Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: s1pkcDKsLgh+s9zVgQH8RZ6mNgns5RvzO91AVWYyE44=
Subject key identifier: 65:1D:DD:8A:2A:3F:8A:34:62:79:AB:BA:47:EE:BD:A1:9A:18:D9:7C
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019044F87779EDD121F79E574B14A6002629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 0111
Signing time: Sun 23 Jun 2024 12:00:52 +0000
Manifest this update: Sun 23 Jun 2024 12:00:52 +0000
Manifest next update: Mon 24 Jun 2024 12:00:52 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: kyeZUQouaco0xPiW4hEH/cKGBJ5LTHEcHjOsYXPrJQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:77:79:ed:d1:21:f7:9e:57:4b:14:a6:00:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Jun 23 12:00:52 2024 GMT
Not After : Jun 24 12:00:52 2024 GMT
Subject: CN=651ddd8a2a3f8a346279abba47eebda19a18d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:c0:2b:8c:0c:b0:38:18:da:32:2f:99:f1:
d7:ac:68:83:09:68:ef:c5:a9:77:a7:39:78:a3:0f:
62:1c:2b:f1:ec:41:dd:2e:0e:88:4a:a9:de:b4:ff:
51:8f:88:b3:6a:b8:9a:be:46:2a:27:7a:62:07:4b:
b7:0c:c4:a4:9e:d0:3f:bb:83:b2:1d:59:1e:98:c8:
0a:67:14:5a:19:12:cb:a9:cf:93:92:ef:c0:73:43:
65:9e:12:45:25:14:08:1d:0f:b0:3f:f5:aa:0e:7f:
2f:b0:3c:f6:16:ee:7f:70:1b:50:d6:b0:5f:ad:c4:
6b:7d:51:f2:43:6b:ff:f2:76:33:cf:73:53:7f:a5:
3c:93:14:75:8b:d6:28:e5:02:f3:11:fc:29:fc:da:
98:18:6f:f2:e4:1e:b7:46:3b:df:1a:87:64:53:28:
e6:f3:21:53:6a:a6:b8:fb:e9:1b:f1:79:4f:7d:a4:
29:32:a0:1a:01:f4:bd:c9:c0:bc:48:94:d3:36:14:
34:a9:cb:ce:7f:8d:8a:7c:29:40:c2:6e:30:69:1c:
0e:55:c5:95:c4:44:cb:89:8e:36:bb:65:5e:12:0c:
93:ad:44:a8:3a:56:26:39:75:37:36:69:44:a9:c1:
e0:6a:d5:27:ba:0b:ac:d7:b2:ec:e1:dc:7b:78:6f:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:DD:8A:2A:3F:8A:34:62:79:AB:BA:47:EE:BD:A1:9A:18:D9:7C
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a5:0d:fc:52:49:71:71:72:84:ab:fd:09:6b:46:d1:a2:30:
9f:e4:e9:ba:99:bc:cc:df:bf:44:c0:1a:9c:ef:a2:2f:af:20:
f0:43:1f:5a:7c:86:8a:08:53:1b:03:38:47:89:47:07:32:74:
0b:df:4c:99:74:be:ef:46:33:8e:9f:7f:5f:ac:9a:a4:08:b7:
b5:93:0b:3f:02:c6:3e:08:f4:20:71:a7:60:7f:57:8d:7c:8c:
33:f3:7f:a9:88:d7:15:44:a3:d2:78:ed:1f:90:50:ad:c1:c1:
07:e3:42:56:e3:ba:01:a7:01:de:2f:70:11:f4:92:81:3a:0d:
b4:28:c7:51:18:a7:88:de:74:0e:fa:c1:4f:bb:83:5d:ae:cb:
a2:f3:a0:1c:08:f5:30:5d:23:a3:52:ac:a9:02:35:82:28:06:
f1:b6:92:6a:84:af:d9:08:7c:7f:7f:ba:61:c7:b4:3b:aa:81:
ad:2b:a5:19:71:2e:f3:2c:7d:ef:41:cc:a3:e2:0a:93:02:fb:
f9:44:3f:9c:e2:8b:77:95:61:9c:ad:44:91:ee:57:32:b4:9c:
88:ac:f0:2c:e8:a3:76:1a:5f:63:3b:9a:1f:8a:4c:e0:f0:56:
84:c7:9e:93:11:63:92:a5:6f:12:84:fc:5e:58:8b:a3:6f:7c:
8b:14:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:25 2024 by rpki-client on console-ams.rpki-client.org