Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: roWndAwA8UIXW5X1j7aoVKrw1dXsHimj3w9CeLkc+ws=
Subject key identifier: 2B:AB:B9:A5:5E:6D:0F:33:3D:D7:40:DD:A2:CE:C0:26:AC:94:C0:A7
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 3303EDC652A4FB647EB9411D173CC318E7962693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 33
Signing time: Mon 25 Nov 2024 15:21:05 +0000
Manifest this update: Mon 25 Nov 2024 15:16:05 +0000
Manifest next update: Tue 26 Nov 2024 16:50:05 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: MvVQjMJzI12kRVgEGI3WXeBTB3jMhah5iLJ40K/V5OE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:ed:c6:52:a4:fb:64:7e:b9:41:1d:17:3c:c3:18:e7:96:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Nov 25 15:16:05 2024 GMT
Not After : Nov 26 16:50:05 2024 GMT
Subject: CN=2BABB9A55E6D0F333DD740DDA2CEC026AC94C0A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:44:5a:02:9c:0e:d5:24:24:8a:4f:1a:aa:
1b:ff:83:92:4f:e1:4c:7e:2c:65:d5:a3:e2:16:1a:
59:75:da:b3:6c:3e:e9:9b:a7:a8:0a:f8:6e:24:af:
62:ee:98:3f:0c:c0:e6:aa:bf:f0:1b:e5:f3:15:66:
11:40:6c:0e:ce:cd:84:4d:ad:68:59:2e:fe:90:30:
fb:62:50:1b:5b:89:45:0f:7e:f3:f2:c4:69:f7:fc:
9d:af:aa:c0:c7:ba:50:28:ed:6e:f3:2e:56:b8:bb:
04:03:9a:0e:e6:30:b4:82:d1:ae:49:52:c0:4e:46:
77:b1:eb:32:91:90:35:f6:9a:a9:d5:27:46:07:9b:
c2:6b:3d:e6:8e:a4:79:f3:2c:73:3a:0e:7c:a4:53:
e1:49:97:2d:a0:20:c8:7e:6c:c8:51:41:d7:4e:53:
e7:bd:b3:1b:04:2c:0a:9a:ce:a9:ac:9a:23:96:62:
56:d8:4b:75:13:90:06:02:63:d6:8c:32:da:6b:f4:
98:0a:5a:23:ed:8d:98:1a:0f:36:d7:36:df:04:cb:
ac:8f:e0:fb:87:d0:dc:3e:38:bb:27:25:30:c1:d9:
b8:0b:97:aa:cc:2c:9b:44:79:33:42:6c:57:c2:88:
ae:a2:f5:c7:16:34:65:b3:20:be:94:84:bb:9c:a5:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:B9:A5:5E:6D:0F:33:3D:D7:40:DD:A2:CE:C0:26:AC:94:C0:A7
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:fd:dd:3e:3c:e9:7a:14:dd:9c:d2:cf:b1:a2:72:27:e6:
4a:62:0b:60:e3:c2:9a:f8:8d:98:ef:b5:43:d7:95:3c:a4:6a:
a7:e9:14:df:c0:3b:82:e5:f7:7b:72:25:0e:b4:52:10:c1:e6:
5d:c0:db:33:69:69:ca:c4:01:47:8d:51:1b:ef:c0:28:2c:49:
b8:77:81:fa:44:80:d1:12:cb:83:47:61:4b:52:89:97:d2:db:
1a:e1:da:6a:9a:7b:2e:46:2d:ff:a1:0b:42:1a:4a:4f:7d:67:
40:e0:62:27:07:dc:1f:0e:23:8a:d7:5c:69:38:66:31:c8:dc:
4f:82:59:82:9b:e2:57:8f:42:c3:9e:56:b0:2f:d0:38:0a:42:
47:b3:e0:73:cf:27:1a:86:05:c2:66:08:59:4c:48:21:e0:b6:
24:31:92:f3:a6:7b:ee:1e:a8:39:af:ea:d2:05:8c:3c:01:b2:
d0:35:ef:d4:b3:a8:72:49:64:e5:7e:b7:d7:d3:e9:bc:17:4d:
ed:eb:7a:b3:e1:19:13:21:84:ef:62:6c:5c:3e:3e:15:98:37:
5c:99:75:51:f8:05:b3:24:6a:e3:c7:63:ce:c4:37:52:59:88:
31:18:c7:9e:42:25:f7:86:98:e1:f9:ff:76:fd:41:2c:8f:06:
d3:fe:88:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:01 2024 by rpki-client on console-ams.rpki-client.org