Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
File: XbomMhShFwVRmA7pFxn42Ixia14.mft (raw, json)
Hash identifier: NyJ/udV2JgLM4s/S53/O+LaPjgoWaJnYWJeVWS7SSbE=
Subject key identifier: 02:5F:34:4A:C7:E4:E7:03:80:65:66:2F:EB:6B:F1:4A:52:A5:68:64
Authority key identifier: 5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
Certificate issuer: /CN=5dba263214a1170551980ee91719f8d88c626b5e
Certificate serial: 019045667F9357B411790BAE19120D41F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
Manifest number: 0D45
Signing time: Sun 23 Jun 2024 14:01:03 +0000
Manifest this update: Sun 23 Jun 2024 14:01:03 +0000
Manifest next update: Mon 24 Jun 2024 14:01:03 +0000
Files and hashes: 1: XbomMhShFwVRmA7pFxn42Ixia14.crl (hash: Y9F2+NGtXLwL/k7QbONQg9mc98MsHElNs/AQXOS5iB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:7f:93:57:b4:11:79:0b:ae:19:12:0d:41:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dba263214a1170551980ee91719f8d88c626b5e
Validity
Not Before: Jun 23 14:01:03 2024 GMT
Not After : Jun 24 14:01:03 2024 GMT
Subject: CN=025f344ac7e4e7038065662feb6bf14a52a56864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:d4:83:89:71:3b:0c:aa:c0:db:c5:65:03:
55:3e:e7:82:4a:ad:c0:c1:c4:98:a7:8a:21:d8:61:
58:88:ba:55:2d:f1:fd:cd:e4:3b:7c:18:d7:59:07:
d8:d7:04:1b:11:35:c7:44:68:f9:3f:b5:4d:f3:1b:
f4:67:7f:87:17:1f:5a:99:46:4d:a0:16:8f:db:69:
8f:ec:2b:73:23:79:cf:94:a4:92:ee:7a:14:fe:ff:
ee:dc:a0:62:e7:fc:d8:b2:02:24:1f:19:91:ab:f2:
27:88:3f:2a:9c:62:61:c3:db:88:ec:76:e2:90:4d:
3f:70:ff:21:1f:60:87:69:4d:28:9f:76:7e:3c:7f:
fd:39:8f:93:68:60:35:65:eb:48:4d:8f:b7:ef:5b:
6f:fd:d6:c9:41:96:b5:6c:eb:e2:09:2c:bd:56:8d:
03:0a:cd:00:40:40:f4:e6:bd:db:c5:a6:0e:f8:24:
47:3b:e0:2e:84:ab:99:59:e2:83:4e:ed:d9:ca:f2:
1a:59:c3:97:5f:09:a5:ce:5c:18:d6:5a:0b:2a:f4:
17:09:5e:48:89:af:61:b0:f2:a8:20:22:e2:27:8a:
d4:76:f5:83:5a:e2:5d:fc:e8:ce:53:94:ae:77:87:
fe:e0:c4:fe:e5:d3:5c:0e:a8:65:35:61:af:f1:2e:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:34:4A:C7:E4:E7:03:80:65:66:2F:EB:6B:F1:4A:52:A5:68:64
X509v3 Authority Key Identifier:
keyid:5D:BA:26:32:14:A1:17:05:51:98:0E:E9:17:19:F8:D8:8C:62:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbomMhShFwVRmA7pFxn42Ixia14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4e414f-0a76-4fe9-8b7b-135a93982931/1/XbomMhShFwVRmA7pFxn42Ixia14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:9c:04:96:1f:bc:46:5a:dd:59:10:7e:3e:86:ea:6d:29:
