Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
File: 6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft (raw, json)
Hash identifier: koXhcTlPaGgCJ+5sBmj5sifTNi9+lYNwQyZlzP7diak=
Subject key identifier: A8:21:50:3F:37:AD:84:5A:E8:11:75:E7:55:D6:49:15:EE:4C:1B:7B
Authority key identifier: 6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
Certificate issuer: /CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Certificate serial: 7FB8F99201F55ABBDFC1E785D91501399D8D9356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
Manifest number: 0286
Signing time: Mon 25 Nov 2024 20:15:40 +0000
Manifest this update: Mon 25 Nov 2024 20:10:40 +0000
Manifest next update: Wed 27 Nov 2024 00:00:40 +0000
Files and hashes: 1: 6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl (hash: wiZIgyuJ2RnxymjJTCllx9VZfE4ovspgdf+W1XnsXq4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:f9:92:01:f5:5a:bb:df:c1:e7:85:d9:15:01:39:9d:8d:93:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Validity
Not Before: Nov 25 20:10:40 2024 GMT
Not After : Nov 27 00:00:40 2024 GMT
Subject: CN=A821503F37AD845AE81175E755D64915EE4C1B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:96:50:35:a5:48:61:1d:9d:29:11:1d:6e:
c0:52:e7:79:3a:00:cd:37:ad:17:66:eb:23:13:01:
79:84:08:55:45:4f:a5:22:97:ed:59:aa:c4:8e:b7:
25:e6:e7:d8:ae:30:26:90:0a:ca:73:07:20:88:1b:
65:5b:12:3c:dd:8a:83:6c:8f:d6:cb:5b:63:98:eb:
13:b2:0c:e3:ff:4c:7c:fc:60:56:2f:8c:48:2d:3d:
06:56:8f:ac:bd:9a:79:a1:9d:c3:ab:38:ee:0a:6f:
26:04:c1:8e:f3:06:d1:16:0e:fb:0b:cc:29:2d:2f:
d5:87:19:ac:fa:e3:99:cb:57:f1:0c:32:87:27:49:
69:66:35:ac:4e:a8:a2:27:ff:6b:41:31:40:b3:14:
61:f9:cc:90:6f:d4:3d:0d:54:a7:80:69:de:7f:76:
24:08:1f:94:ed:fc:b2:34:c0:17:c2:b2:10:27:5d:
42:e9:a3:26:59:62:ae:16:52:46:5b:0a:a2:23:1a:
db:98:a2:4a:d1:ec:2a:f8:c7:98:04:b2:a7:6e:f6:
f7:ee:b9:b3:0e:fa:d3:36:f1:51:16:f1:28:6c:46:
6a:c2:d3:28:fe:df:37:bb:a2:ca:28:3a:f4:ff:eb:
84:00:5d:20:9f:48:ca:6b:4e:b1:11:4a:c6:0e:53:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:50:3F:37:AD:84:5A:E8:11:75:E7:55:D6:49:15:EE:4C:1B:7B
X509v3 Authority Key Identifier:
keyid:6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:01:b1:d7:cd:62:e8:0a:80:01:b7:02:c0:0d:9a:2a:43:dc:
bc:65:cc:44:cc:50:a3:ab:8b:75:0f:98:76:32:d3:ab:53:d2:
5e:3a:23:94:c5:d0:95:b9:ab:0b:60:95:f5:65:1a:7b:97:be:
ab:8e:c2:cc:13:9e:73:27:d6:91:8b:21:98:a5:82:20:ec:39:
f5:d6:75:99:2e:db:a8:bb:69:dd:80:22:20:f1:57:7d:e2:ac:
3c:dd:13:76:77:c6:a7:8d:19:e6:1a:dd:43:45:6d:52:2f:be:
6d:f1:87:05:6a:0a:cd:a5:55:32:45:2b:2d:44:6a:28:66:2a:
f9:e3:15:52:b3:22:f5:d3:c2:1a:25:9b:bc:5c:ac:70:b0:44:
ef:99:8b:11:52:80:67:ec:41:5c:05:de:40:c1:b7:e5:86:a9:
bb:c8:4d:7e:a8:09:36:eb:9e:9b:cd:f1:1a:1b:14:00:03:c6:
6c:85:b1:bb:63:41:11:26:f4:3e:dd:bc:84:cb:be:8e:8e:71:
6c:d1:04:1a:ca:74:38:85:5d:72:9f:24:98:f9:2d:71:94:f6:
4a:6a:40:9e:47:10:8f:d7:28:7c:ce:b1:95:5e:31:44:ae:22:
f1:da:86:f4:5e:9a:45:9a:0a:7d:8e:e4:99:3e:4d:6d:7f:7c:
65:a3:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:24:51 2024 by rpki-client on console-ams.rpki-client.org