Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
File: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft (raw, json)
Hash identifier: OcawYdhmT6cQMAYu/SGegbzYfRIFTGvr0pyZ8mp4CPw=
Subject key identifier: AC:01:3E:61:DB:94:5B:18:A8:AF:B1:6A:D2:67:62:99:C2:89:FE:D5
Authority key identifier: 03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
Certificate issuer: /CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Certificate serial: 14E10C95747F29ED917AC68B54CDBC474C42C020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
Manifest number: 09
Signing time: Fri 22 Nov 2024 11:06:36 +0000
Manifest this update: Fri 22 Nov 2024 11:01:36 +0000
Manifest next update: Sat 23 Nov 2024 14:56:36 +0000
Files and hashes: 1: 036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl (hash: yRtNQpjKzNLDcrmj7ZR13GkbBKWI5Uger+0U6Shr7Ng=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e1:0c:95:74:7f:29:ed:91:7a:c6:8b:54:cd:bc:47:4c:42:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036e2f88e56c86a436a3c4c7ab770fa78bc686ca
Validity
Not Before: Nov 22 11:01:36 2024 GMT
Not After : Nov 23 14:56:36 2024 GMT
Subject: CN=AC013E61DB945B18A8AFB16AD2676299C289FED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:c1:88:d3:2a:23:c6:cf:2e:4d:80:cd:9d:
01:72:19:f8:77:35:ba:96:ef:c7:21:78:6f:1d:81:
a7:50:62:da:1c:e8:de:6b:4f:c3:7b:d5:a2:68:6b:
12:23:0b:5e:ae:d3:2d:10:2c:49:dc:5d:a0:fa:c0:
c8:c5:29:06:2f:2a:c0:9e:22:78:c6:c2:e0:f0:5a:
2c:ad:5f:69:79:c1:0a:e0:a3:98:96:26:af:e8:29:
f3:cc:6d:0a:38:00:13:51:f2:50:d9:27:55:c9:b1:
df:0b:7e:9b:e6:96:1d:60:1b:b7:ae:76:35:35:25:
3a:49:f0:10:71:7c:78:fa:17:d4:74:3f:f9:bb:28:
bf:06:be:a5:7d:f6:cc:2c:c0:0e:e9:8d:3a:d8:40:
b4:e7:72:88:cc:82:da:b7:ae:5f:53:d3:65:4b:25:
b4:bc:09:83:1f:2a:8c:78:36:2f:aa:4c:a1:63:bd:
6e:8e:d1:da:1b:e1:19:f5:63:9c:9f:0c:02:4d:cd:
5f:61:67:2a:53:f5:4a:32:b1:1c:bd:d0:09:d5:a5:
3d:a8:45:58:58:f7:36:19:6c:31:db:fd:a0:b9:66:
22:d3:5e:20:30:a2:6c:82:30:4f:51:2d:ad:4d:c0:
4e:6f:52:df:44:42:0f:e6:d0:1b:2e:ad:98:eb:bf:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:01:3E:61:DB:94:5B:18:A8:AF:B1:6A:D2:67:62:99:C2:89:FE:D5
X509v3 Authority Key Identifier:
keyid:03:6E:2F:88:E5:6C:86:A4:36:A3:C4:C7:AB:77:0F:A7:8B:C6:86:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A24viOVshqQ2o8THq3cPp4vGhso.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b277449f-31b2-4578-a872-4b6e1340504f/0/036E2F88E56C86A436A3C4C7AB770FA78BC686CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:d6:f1:32:fd:02:e0:6d:7e:46:12:da:2f:a4:90:36:2e:
c7:5e:d8:9d:15:06:1c:97:52:b4:c7:05:64:96:39:8f:10:96:
e0:5d:cf:01:f6:69:ab:db:6a:36:f0:97:4b:9f:c0:ad:b8:ba:
8b:a7:74:ce:33:be:3f:5d:28:1d:ca:ec:bf:10:92:2e:37:62:
aa:35:63:42:68:32:d8:90:86:cf:5c:40:e1:81:65:a7:7e:bc:
39:d4:e8:3a:f0:ac:5a:44:db:b5:bc:fb:e9:92:f3:c8:ad:92:
73:c0:91:66:83:c9:88:41:90:cb:34:73:13:88:4c:6c:46:bb:
6a:22:e2:c9:82:e5:c2:8a:7a:e2:9b:1a:d7:56:56:0b:d4:b4:
f1:c0:20:96:53:2f:e7:d6:87:f7:02:aa:e2:da:15:e6:1a:75:
96:1d:6f:9c:f0:90:2f:35:0b:82:79:70:5e:f1:4b:22:fd:7a:
e1:cb:d2:01:ab:c1:99:e5:ac:58:46:6a:9c:c9:b6:39:a9:48:
fa:26:fd:a5:3c:f9:38:c5:c9:12:32:24:e2:dd:1a:b7:fd:d7:
d4:bd:11:6c:b0:1e:93:9c:b1:c5:26:b7:98:a5:11:9a:79:73:
6a:60:1d:6a:4d:73:a5:5f:43:0d:6a:5c:29:75:eb:a5:c7:e9:
99:74:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:16 2024 by rpki-client on console-ams.rpki-client.org