Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier: 83iYa58ZMEbFxnQhHuSXFSbgcyCAZy1XnNGodBWMmRo=
Subject key identifier: 98:6D:8C:CA:9A:76:B5:19:DE:E8:8F:D6:30:9A:E7:2E:EB:A1:B7:E9
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial: 0190494327F70592C5499BB40DD713732B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number: 05E9
Signing time: Mon 24 Jun 2024 08:00:56 +0000
Manifest this update: Mon 24 Jun 2024 08:00:56 +0000
Manifest next update: Tue 25 Jun 2024 08:00:56 +0000
Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: nCg7sK/cFbhkkGMc9JAvygJOx7IwdQoT8uhGvLChJrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:43:27:f7:05:92:c5:49:9b:b4:0d:d7:13:73:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
Validity
Not Before: Jun 24 08:00:56 2024 GMT
Not After : Jun 25 08:00:56 2024 GMT
Subject: CN=986d8cca9a76b519dee88fd6309ae72eeba1b7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:81:33:88:a0:38:45:bb:73:5e:64:a8:e8:
52:28:1c:d5:28:ca:18:d9:74:3f:b9:dd:62:d3:cb:
1e:cc:3d:7a:55:ff:22:2e:fc:79:9c:bf:0e:bf:5b:
59:5d:06:09:37:a2:46:3b:80:63:59:1b:21:71:a4:
6f:d8:78:3f:45:28:d9:6f:25:c1:c1:38:a4:46:6b:
f3:a5:f2:59:8a:f3:15:f9:58:7f:8b:8a:db:4e:1e:
d2:1b:07:80:6e:17:63:7e:f3:47:17:d1:f6:4b:10:
f6:9b:26:78:33:39:d6:11:b0:fa:69:e0:a2:d1:23:
55:83:09:39:4c:48:72:de:8d:09:d5:5f:d9:7b:7c:
e6:af:f3:af:01:77:5a:1b:b4:87:85:a8:dd:ea:eb:
a1:c1:45:d3:a7:fa:7c:10:40:f7:34:ce:ac:ac:1e:
59:b7:f9:17:61:46:4a:28:a6:0c:7d:21:98:39:e2:
2e:d1:eb:01:d1:2b:13:27:99:01:4a:ab:5d:94:f1:
2d:80:95:c4:49:6b:df:5c:65:36:ea:18:6e:f3:7c:
87:97:37:12:c4:5b:79:98:f0:9d:1a:27:da:8d:56:
78:19:33:93:fd:86:64:7d:ad:de:f9:df:50:07:8b:
24:a3:67:24:83:e2:4a:c4:f4:80:6f:d7:c9:bb:31:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:8C:CA:9A:76:B5:19:DE:E8:8F:D6:30:9A:E7:2E:EB:A1:B7:E9
X509v3 Authority Key Identifier:
keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:86:d4:77:61:f9:30:99:65:2b:4a:cf:88:9e:74:fc:64:16:
a5:2a:5b:c3:bf:01:a3:82:e6:ef:2a:2f:c5:33:63:6c:a3:85:
ee:59:bd:87:bc:a5:20:1a:f6:19:7e:e8:be:e5:3e:cf:08:48:
33:dc:d0:f6:2a:52:99:db:12:af:93:1b:6b:4c:95:35:93:0f:
d2:c7:7e:40:59:c0:97:34:16:fd:c6:27:3d:fc:14:25:f3:25:
9a:86:52:15:14:fd:d1:6d:fe:36:c8:55:88:fe:70:5c:43:d3:
4d:a0:b0:bf:6c:50:d6:04:db:fe:19:71:42:6b:2f:5f:0c:9c:
da:b3:fc:9e:5b:7f:bf:45:5f:e3:23:ed:95:df:93:3e:ba:ec:
fb:82:71:ac:2f:8f:4d:64:19:b6:0b:df:ed:ff:6f:87:ec:d6:
44:d4:16:a5:f9:e3:51:bb:99:fe:de:1f:c9:68:44:60:cf:9f:
52:82:6c:1d:61:45:61:db:59:2c:13:e7:01:e6:10:5e:30:81:
a1:de:b0:bf:bf:ff:33:2c:dc:96:ae:26:40:98:fc:de:03:72:
12:69:c2:2e:df:61:49:1c:60:94:cd:e1:b9:8d:89:15:5f:f7:
af:7f:82:db:19:8f:37:27:d7:30:ad:7a:97:30:22:d3:f7:a4:
28:2f:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:55:03 2024 by rpki-client on console-ams.rpki-client.org