Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
File: pnknI_UOcyw4kgiUBnCl4KiWzzE.mft (raw, json)
Hash identifier: cuzlIhYYUKZeNXdNEYvBUXlZ9dOpKrzZVlXHvxmlPtY=
Subject key identifier: 23:53:EF:36:3E:CF:47:1B:06:9B:0B:BC:7A:EA:42:F7:D4:1F:B1:CA
Authority key identifier: A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
Certificate issuer: /CN=a6792723f50e732c389208940670a5e0a896cf31
Certificate serial: 019045660FB92BD1CBE65A09B196BA08872F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
Manifest number: 0205
Signing time: Sun 23 Jun 2024 14:00:34 +0000
Manifest this update: Sun 23 Jun 2024 14:00:34 +0000
Manifest next update: Mon 24 Jun 2024 14:00:34 +0000
Files and hashes: 1: pnknI_UOcyw4kgiUBnCl4KiWzzE.crl (hash: IKijbJLUJM/DEXVXmHtX0Hf5tpstEtt75iRqDy+evbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:0f:b9:2b:d1:cb:e6:5a:09:b1:96:ba:08:87:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6792723f50e732c389208940670a5e0a896cf31
Validity
Not Before: Jun 23 14:00:34 2024 GMT
Not After : Jun 24 14:00:34 2024 GMT
Subject: CN=2353ef363ecf471b069b0bbc7aea42f7d41fb1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:06:27:02:9f:2c:18:53:bd:23:51:9e:32:
e0:1a:b4:f5:79:3b:53:3c:21:ab:82:5a:69:68:da:
ee:66:22:1e:b6:db:3d:13:d1:e2:e4:ae:03:09:12:
49:cf:11:a4:d6:09:68:c3:06:61:5d:10:82:1a:3b:
a5:f3:ac:f1:ac:c8:58:26:e6:e2:27:d6:23:da:fa:
70:75:a0:e8:d7:53:a6:3f:4d:03:ad:9d:95:8b:ec:
9a:53:6d:70:59:70:0d:46:b3:bc:d9:17:7c:d7:00:
64:a6:c4:e2:bc:7d:58:b0:fa:ec:f1:4f:fb:88:eb:
3b:8d:8f:87:b4:55:63:55:60:5c:85:06:80:f6:57:
d7:7f:e3:a4:b7:14:98:35:b6:04:6d:e1:dd:7a:4c:
8a:17:f2:5b:87:38:24:c7:5a:8a:79:91:40:b5:f2:
5f:8c:cb:d0:15:24:e4:2d:7e:99:3f:99:fb:73:60:
72:09:30:19:b3:1e:0e:cf:e4:a8:3b:26:99:e0:31:
9c:bc:44:ee:46:e8:5e:2c:22:50:4e:7a:84:f3:0b:
dd:63:b1:2c:97:7f:1b:3f:95:e8:c8:83:98:c5:73:
e0:74:b6:64:6d:15:e7:a2:ae:e7:92:f5:0f:af:35:
a9:5b:31:d2:29:9c:57:ff:4f:2b:61:ec:e3:b2:d0:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:EF:36:3E:CF:47:1B:06:9B:0B:BC:7A:EA:42:F7:D4:1F:B1:CA
X509v3 Authority Key Identifier:
keyid:A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:8d:e9:b5:8d:4a:df:28:8a:2f:c1:a6:ae:d5:14:1b:b7:
eb:2d:48:cc:5a:93:66:7d:89:fc:77:00:c2:ae:94:a0:66:2e:
09:97:a7:78:4e:59:f6:81:e8:4d:19:b6:e1:4e:51:a3:3e:e3:
23:dc:66:d2:36:be:ba:a7:04:87:02:70:e1:aa:9e:59:68:80:
ca:7e:59:7e:c9:de:95:d4:5b:5c:b8:4a:1a:99:6d:28:b2:75:
a1:30:f6:63:20:c7:67:42:f9:c8:3e:c2:0b:98:74:65:50:72:
7f:8c:57:a7:8a:b5:ec:ca:52:1c:d8:93:1e:24:3b:13:32:af:
05:82:a9:9f:2f:6d:a0:04:a4:93:c7:61:34:a7:e6:de:08:38:
35:ef:d4:55:d7:10:77:a3:55:9e:eb:cf:b1:2e:ee:1c:37:b3:
6d:c8:61:28:71:d2:ea:59:4a:ad:b5:bf:6e:a2:3b:f8:89:10:
3f:7c:0f:5a:84:bb:de:94:5b:09:af:23:ea:28:63:ac:ef:6a:
75:d9:0f:9c:d5:ef:c7:87:74:12:3e:13:c6:a3:cf:81:d1:ed:
a0:d5:ac:a3:b4:7d:a2:53:b7:1e:39:3f:db:44:a7:b8:79:22:
1c:07:aa:3c:01:6e:27:7d:d4:d6:ac:f9:18:5d:80:54:9d:ee:
12:ee:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:33:12 2024 by rpki-client on console-ams.rpki-client.org