Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File: 91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier: +mBzTL7fm4zjnOJaPy77JhHMIQN8tT9MEwtA1GM5et8=
Subject key identifier: 66:40:07:DF:9A:76:4C:8B:1C:AB:05:1C:85:BD:EB:70:5A:A6:FB:03
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer: /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial: 3F679248849E4379DC34CD25CE7E5C13C5EF647E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number: 01F9
Signing time: Fri 22 Nov 2024 11:58:40 +0000
Manifest this update: Fri 22 Nov 2024 11:53:40 +0000
Manifest next update: Sat 23 Nov 2024 15:27:40 +0000
Files and hashes: 1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: Bg187tWPFHh2luOj9YMSa9vEUa7NhtbmkMlJWYkftDQ=)
2: 3139352e3234352e3139382e302f32342d3234203d3e203538303631.roa (hash: nk9w9Z0XUZ1ee8G3pMDLx2e/5b/7MtruoYoFsYo0R4c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:67:92:48:84:9e:43:79:dc:34:cd:25:ce:7e:5c:13:c5:ef:64:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Validity
Not Before: Nov 22 11:53:40 2024 GMT
Not After : Nov 23 15:27:40 2024 GMT
Subject: CN=664007DF9A764C8B1CAB051C85BDEB705AA6FB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:95:32:28:bc:cf:af:98:d5:53:e4:46:a0:
8c:21:46:04:e3:e2:f2:0c:5d:01:83:06:20:6b:3d:
59:e6:11:95:1c:55:f5:4f:01:33:42:39:ee:8e:1d:
22:de:29:1a:9f:54:22:9d:34:b7:82:f4:f8:4d:e9:
33:17:d6:5d:a6:78:15:4a:aa:b8:a8:54:c5:33:f7:
e0:31:40:ce:61:32:ef:52:3b:3e:96:86:e1:6a:0d:
af:3e:ee:84:25:90:31:24:f9:3a:b5:09:22:c3:8f:
fe:29:81:2c:fc:bc:8a:de:6b:50:a1:58:32:46:a1:
e3:40:41:53:60:89:b7:87:57:8a:48:51:aa:4e:d0:
fe:44:1b:44:dc:0c:a5:04:7d:5d:34:75:e2:d7:59:
67:09:8c:89:5d:18:64:9a:d2:30:a4:11:a5:30:c7:
0c:ae:c7:3c:70:ef:11:7b:be:89:4b:e7:4f:2c:13:
3c:69:3c:c3:9c:4f:f5:53:86:b0:20:21:ee:29:33:
b8:1c:96:3b:5c:4c:81:c3:96:36:83:17:39:0d:ee:
bc:b6:64:18:85:7c:3e:4d:62:5b:11:26:35:4a:9c:
ea:a3:d2:05:9e:59:b6:6b:bb:63:4e:9f:3a:73:9d:
23:89:dd:c3:20:5d:f9:4a:1a:b6:6a:07:63:15:e9:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:07:DF:9A:76:4C:8B:1C:AB:05:1C:85:BD:EB:70:5A:A6:FB:03
X509v3 Authority Key Identifier:
keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:e5:b0:d5:e8:0e:7e:66:fb:d7:af:c1:3a:29:95:1f:e8:
2f:30:a3:a7:11:a1:4b:ec:e1:d6:7c:c9:89:b3:3d:65:5c:0a:
6b:f8:7f:91:1e:75:bb:e5:ce:b9:51:72:62:61:d7:05:34:76:
36:e6:56:ed:27:c0:0c:56:64:91:de:ff:e5:2c:36:d5:58:0d:
24:88:3e:15:28:b3:6a:ed:a9:ec:ad:a8:10:21:ce:d1:9a:2d:
ba:69:ac:97:11:3a:60:1e:af:d9:8e:c4:eb:e1:78:98:05:0c:
e8:a2:90:29:c7:37:c9:fc:fe:5a:e5:64:4a:07:26:03:be:2d:
93:ae:5c:11:46:d5:7e:b8:51:38:46:49:fc:9a:ac:3d:78:e1:
42:fe:17:89:b2:d1:8f:0f:41:c6:da:80:a7:b5:6f:c4:b1:74:
5f:dc:1d:30:42:26:8a:cc:a5:bd:45:d5:9e:ce:d9:77:35:fc:
48:ee:6a:2d:1b:da:ea:a5:2e:b9:20:71:ec:76:04:f9:14:02:
95:26:a9:79:0d:74:99:f5:f9:c8:a3:bf:6d:42:00:26:27:fe:
4a:d8:07:f6:48:2f:be:17:7a:37:26:ea:a7:4d:ce:66:b7:e7:
71:7f:50:a8:0b:11:4f:fd:ba:c2:3a:12:c2:68:44:79:63:9a:
80:0e:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:21 2024 by rpki-client on console-fra.rpki-client.org