Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
File: gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft (raw, json)
Hash identifier: /U1UTSkoEKRKO32dvg85gEejdFbDd1nM07RUDucj6+w=
Subject key identifier: 14:D2:76:76:3F:79:96:C3:8E:34:07:EE:6E:C6:65:23:D9:86:7F:C3
Authority key identifier: 81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61
Certificate issuer: /CN=81b14fae44dfa0e3349167433c924c9645739861
Certificate serial: 0190459D77BD91406A7306EE7B1712A8EDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
Manifest number: 0A71
Signing time: Sun 23 Jun 2024 15:01:05 +0000
Manifest this update: Sun 23 Jun 2024 15:01:05 +0000
Manifest next update: Mon 24 Jun 2024 15:01:05 +0000
Files and hashes: 1: CiO8rz6OpJP8kXEDtL6_femYWdw.roa (hash: xrGwN0Y9hlv70stNpeICmZNMBWdiRqCHB0a8cFQp9FI=)
2: gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl (hash: OjawoIC8QcY3xdpMEB8LM17HYGCRKrIeJTZzX35fGFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:77:bd:91:40:6a:73:06:ee:7b:17:12:a8:ed:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b14fae44dfa0e3349167433c924c9645739861
Validity
Not Before: Jun 23 15:01:05 2024 GMT
Not After : Jun 24 15:01:05 2024 GMT
Subject: CN=14d276763f7996c38e3407ee6ec66523d9867fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:f6:30:b7:dc:b9:bf:20:3c:9f:b4:27:40:
a6:29:cd:4c:2b:7a:60:79:81:3a:81:23:d0:68:b7:
60:e8:a6:98:bd:ad:a1:04:a3:65:b0:51:ac:09:5e:
a3:6c:f5:7b:6f:e2:ce:ca:53:ce:4a:f7:b1:e4:15:
fe:05:02:88:26:ba:1d:91:35:d5:bf:30:11:e4:f5:
44:d6:7b:9f:24:59:6e:5c:27:04:58:55:fb:9f:31:
31:44:05:be:7c:ab:0b:6f:21:73:90:fb:ba:05:04:
1e:70:b3:13:46:aa:73:ca:35:e9:4c:c4:df:ab:12:
fd:c6:ae:bc:d8:d3:65:ca:4d:0e:e9:cf:02:e2:15:
89:c6:96:6d:d9:df:93:98:f3:bc:65:72:46:14:a8:
47:e1:f7:ff:c9:5f:13:9b:bc:68:39:e0:9f:17:4b:
81:df:4f:0d:64:ab:f5:0a:49:86:39:37:7e:9c:8f:
fe:2a:a6:ff:f9:08:9b:aa:de:04:c8:f4:19:77:19:
95:09:b0:5a:c9:cc:3f:19:5d:6e:fb:85:76:c6:88:
e7:5d:d6:f4:fc:06:83:b6:a9:ba:a0:48:af:59:0b:
a9:79:a0:c2:48:59:dd:18:84:95:26:5c:7b:6f:b0:
46:4b:42:0d:5f:46:9a:59:15:87:36:c6:89:92:3a:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:76:76:3F:79:96:C3:8E:34:07:EE:6E:C6:65:23:D9:86:7F:C3
X509v3 Authority Key Identifier:
keyid:81:B1:4F:AE:44:DF:A0:E3:34:91:67:43:3C:92:4C:96:45:73:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbFPrkTfoOM0kWdDPJJMlkVzmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5b1319-b987-4f94-b326-5769019fefb8/1/gbFPrkTfoOM0kWdDPJJMlkVzmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:4f:18:9e:ec:40:34:ff:72:5e:ca:20:99:f3:7a:87:02:
18:ae:d3:38:c6:f6:96:e0:a7:21:52:6d:5f:36:55:58:12:98:
d6:dc:04:26:af:6b:82:1b:ef:49:cd:6c:ba:af:8d:81:00:d0:
f8:8e:9e:e0:bf:80:6d:7b:07:cb:47:53:bb:94:f3:f4:aa:88:
f7:a5:36:16:dc:16:fd:d9:00:dc:d4:e0:f0:3c:fd:50:cb:de:
f0:dd:fe:ae:81:16:44:0d:e6:cd:68:c9:c9:1c:98:e8:47:6c:
ac:7c:42:7b:6d:9e:8c:df:e7:52:db:41:05:e7:4a:30:68:36:
1e:59:ef:55:b3:93:1b:40:40:b2:c6:33:28:5a:29:f0:61:a1:
0f:f6:29:b2:be:b7:63:75:06:64:c8:bb:3a:bf:f2:8c:21:ec:
99:d5:b7:f6:d2:cf:9b:79:cb:bb:fe:78:43:4a:88:88:16:b1:
c4:70:8f:36:0b:ba:99:10:a3:72:d1:85:85:0b:11:ac:e0:ec:
63:54:f5:7e:61:70:d9:b6:ee:d8:47:01:ee:9c:8c:d3:d7:b2:
80:be:b0:79:10:86:2e:88:f5:d9:d7:2a:61:36:c1:ae:4f:83:
bb:74:da:ca:ea:62:a1:75:81:a5:14:ab:ee:44:c8:f5:32:22:
74:4a:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:11 2024 by rpki-client on console-fra.rpki-client.org