc:9d:29:1d:60:10:f1:54:0c:02:9d:b7:9f:84:bd:11:ae:d4:
a1:3d:b0:51:c1:f7:75:19:2e:58:0f:bd:2f:01:4f:2e:49:d5:
a9:fe:13:00:5f:e3:f0:08:12:67:f3:ce:01:b6:86:69:4e:ff:
fd:62:b6:3d:c4:48:f8:70:e0:ba:d9:27:55:36:13:43:c7:fe:
f2:21:6d:3e:c1:dd:c0:77:d2:d6:75:13:f6:bd:60:65:93:3d:
ad:77:27:ed:d4:36:80:64:ca:71:59:0f:ac:d7:ce:2d:78:12:
c2:61:8f:6e:9d:ba:5d:b8:75:12:4b:44:79:6d:5f:d1:2b:f6:
1e:39:d2:72:0f:31:cf:58:f7:e4:d3:36:af:1a:18:2e:b6:57:
cf:90:14:7e:ba:36:6d:96:56:1a:42:36:71:d6:b8:13:a8:ea:
04:e3:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:28:06 2024 by rpki-client on console-ams.rpki-client.org