Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: mb2OKWUzDrtF0OPOl4bEin8OIps7HUlmLOz7xMSzVBg=
Subject key identifier: 8A:AC:B5:93:3C:C5:8A:52:92:7E:C7:1C:C8:08:86:2B:12:F6:09:72
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 01901BFDA3F444DCCA9478C1571C5EF68E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 0508
Signing time: Sat 15 Jun 2024 13:02:05 +0000
Manifest this update: Sat 15 Jun 2024 13:02:05 +0000
Manifest next update: Sun 16 Jun 2024 13:02:05 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: 4ziX1LkAcx9KQFCtFoCdt3eBvbAHyFZFKBm5m+bGDtI=)
2: K-BOLRLXc3oanZNjqjbC-_eHxcA.roa (hash: lzDvAtQgJsi8f1NIK0t0NHYJNBa+Jio6zPqCt+rkgTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fd:a3:f4:44:dc:ca:94:78:c1:57:1c:5e:f6:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Jun 15 13:02:05 2024 GMT
Not After : Jun 16 13:02:05 2024 GMT
Subject: CN=8aacb5933cc58a52927ec71cc808862b12f60972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:4b:51:7a:31:96:80:08:24:52:c0:dc:65:
32:a2:87:c1:15:7a:c0:44:34:1c:64:88:8f:5c:d7:
ed:0f:32:93:14:ac:ce:56:0c:f8:69:14:4b:46:4c:
4a:7a:44:1e:35:45:42:93:35:88:00:c2:ea:29:c6:
a3:1b:0a:68:3d:f9:4b:5f:b0:88:f1:06:1f:67:5a:
a1:49:28:64:7f:77:ac:ce:5e:61:fd:c9:5d:ee:6f:
3e:db:97:0d:93:a5:01:dc:9b:37:19:19:15:0e:58:
b6:fb:52:83:37:d6:ad:f1:7e:c5:5a:53:78:19:65:
1f:9d:07:0c:e7:46:30:c6:c1:59:2b:d1:5b:56:28:
06:06:ba:ca:97:af:4d:84:f2:16:2f:f5:b6:8a:dc:
50:dc:bf:23:e8:81:27:ac:41:37:8a:9a:f2:ae:39:
36:8d:9f:3b:80:99:84:c4:79:47:6c:e2:83:b5:23:
37:81:08:fe:e1:bd:99:53:67:97:4b:fe:a9:e4:ef:
d3:b5:d8:23:35:6f:d7:ff:bc:79:bb:01:83:ff:ca:
7a:e6:22:20:da:c4:af:ba:8c:2c:75:f4:05:13:56:
2f:13:82:fc:44:12:a6:66:ae:88:6e:12:a0:1b:00:
7b:e5:fa:85:da:ba:52:36:cf:9c:fd:01:7d:83:b0:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AC:B5:93:3C:C5:8A:52:92:7E:C7:1C:C8:08:86:2B:12:F6:09:72
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:59:ad:fd:74:36:8e:0e:cd:bd:4b:98:71:2e:9d:ff:23:f2:
50:01:f0:52:34:30:83:84:4a:a1:a6:b3:2d:3d:93:ff:9b:4e:
be:25:d5:e7:d1:1d:92:ac:82:a1:d8:98:a0:6f:de:fc:e8:62:
ad:f6:f7:d9:be:1c:0b:b0:85:16:a7:03:12:d8:c3:05:89:cd:
ff:5f:bf:2c:5a:c8:28:15:f9:9e:31:67:75:6d:9c:a5:22:56:
f7:be:a3:29:99:13:00:ee:af:87:03:a4:e2:ee:22:64:7a:87:
f4:c5:90:d1:38:93:90:dd:ac:a0:42:09:01:46:5c:29:cb:58:
b4:9a:6e:14:4a:41:6e:62:8b:55:68:0d:62:09:b8:0e:ac:db:
e2:81:5a:15:ab:a7:e9:c6:59:8f:0b:0a:27:fb:97:30:d0:87:
58:b0:d8:40:b8:7d:1c:e4:22:2c:f2:04:9b:07:c7:e0:88:3d:
b8:22:94:40:6a:75:4f:45:54:85:d9:e8:fa:ea:f9:f9:4e:bc:
41:83:41:86:8e:14:55:dc:9c:b1:3f:44:c8:2f:4a:83:23:ac:
09:b3:dc:89:32:16:e8:c0:c4:84:d3:4c:e4:8e:1f:73:2d:eb:
59:30:8a:51:20:b6:5f:5c:c4:69:6e:ac:23:27:59:73:75:b3:
f8:8b:2f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/aP0RNzKlHjBVxxe9o6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjQwNjE1MTMwMjA1WhcNMjQwNjE2MTMwMjA1WjAzMTEwLwYDVQQD
Eyg4YWFjYjU5MzNjYzU4YTUyOTI3ZWM3MWNjODA4ODYyYjEyZjYwOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf5LUXoxloAIJFLA3GUyoofBFXrA
RDQcZIiPXNftDzKTFKzOVgz4aRRLRkxKekQeNUVCkzWIAMLqKcajGwpoPflLX7CI
8QYfZ1qhSShkf3eszl5h/cld7m8+25cNk6UB3Js3GRkVDli2+1KDN9at8X7FWlN4
GWUfnQcM50YwxsFZK9FbVigGBrrKl69NhPIWL/W2itxQ3L8j6IEnrEE3ipryrjk2
jZ87gJmExHlHbOKDtSM3gQj+4b2ZU2eXS/6p5O/TtdgjNW/X/7x5uwGD/8p65iIg
2sSvuowsdfQFE1YvE4L8RBKmZq6IbhKgGwB75fqF2rpSNs+c/QF9g7CaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqstZM8xYpSkn7HHMgIhisS9glyMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1mt/XQ2
jg7NvUuYcS6d/yPyUAHwUjQwg4RKoaazLT2T/5tOviXV59EdkqyCodiYoG/e/Ohi
rfb32b4cC7CFFqcDEtjDBYnN/1+/LFrIKBX5njFndW2cpSJW976jKZkTAO6vhwOk
4u4iZHqH9MWQ0TiTkN2soEIJAUZcKctYtJpuFEpBbmKLVWgNYgm4Dqzb4oFaFaun
6cZZjwsKJ/uXMNCHWLDYQLh9HOQiLPIEmwfH4Ig9uCKUQGp1T0VUhdno+ur5+U68
QYNBho4UVdycsT9EyC9KgyOsCbPciTIW6MDEhNNM5I4fcy3rWTCKUSC2X1zEaW6s
IydZc3Wz+IsvgA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:53:40 2024 by rpki-client on console-ams.rpki-client.org