Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: o9muHW3zJzyOG1SEAq1S/FaN64yabYvNE42/WqOL7Fw=
Subject key identifier: 6F:52:10:1B:17:19:1B:25:01:7E:2D:89:B1:A3:B8:1A:18:9C:9E:82
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 018F8F026D1089C49249A0447156F7E03D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 09A9
Signing time: Sun 19 May 2024 04:00:51 +0000
Manifest this update: Sun 19 May 2024 04:00:51 +0000
Manifest next update: Mon 20 May 2024 04:00:51 +0000
Files and hashes: 1: Am-JTOTVUfUlVjj7YWkmV1cgCcU.roa (hash: vWSA3yoXKlwxZklnLvOhixkEd/mLHxgs1OO1D5BH/UE=)
2: okHGe2tEUdAq6EWzMEQJSAcgCUw.roa (hash: Lomk9S59psJjTd4fiLSeS+yPGt4K2YDMCol4PCFIm20=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: bxrM6MVROYEb3zz1oLQm7hm/nFttaFdH2o5ftsEpGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:02:6d:10:89:c4:92:49:a0:44:71:56:f7:e0:3d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: May 19 04:00:51 2024 GMT
Not After : May 20 04:00:51 2024 GMT
Subject: CN=6f52101b17191b25017e2d89b1a3b81a189c9e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:8e:1f:b6:67:8a:5f:45:50:e1:93:42:a0:
05:b1:34:12:38:43:43:ce:86:8c:cb:b0:06:1d:2f:
40:25:95:a4:ed:b1:b7:57:37:47:ee:79:1b:25:3b:
3c:af:7e:9d:eb:22:b3:50:f0:10:d3:c2:4f:97:d6:
2b:d0:aa:87:ba:93:93:17:80:71:ae:50:56:cd:c3:
96:11:8e:54:f9:eb:6b:fa:4c:56:9f:f7:d3:74:ce:
7b:2d:03:56:0f:e7:9c:21:2d:cb:e2:63:a8:da:cb:
a6:2a:41:c6:71:ad:66:cf:83:60:6c:41:b0:7e:ab:
16:af:69:55:a2:a8:d6:51:53:2c:40:17:52:2d:5c:
15:bf:da:07:c0:23:2e:f1:d4:a3:71:a1:aa:d2:8a:
01:93:df:fb:b2:86:1a:c5:08:e1:70:9a:30:38:1a:
14:bb:99:f3:8b:ce:81:2b:5e:a0:c3:77:05:4c:a9:
bb:69:dd:c9:4b:32:06:08:b6:a8:e4:66:84:0b:48:
0c:3c:d1:5e:98:0c:27:fe:0a:43:fe:38:e3:87:87:
6d:9c:6f:ed:3d:ef:f3:99:e0:a8:10:29:0c:85:ac:
76:43:ae:72:74:6c:f6:8a:17:5c:28:26:2a:3a:67:
e8:b1:70:a6:54:43:c9:3d:c2:68:13:97:c6:76:38:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:10:1B:17:19:1B:25:01:7E:2D:89:B1:A3:B8:1A:18:9C:9E:82
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:27:05:20:5a:b0:39:d3:bf:58:c7:ea:53:56:a0:ab:d4:
50:ad:4b:fd:46:bb:22:91:3e:18:49:7e:59:3b:14:5e:dc:ff:
e6:05:6f:9a:e6:96:b7:cd:b6:f8:6a:9b:85:ac:f2:99:93:28:
92:75:af:2e:3d:16:a7:02:ac:20:9e:18:71:92:cc:11:8d:4d:
20:72:1a:4f:a5:fa:b7:da:4d:0e:c8:50:ba:d6:bd:2d:d3:5a:
93:53:1a:54:a1:98:35:81:17:73:28:98:db:78:e8:98:2b:d9:
f2:f5:57:86:50:89:1b:76:27:cb:8b:3e:32:79:42:e8:94:4c:
10:b5:ff:e1:87:e1:7c:b4:75:99:fa:80:b1:d3:3e:44:23:d3:
54:8c:d2:98:21:91:c6:72:d6:6c:85:47:8e:00:a9:18:64:51:
85:1e:00:fe:63:4b:70:b6:f5:dd:08:b4:d5:8f:b4:45:4d:3f:
03:9d:f3:e4:0d:1b:1f:6c:0a:e2:56:15:2b:d8:72:a5:98:e2:
63:ea:95:59:c5:07:53:d1:31:bc:0a:46:7f:04:5a:85:0e:3f:
bf:79:68:0a:28:48:93:94:0a:9f:78:4b:a0:63:d9:f7:92:94:
0a:bf:fc:9e:60:3d:4d:e8:bb:8d:03:cc:0e:74:50:3e:33:bc:
f7:9a:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:50:58 2024 by rpki-client on console-fra.rpki-client.org