f6:64:dc:b8:ca:f6:7e:57:e0:57:20:fa:13:37:48:66:60:28:
94:62:9d:41:2e:f6:25:10:ff:e1:6c:c1:39:74:69:24:6f:cd:
61:ff:81:84:d9:54:49:44:94:bf:b0:cd:e5:d8:e9:92:67:75:
3a:a6:3e:c6:af:1e:4b:92:4e:c4:2a:cf:1e:d4:a8:0f:8b:bb:
0f:1a:c2:52:11:ed:14:65:c3:da:a5:42:cc:4b:cc:a9:9c:de:
fc:ba:a1:00:10:7a:0a:b1:21:e1:fd:1f:75:ff:cd:8e:cb:25:
a4:06:65:a4:26:ab:f8:c4:88:fc:06:5e:e0:90:68:f2:f3:2e:
aa:f5:97:9f:28:02:77:74:a6:6a:06:fd:5e:fa:25:79:bb:26:
36:f3:f7:6e:a9:32:32:bf:ee:6c:c3:0a:1d:b8:10:55:16:32:
e2:cb:af:ab:24:c7:06:55:64:e1:18:fc:81:be:41:31:51:00:
c0:e3:de:72:c7:7c:3f:ab:68:28:bf:b0:cf:70:a8:1a:d7:8d:
10:3e:b5:8b:75:e4:55:5c:0c:98:9c:a0:c3:44:68:c9:fc:4d:
84:71:b0:e8:d9:49:09:ea:e4:0e:9b:5f:85:49:1f:d7:55:b0:
36:26:bc:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFZn+TV7QReQuuGRINQfhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYmEyNjMyMTRhMTE3MDU1MTk4MGVlOTE3MTlmOGQ4OGM2
MjZiNWUwHhcNMjQwNjIzMTQwMTAzWhcNMjQwNjI0MTQwMTAzWjAzMTEwLwYDVQQD
EygwMjVmMzQ0YWM3ZTRlNzAzODA2NTY2MmZlYjZiZjE0YTUyYTU2ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuITUg4lxOwyqwNvFZQNVPueCSq3A
wcSYp4oh2GFYiLpVLfH9zeQ7fBjXWQfY1wQbETXHRGj5P7VN8xv0Z3+HFx9amUZN
oBaP22mP7CtzI3nPlKSS7noU/v/u3KBi5/zYsgIkHxmRq/IniD8qnGJhw9uI7Hbi
kE0/cP8hH2CHaU0on3Z+PH/9OY+TaGA1ZetITY+371tv/dbJQZa1bOviCSy9Vo0D
Cs0AQED05r3bxaYO+CRHO+AuhKuZWeKDTu3ZyvIaWcOXXwmlzlwY1loLKvQXCV5I
ia9hsPKoICLiJ4rUdvWDWuJd/OjOU5Sud4f+4MT+5dNcDqhlNWGv8S50VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJfNErH5OcDgGVmL+tr8UpSpWhkMB8GA1UdIwQY
MBaAFF26JjIUoRcFUZgO6RcZ+NiMYmteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGJvbU1oU2hGd1ZSbUE3cEZ4bjQySXhpYTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80ZTQxNGYtMGE3Ni00ZmU5LThiN2It
MTM1YTkzOTgyOTMxLzEvWGJvbU1oU2hGd1ZSbUE3cEZ4bjQySXhpYTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80ZTQxNGYtMGE3Ni00ZmU5LThiN2ItMTM1YTkzOTgyOTMx
LzEvWGJvbU1oU2hGd1ZSbUE3cEZ4bjQySXhpYTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSKcBJYf
vEZa3VkQfj6G6m0p9mTcuMr2flfgVyD6EzdIZmAolGKdQS72JRD/4WzBOXRpJG/N
Yf+BhNlUSUSUv7DN5djpkmd1OqY+xq8eS5JOxCrPHtSoD4u7DxrCUhHtFGXD2qVC
zEvMqZze/LqhABB6CrEh4f0fdf/NjsslpAZlpCar+MSI/AZe4JBo8vMuqvWXnygC
d3Smagb9XvolebsmNvP3bqkyMr/ubMMKHbgQVRYy4suvqyTHBlVk4Rj8gb5BMVEA
wOPecsd8P6toKL+wz3CoGteNED61i3XkVVwMmJygw0RoyfxNhHGw6NlJCerkDptf
hUkf11WwNia8sg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:07 2024 by rpki-client on console-fra.rpki-client.org