Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: ltvpOokXJ9AVWLK+vBw3R5ESvkkPsO/s6X3UCUnoPyk=
Subject key identifier: 74:B9:79:3F:BD:CF:4C:5A:02:34:86:A3:C0:7B:D1:BF:33:43:3F:92
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01901E9002A745C2A0FA1A1A974A42FB1920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 11C2
Signing time: Sun 16 Jun 2024 01:01:12 +0000
Manifest this update: Sun 16 Jun 2024 01:01:12 +0000
Manifest next update: Mon 17 Jun 2024 01:01:12 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: BDKKAU2KmX/0wGfRXRWVPSWYoNI75yXZ/D7SmgKCJpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:02:a7:45:c2:a0:fa:1a:1a:97:4a:42:fb:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Jun 16 01:01:12 2024 GMT
Not After : Jun 17 01:01:12 2024 GMT
Subject: CN=74b9793fbdcf4c5a023486a3c07bd1bf33433f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:66:55:20:d3:d7:e6:94:bd:41:8c:87:c9:
9e:2a:78:ae:18:d0:43:69:90:98:d5:1c:2c:03:71:
9e:cd:59:d0:0c:4b:c0:b7:d4:99:8f:7d:78:f1:96:
a3:9b:5f:d5:88:fb:41:d9:1d:0c:ab:85:41:2b:dd:
86:41:47:27:bb:5c:0e:41:ac:90:ad:e4:9c:d6:4e:
d6:9c:86:5e:90:87:2c:8a:a6:dd:3e:e8:62:d7:54:
8a:77:7e:2c:08:13:e6:82:0a:82:46:c7:a4:94:f4:
a2:ee:c4:b0:e2:df:05:31:fd:db:44:06:45:ce:50:
80:3f:30:ac:d2:46:d9:01:19:b4:87:09:4c:f9:d3:
5f:9e:58:3b:1f:76:6c:3b:b7:a4:28:1c:fb:18:8a:
1a:50:28:31:cf:f6:4d:24:4c:fa:0f:25:07:32:e4:
d0:de:c8:6c:92:65:00:e7:d2:56:b9:5f:20:13:29:
74:45:4b:d6:7a:fb:75:44:ef:bb:34:10:c2:63:a5:
40:ae:3b:4e:8f:5f:e9:e0:62:e5:8c:02:90:16:28:
b5:52:50:34:8d:1b:26:14:41:df:8a:e9:e5:65:ce:
a0:97:e2:17:d7:31:72:8e:25:05:e7:6f:37:7b:b7:
b6:b0:34:d3:47:c4:ae:2e:e0:92:72:c3:76:b9:4b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:79:3F:BD:CF:4C:5A:02:34:86:A3:C0:7B:D1:BF:33:43:3F:92
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:ab:70:26:ba:e5:6b:a2:42:38:bb:c6:08:62:3c:d8:68:
23:51:3b:08:0f:46:8d:90:a5:83:ff:c4:24:b1:b2:9b:46:f9:
43:d6:3f:eb:d5:34:8b:95:56:83:5c:7e:d2:6a:98:38:2f:69:
fc:9c:b7:0e:4c:01:47:e5:36:69:0b:5a:02:10:16:b4:f2:86:
c5:db:cb:20:46:9a:aa:99:91:59:0c:85:d9:9a:f1:47:a9:4b:
05:66:1e:8c:f8:a9:5f:75:cd:e2:1e:80:8a:08:76:18:6f:06:
74:0a:1a:ec:ae:8b:38:6b:fc:26:4a:4c:7b:27:16:10:44:18:
e4:de:86:77:13:66:82:ea:fa:30:69:8b:e4:33:2a:12:81:5d:
e5:d0:1a:e5:c5:d0:a6:1a:35:d8:c7:f5:5b:60:11:a3:fa:3b:
00:60:39:35:d1:42:99:e2:47:cd:de:2b:72:fe:72:48:54:aa:
5f:d3:1a:38:47:69:6b:36:f5:f8:95:c0:df:29:aa:f5:f2:1c:
50:ae:10:cc:29:06:9e:01:89:4a:c8:50:81:84:fe:21:7e:9b:
27:95:e2:a1:af:f3:1d:e6:fc:6e:1e:f5:4e:3a:b9:93:1c:ed:
58:85:07:b4:87:75:1e:99:ef:06:37:8b:da:c2:20:8a:65:af:
ee:60:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:12 2024 by rpki-client on console-fra.rpki-client.org