Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: euvUVIVdM4ninH/D0Ovyz6kTh8t6OEQ3wd+k1z3VX3Q=
Subject key identifier: 3D:45:86:80:25:61:08:5E:DD:C3:CE:DA:27:06:83:C5:D1:0D:3B:DE
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0193549AA4E49E08A8F2705823D47F3E7E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 03C0
Signing time: Fri 22 Nov 2024 16:00:41 +0000
Manifest this update: Fri 22 Nov 2024 16:00:41 +0000
Manifest next update: Sat 23 Nov 2024 16:00:41 +0000
Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: od04N9BnHI6xBaTwlpypcN0WkwcEXdOCLopHhVUt3jo=)
2: g7pFgNn9P392Qi9TseTU5vbLA6c.roa (hash: 2QLkkN16UAuwCY5qQVrWBPaEDLxBaQBXosyTwnErWlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:a4:e4:9e:08:a8:f2:70:58:23:d4:7f:3e:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Nov 22 16:00:41 2024 GMT
Not After : Nov 23 16:00:41 2024 GMT
Subject: CN=3d4586802561085eddc3ceda270683c5d10d3bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:d2:f6:b2:98:a0:ee:b9:af:56:c1:cd:ea:
15:50:55:7b:46:32:83:7e:3b:7b:50:57:2a:ec:d7:
87:20:9b:56:ec:8f:d4:f8:8f:35:6e:af:3c:10:fb:
01:e2:11:b2:8f:85:75:b5:c1:69:c2:f3:59:80:67:
5d:37:04:5d:ca:fa:81:41:e1:15:7a:5c:f5:af:a7:
ce:89:f6:6f:1e:de:eb:ea:1a:93:f6:d7:db:7c:c7:
f7:c7:eb:84:97:b5:bf:43:da:95:ac:53:ea:a9:84:
08:00:4e:f4:8e:09:a5:99:ec:42:40:33:86:54:ab:
0e:6a:90:36:ba:f8:60:c6:c2:de:05:f5:0f:ce:30:
26:62:76:e1:bb:b1:bf:13:80:ab:24:14:ba:15:a8:
3f:d9:22:3c:39:53:4d:be:d0:87:33:bc:7e:4f:89:
16:fc:fc:45:56:ac:22:18:60:20:3f:d6:da:f5:a8:
bd:33:9d:4b:38:69:47:0c:91:2c:7a:2a:4b:d4:57:
57:06:ee:f3:28:ee:d5:22:30:d0:da:8f:e3:dc:db:
3d:80:fe:ee:9a:c6:f5:59:1a:6f:d8:58:8a:c0:c0:
99:3d:b5:46:58:f9:c3:f1:21:ee:ae:41:dd:b6:4f:
42:00:80:2d:a6:e0:83:5a:f7:2b:c1:f3:b2:bd:82:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:45:86:80:25:61:08:5E:DD:C3:CE:DA:27:06:83:C5:D1:0D:3B:DE
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cb:fc:d9:bb:a5:f9:41:e9:72:c6:4f:6b:6a:91:ff:4c:ca:
14:95:1a:c0:ff:12:e8:ea:79:a5:33:2e:2e:db:c9:eb:f0:52:
c2:21:c0:3f:2f:6e:90:e7:02:2e:62:5c:0e:aa:cd:a7:f1:b7:
e4:52:8a:12:61:dd:3d:22:b9:06:30:35:b6:c9:5e:36:1a:7c:
67:03:2f:eb:d8:d1:80:e3:bf:64:94:e3:b8:cf:74:4b:9d:b6:
18:b5:90:04:b4:0d:17:0f:69:fa:68:65:39:e3:38:c9:bc:7d:
9b:00:75:46:fa:87:c8:1f:8b:27:43:d4:f0:18:f1:6e:4d:83:
b1:f9:18:89:9e:e7:b2:3f:6b:0d:06:ec:24:30:01:b2:18:7f:
c1:09:3b:48:03:1e:4c:66:36:d1:75:91:b4:e3:60:76:2b:f3:
2f:b8:d0:c9:ab:75:e1:ca:20:67:80:66:9f:19:3c:a6:99:2f:
dc:3b:42:f1:b5:f2:1e:97:08:d3:94:fa:5b:8d:5c:af:62:57:
59:41:b3:44:6d:d9:69:a4:bf:86:ec:d1:ae:16:98:38:16:8d:
44:72:af:33:83:12:2b:77:73:e0:10:86:3d:af:b7:00:f0:b3:
32:31:6b:fb:2d:bd:12:d1:80:2e:5b:8c:3b:4f:00:ea:fc:bf:
a0:cb:d7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:35 2024 by rpki-client on console-ams.rpki-client.org