Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: RXmnpYtwlBrWSrUfHPAEbBWupotuMWPlKwQoenp0a74=
Subject key identifier: AD:33:38:F9:43:C5:5C:84:9D:DD:BC:F5:C6:D3:E7:B1:6A:3A:25:46
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0190459D36A08A557CD4550829601423E97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 11DB
Signing time: Sun 23 Jun 2024 15:00:49 +0000
Manifest this update: Sun 23 Jun 2024 15:00:49 +0000
Manifest next update: Mon 24 Jun 2024 15:00:49 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: b4YiQr1PrqykfIgS9n7+MsIJ+TIgaJHdy7VWOGW2Ibs=)
2: TSDT-ft-OdD2QWk0fWRe4-R3yL0.roa (hash: x0eqQ/39ulq7NV0BUaCIVjYZMlvSe9jAUoQmKidG9W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:36:a0:8a:55:7c:d4:55:08:29:60:14:23:e9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jun 23 15:00:49 2024 GMT
Not After : Jun 24 15:00:49 2024 GMT
Subject: CN=ad3338f943c55c849dddbcf5c6d3e7b16a3a2546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:56:ed:24:42:5c:26:c3:a7:94:30:e1:35:
eb:eb:1e:be:81:9a:f0:b8:3c:cb:ab:07:02:3d:dd:
db:53:c7:d2:51:58:87:a8:62:d5:d5:f6:bf:0d:be:
95:f4:cf:eb:cc:42:75:a9:c8:a9:f0:14:a8:14:40:
3e:5f:41:4e:dc:5e:b4:9b:1c:c1:ce:dd:e5:d1:30:
8a:b7:f7:64:bc:a8:66:14:d8:25:fe:00:c6:75:54:
7d:ce:c1:3f:38:91:5c:e2:56:8a:9e:3c:12:e7:f1:
6f:8e:00:82:bf:dd:bc:b0:f5:70:33:dc:a5:fa:54:
36:06:b6:58:33:53:e7:2f:69:5b:9a:94:55:21:c5:
78:ce:42:3a:4a:3d:ba:67:8c:93:27:35:cd:02:df:
eb:80:8d:a6:57:6f:83:b9:b9:43:90:65:10:3b:9c:
2c:9f:55:49:e8:be:f3:9b:2a:ed:73:39:b9:2c:8d:
a3:bc:b9:e2:d8:75:9d:37:df:04:23:ec:5f:ef:d4:
31:3f:48:77:4e:5c:53:1b:85:f3:d1:2a:41:9e:5e:
6c:1d:f8:63:53:84:a8:7d:2d:fd:3d:90:20:ba:aa:
e3:c2:fa:3e:23:9b:9a:52:87:87:4e:0c:db:18:70:
5c:4f:5f:14:3f:35:f3:63:0a:40:2b:8a:af:47:cf:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:38:F9:43:C5:5C:84:9D:DD:BC:F5:C6:D3:E7:B1:6A:3A:25:46
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:de:c3:69:d7:66:4c:27:a0:99:ec:c3:a7:ab:c6:16:52:91:
27:79:08:02:26:8c:59:5c:70:17:85:b0:7b:da:61:42:ce:44:
a5:2b:64:6e:6a:f7:1a:f2:bf:71:45:0e:40:b2:84:2b:ac:b3:
2f:40:20:ee:9b:d6:a5:7d:44:4b:37:ab:9f:32:ab:42:32:8a:
cc:cb:b7:63:1c:78:d9:17:12:6d:b6:b7:d2:3f:04:8c:dc:83:
91:80:9e:08:a8:65:9d:58:d7:17:08:6f:43:1b:30:a0:35:ce:
5f:f6:b7:d8:a8:6e:80:0c:6b:18:dd:4b:e0:88:27:bd:6a:9b:
e8:b5:e2:f8:b5:30:b1:5b:04:ab:a3:d7:07:a5:dd:3e:8d:dd:
ee:00:fb:a5:09:14:f3:e6:dd:f7:64:33:fd:d1:0a:79:0e:42:
50:3f:a6:ea:93:14:66:72:95:fb:af:ce:aa:9d:43:d9:8f:47:
f2:1f:c6:0f:11:e5:f4:66:35:df:ee:1c:19:ad:f9:a5:ad:af:
9f:29:6c:55:5d:89:e2:76:5d:92:19:83:9d:c7:fa:8e:0d:69:
f0:c1:70:96:d7:f2:13:0c:6d:5c:63:80:e7:43:99:d4:0c:7f:
b2:10:27:8a:16:24:10:54:69:58:c4:25:5c:4c:4e:4f:ac:3a:
ae:a8:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:23:45 2024 by rpki-client on console-ams.rpki-client.org