Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: R+/Y7VFWHokRJKFdnZgmy/wpTTTlNxMeREp9+rlyxRE=
Subject key identifier: AF:E4:A1:1F:E8:CB:34:A8:80:65:76:51:25:A6:E9:8B:4C:66:BC:BB
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 45C16456073E21CE79D23DF0333914879EBC8D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 0221
Signing time: Fri 22 Nov 2024 15:55:42 +0000
Manifest this update: Fri 22 Nov 2024 15:50:42 +0000
Manifest next update: Sat 23 Nov 2024 19:31:42 +0000
Files and hashes: 1: AS203843.asa (hash: GwoeQKAfY1KoaOWObV0VEzXQzef4Ep/PlP4XQCkmW1c=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: BXVA5Tc7ubEYLuP/bmK89T+CLqFHFRYh8s+57fTuvJI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c1:64:56:07:3e:21:ce:79:d2:3d:f0:33:39:14:87:9e:bc:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Nov 22 15:50:42 2024 GMT
Not After : Nov 23 19:31:42 2024 GMT
Subject: CN=AFE4A11FE8CB34A88065765125A6E98B4C66BCBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:28:aa:83:85:8a:7b:5c:31:a8:77:10:cd:
9d:9b:9f:99:1b:7d:fb:3b:08:38:53:4e:1e:b2:fb:
3b:25:af:3b:95:bf:5e:ee:9d:e2:f2:0c:33:fc:0b:
07:c4:ed:81:8f:97:36:64:5d:83:b6:ac:57:41:27:
17:eb:bb:bd:be:e1:ac:20:b7:0c:09:5b:58:5f:de:
09:d3:3e:68:bf:d6:f5:1c:7e:4b:c3:58:98:94:01:
48:90:59:7c:29:e1:a1:50:43:df:c9:35:a0:82:51:
4d:0e:c2:1e:a8:c0:c6:34:e6:27:5a:b9:ae:2d:c3:
0d:5f:1e:af:b1:ea:3f:66:5b:82:6e:a8:ac:6c:d8:
2a:1d:1a:64:8f:5c:da:4b:18:d5:44:10:63:b6:cf:
86:f7:c3:c3:2d:ca:b8:0b:a3:b7:10:d7:7d:69:fc:
a2:27:fe:da:7b:49:cf:0a:86:4c:c7:a7:0a:06:41:
85:05:1e:7b:22:64:08:f1:38:ba:43:09:c2:b3:1e:
c0:c7:c5:77:ca:28:bd:44:a3:e4:67:e6:e1:bc:35:
11:b1:a5:4b:85:53:b0:c0:b3:15:f5:8e:7a:d3:52:
a4:4d:34:4f:ac:e7:e9:2a:47:36:5e:83:70:33:5f:
c9:48:6f:98:70:28:b9:68:01:a3:70:85:d8:a3:2a:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:A1:1F:E8:CB:34:A8:80:65:76:51:25:A6:E9:8B:4C:66:BC:BB
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b5:04:44:af:07:86:f3:43:6e:0e:cb:9f:bf:07:fb:36:01:
70:10:2f:c6:50:90:fe:39:3f:dd:af:a8:3d:23:91:c8:4c:8c:
d1:49:7f:89:43:08:38:ec:9b:83:dc:7d:60:7a:38:1b:ff:a2:
12:77:0b:74:6c:4a:48:0e:83:10:c5:79:bf:0b:b0:dc:ee:29:
3e:22:df:50:25:46:86:61:a9:04:f7:77:3f:50:97:21:c3:a0:
b7:00:52:be:a1:00:fc:93:f9:a0:e5:91:2b:e9:48:a1:46:66:
06:7a:77:81:68:0f:9f:66:9d:65:0f:1e:ce:56:59:12:bb:26:
43:6e:0a:56:a1:37:04:eb:16:57:0b:c0:cc:a5:6a:0d:99:53:
96:9a:07:8c:d0:8f:f3:09:aa:c7:5d:cc:27:73:6c:5b:4b:ac:
d4:8f:1b:91:43:81:00:17:d7:1f:0d:69:e7:e1:f2:29:81:8f:
64:10:a6:bc:19:95:16:48:09:1e:49:d5:14:05:09:c4:f8:40:
5f:2b:f1:6d:dd:5b:a7:bd:13:ec:23:11:d7:e2:6d:b3:03:b9:
03:67:04:d5:ec:8a:16:5e:e9:27:e2:82:47:ad:47:75:39:d9:
e1:11:b5:2c:d2:4c:73:6f:64:73:62:c0:43:5b:81:7a:4a:48:
39:79:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:33:35 2024 by rpki-client on console-fra.rpki-client.org