Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
File: CANpo1iWH3KE-9WR6SdzfNsFw10.mft (raw, json)
Hash identifier: WMLLsf3QK//VeFAzs+165C59k1UHItKWOdPyuSc4m+Y=
Subject key identifier: 0E:10:77:66:3C:A1:36:B0:E4:67:C5:1C:36:50:53:AA:82:23:0B:16
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 01901D0F03D0D39897AE931258201AC847B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 18:00:41 +0000
Manifest this update: Sat 15 Jun 2024 18:00:41 +0000
Manifest next update: Sun 16 Jun 2024 18:00:41 +0000
Files and hashes: 1: CANpo1iWH3KE-9WR6SdzfNsFw10.crl (hash: pFDDP9t7OSHVe8BTaqKkkXfJ5w9cTUJQRz2RtLRsZNM=)
2: TSDT-ft-OdD2QWk0fWRe4-R3yL0.roa (hash: x0eqQ/39ulq7NV0BUaCIVjYZMlvSe9jAUoQmKidG9W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:03:d0:d3:98:97:ae:93:12:58:20:1a:c8:47:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jun 15 18:00:41 2024 GMT
Not After : Jun 16 18:00:41 2024 GMT
Subject: CN=0e1077663ca136b0e467c51c365053aa82230b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:22:4c:f5:9d:fd:7e:39:bf:9a:ed:46:61:
77:54:21:dd:f7:c4:fa:f8:1f:9f:b8:d1:dd:36:1a:
4a:77:93:b5:40:32:8d:af:22:94:c9:c7:8f:75:b8:
d7:fd:1e:78:1e:05:da:92:8e:c9:8b:b4:5a:e7:90:
18:93:33:9d:d2:fa:86:68:1b:a8:16:d0:35:2b:78:
b4:ff:dc:6c:07:8e:3b:ab:b7:89:bb:1b:f6:2c:93:
7e:58:4a:97:bd:89:28:9b:5b:8b:d7:5c:73:a8:d6:
ad:b1:32:a9:1e:c5:9e:96:ec:bb:2d:a4:aa:1a:c3:
e3:6a:31:65:50:fc:a0:3f:ad:2f:5a:21:63:57:e9:
17:ac:08:ba:5f:fb:4d:3f:ec:92:8b:1a:8f:ab:4a:
0a:3d:4e:5f:a6:95:47:14:88:ae:bb:4b:e0:de:52:
4f:52:1d:a3:b1:f1:e5:5f:fa:18:51:d4:c6:fe:53:
1b:42:aa:f7:14:c7:c9:7a:37:f3:00:97:92:78:a6:
53:31:c0:3a:39:51:53:ec:75:ad:98:90:5e:f8:9d:
e4:ee:d5:b1:9e:a8:50:33:12:9c:1a:23:31:68:e0:
25:b7:84:87:85:0c:e8:ee:a6:65:a6:51:ad:96:96:
01:43:e8:40:80:3b:f8:8c:c4:b3:24:58:d9:7d:8f:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:10:77:66:3C:A1:36:B0:E4:67:C5:1C:36:50:53:AA:82:23:0B:16
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b7:83:1b:1c:0f:6f:2f:10:73:da:90:23:4f:46:6e:f3:f9:
c8:62:36:91:a2:b2:f2:11:03:4d:5a:62:4c:a5:0a:ee:07:a6:
fa:36:60:94:ff:62:ed:a0:7b:37:92:ad:73:e1:09:9a:d0:ba:
ad:3d:9f:ef:69:a1:35:02:90:95:10:07:11:56:de:34:11:32:
5d:4e:e1:09:63:b3:dd:72:21:57:42:02:31:52:f6:ec:5e:83:
0a:2f:59:a3:3e:1e:e2:ec:2b:f5:a5:04:05:74:31:b1:86:a0:
59:31:f8:b3:48:11:f5:e5:3a:dd:fa:3b:f5:8c:1f:88:1f:64:
4e:6d:1b:2f:15:f9:d0:73:cf:74:c0:32:37:43:8a:4d:2f:1d:
91:f4:7a:3b:cc:4e:c8:92:73:a6:6f:2a:09:83:c0:df:4b:60:
55:b7:de:fc:fd:c8:e9:6f:7f:73:ae:6f:ae:97:f6:18:27:22:
96:cc:a8:54:4d:68:f0:62:d8:8d:e0:fa:4f:3f:68:d9:29:5f:
b5:59:09:9e:ba:cf:1f:39:ce:fd:5e:27:90:6f:d0:1a:09:7f:
49:1d:d1:e5:6e:a3:e7:93:7e:91:f7:dc:da:7a:32:57:a2:61:
6c:28:44:f8:d5:bc:c8:05:d7:48:af:5d:df:4c:cd:6d:93:e3:
bd:68:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:16 2024 by rpki-client on console-ams.rpki-client.org