Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 1Rz1FNWLJvBFZt9e35lzglK9IDfV4Nr6j8xPdeFFfAU=
Subject key identifier: 93:4D:C2:33:E9:BA:62:F7:34:CE:21:4E:9C:80:73:2D:E8:BB:5A:01
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 2A63FBE5739A22FA40C6AD6A2F7F6D3EEF316D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0173
Signing time: Thu 21 Nov 2024 06:38:32 +0000
Manifest this update: Thu 21 Nov 2024 06:33:32 +0000
Manifest next update: Fri 22 Nov 2024 09:59:32 +0000
Files and hashes: 1: AS215828.asa (hash: xY1Yp2b9xtswDljy+sEDaQx90hJFzuCUTkyNiPHVMBc=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 1L2T91AesemgawDKYnSI76lm7/bFn45oIbYCNVzp+YY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:63:fb:e5:73:9a:22:fa:40:c6:ad:6a:2f:7f:6d:3e:ef:31:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Nov 21 06:33:32 2024 GMT
Not After : Nov 22 09:59:32 2024 GMT
Subject: CN=934DC233E9BA62F734CE214E9C80732DE8BB5A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:ea:91:0d:b5:8a:56:3b:6f:1d:05:06:0a:
9e:ad:4e:bb:57:bf:c2:3b:db:b7:99:4b:09:21:f5:
a9:b3:46:87:d0:14:0e:a3:1b:24:ce:b3:78:96:ea:
92:36:a1:0e:96:86:4f:22:62:d5:37:13:14:dd:f9:
f8:c4:37:2d:27:61:39:d2:98:f4:1a:04:12:fe:eb:
b8:dc:48:be:f9:6f:3d:10:61:0e:eb:77:6d:a6:a8:
40:8b:7c:1c:13:62:ed:9a:af:dc:d5:a4:51:43:c7:
8f:8a:e3:22:7d:c3:bc:e0:1e:f4:52:d4:3c:d4:b8:
c2:2c:c3:1c:f9:10:10:5b:e1:b9:1c:f3:ae:d4:2d:
78:9f:f5:1d:67:11:54:de:e0:6b:ec:c2:ef:1e:a4:
92:cd:bd:d7:fb:43:b4:68:e9:49:5d:53:a0:fa:de:
69:c1:87:71:5d:b3:c4:f1:38:3a:6d:97:fb:7b:c2:
9b:df:d8:43:46:29:cb:c5:8b:27:f9:4a:d5:07:be:
a7:83:8d:05:ab:11:04:9a:d1:9c:88:70:bf:a0:6d:
f9:4d:38:9a:13:8e:bf:83:37:df:58:75:d4:7f:7a:
be:f2:6c:ae:86:e4:b8:d5:cf:60:b8:b2:66:6e:5f:
3f:9f:0b:b6:71:c0:96:9c:5c:87:98:04:1e:1a:16:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:C2:33:E9:BA:62:F7:34:CE:21:4E:9C:80:73:2D:E8:BB:5A:01
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:aa:24:59:e8:04:28:35:94:01:57:d0:f4:a5:8b:14:44:
c2:3e:3a:53:68:13:25:fd:fe:4d:ee:b0:60:58:dc:01:b5:df:
c2:bc:e2:7e:cc:57:87:0c:9f:b4:9d:5f:33:52:05:a7:49:26:
d5:de:d3:b9:59:40:13:92:45:92:ea:27:fa:41:e0:5d:73:33:
aa:72:33:8a:9c:3c:4a:0e:3d:48:8f:9c:6f:12:f1:11:d0:08:
62:b5:f7:27:c8:38:d6:f3:a0:25:81:bb:a8:a1:9f:fd:aa:bb:
2b:e3:1c:60:a5:e3:a2:c1:b6:1d:73:3f:f1:06:b1:88:b3:7a:
57:04:50:c7:66:d1:dc:2d:2d:36:a9:aa:2e:a5:e1:d4:a4:29:
84:9a:3f:1e:c3:6f:db:b3:a4:1c:82:20:0f:e2:33:de:7d:0c:
c0:a2:9c:b6:98:d8:38:cd:6c:da:38:32:11:a3:f4:84:22:dc:
44:02:4f:05:cb:ea:94:1f:f1:52:25:14:25:42:80:af:8e:11:
07:79:82:1b:1a:ea:1c:b2:ed:6a:01:85:35:50:06:1d:66:8d:
51:39:7d:68:76:c6:94:c7:da:3b:88:ad:46:78:31:8e:9b:ee:
7f:a3:ce:3d:8c:70:59:b5:22:58:5d:82:aa:ec:51:2a:37:72:
7b:96:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:09:03 2024 by rpki-client on console-fra.rpki-client.org