Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: 10jeOI0LUub7wHopI6rKwDT45ZuogqSizoiK3Qm9aiM=
Subject key identifier: 3C:05:97:70:2E:5C:FA:32:21:7F:9F:89:2E:F4:E4:53:39:F0:10:87
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 4EFF2B95845B708CAEF5598652B261A380A9DE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 01DE
Signing time: Mon 25 Nov 2024 09:05:07 +0000
Manifest this update: Mon 25 Nov 2024 09:00:07 +0000
Manifest next update: Tue 26 Nov 2024 11:28:07 +0000
Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: Q3QiqxUuMSp7WUu02mA+KyUsM0fons3AJE9l+1oNWeY=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
3: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: zNX7hH6WeSJX6qEhi/JdeBTaZ7geJIRKSt3d1rvP5tg=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ff:2b:95:84:5b:70:8c:ae:f5:59:86:52:b2:61:a3:80:a9:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Nov 25 09:00:07 2024 GMT
Not After : Nov 26 11:28:07 2024 GMT
Subject: CN=3C0597702E5CFA32217F9F892EF4E45339F01087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:bd:0a:62:fe:6d:63:72:fa:0f:d3:bd:00:
de:9d:79:df:64:4c:87:23:0f:a8:0a:b8:b2:c3:65:
34:7d:6d:a7:9a:55:db:bc:0c:ce:40:20:20:f1:95:
a7:14:a7:cb:bf:ef:c2:b4:43:a5:24:1f:6c:ec:46:
21:c8:1b:d7:a5:d1:41:c3:5b:f3:81:6e:6e:92:41:
f1:56:3d:51:cf:23:cb:29:0c:a1:48:5b:82:69:15:
40:7a:c1:ed:b2:8d:6a:f3:d9:fd:f1:10:e2:4e:8f:
9a:c6:24:50:7a:26:eb:8c:41:b8:25:4f:3e:64:c8:
ae:33:83:85:f8:ea:dc:d9:cd:a4:ad:83:54:99:1c:
7f:ed:92:2a:fd:0d:2c:f7:c1:a8:2a:59:57:92:3e:
4a:9e:cd:11:2d:e4:03:93:40:84:4f:ab:02:07:53:
5e:11:97:5d:94:03:b6:3d:9a:60:b8:d7:ec:d1:28:
c6:99:0c:f8:1c:90:c8:a3:27:0e:1e:2a:ed:48:05:
20:f6:70:8a:8c:e6:2d:5c:3a:b9:7a:9f:05:36:fe:
8a:d5:7d:54:48:d9:b7:ed:4e:f4:da:52:85:e3:17:
5c:06:6d:00:7d:40:5b:5a:76:e5:12:e1:a1:45:5c:
2f:d4:47:fe:8f:93:d0:4e:4c:f6:9e:3b:61:41:4e:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:97:70:2E:5C:FA:32:21:7F:9F:89:2E:F4:E4:53:39:F0:10:87
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7f:93:07:db:7d:ac:14:f3:d3:09:7a:d6:63:5a:75:cd:92:
1a:91:97:f6:1a:bb:78:2d:37:63:2e:9c:c6:e2:c4:02:be:07:
6e:6d:38:24:aa:97:78:c3:f3:94:57:ee:3a:cf:78:bc:27:85:
c7:d6:dc:da:29:74:e1:dd:cb:6a:30:1c:7c:df:4b:c1:c8:2d:
c1:b2:f4:b7:15:58:06:ee:b3:86:f7:f7:a4:92:e6:38:81:a9:
07:e7:e6:07:b0:33:23:c7:62:5b:01:71:b2:67:fa:a9:4f:dc:
21:12:d3:2e:4f:23:e1:23:fe:34:28:d7:8b:ed:b0:db:04:7c:
30:b6:ba:86:e4:8c:b6:b8:f3:d4:e8:4f:fc:b1:1b:71:95:5c:
02:65:e8:13:1e:4c:78:02:b3:75:f9:a8:2f:5c:e1:1e:e8:c6:
b7:3f:26:dd:ba:44:1f:21:fb:14:d9:8a:95:d7:6b:16:f7:47:
ee:18:0c:b3:e3:02:3a:2c:28:9b:c0:d2:fc:a4:e0:73:c7:14:
27:76:da:d7:e6:48:8f:c4:fb:e0:ae:c1:a0:09:bd:8e:73:d3:
bb:f8:c2:7e:0c:81:d9:4a:38:2c:73:6e:a1:a2:ab:16:27:0f:
c1:a8:7d:26:1c:3f:80:f1:a7:e8:5f:4a:88:77:5c:b0:d0:04:
5c:c7:fe:db
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 25 12:00:56 2024 by rpki-client on console-ams.rpki-client.org