Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
File: pnknI_UOcyw4kgiUBnCl4KiWzzE.mft (raw, json)
Hash identifier: i6YO5/C+TSyxTrv2bMEF8EgNgBwMNfAVRtm+lxn36jw=
Subject key identifier: C4:F9:26:98:4B:1B:C3:7A:76:0B:1C:FC:73:26:32:4B:BE:D7:05:FC
Authority key identifier: A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
Certificate issuer: /CN=a6792723f50e732c389208940670a5e0a896cf31
Certificate serial: 01901EC6C41E29B235FA732D863C8A97F315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
Manifest number: 01F1
Signing time: Sun 16 Jun 2024 02:01:01 +0000
Manifest this update: Sun 16 Jun 2024 02:01:01 +0000
Manifest next update: Mon 17 Jun 2024 02:01:01 +0000
Files and hashes: 1: pnknI_UOcyw4kgiUBnCl4KiWzzE.crl (hash: eS54rz7bUPJzcaz8IL0hme93Dp+IMWGAATAWuAHUIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:c4:1e:29:b2:35:fa:73:2d:86:3c:8a:97:f3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6792723f50e732c389208940670a5e0a896cf31
Validity
Not Before: Jun 16 02:01:01 2024 GMT
Not After : Jun 17 02:01:01 2024 GMT
Subject: CN=c4f926984b1bc37a760b1cfc7326324bbed705fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:39:ac:47:64:c6:8f:78:0b:2e:f3:30:51:
6c:f8:8d:da:d0:2a:11:92:bc:3c:fd:62:72:c4:cb:
12:e8:3a:64:bd:2e:25:7f:51:8d:97:75:64:ca:72:
46:34:4c:6f:69:15:b1:2d:62:40:5b:13:2b:90:92:
03:fd:41:ae:ac:e2:f9:8f:f2:45:25:49:0c:bd:44:
28:3f:d8:4a:32:d7:ae:c7:bc:81:f3:07:c8:ab:02:
57:67:64:70:50:af:31:ec:78:4e:3d:e7:8e:c6:71:
7d:e3:35:df:c2:29:31:86:2c:85:05:4e:b7:28:95:
2b:86:e9:ad:73:f9:96:3f:4c:a8:ba:13:4e:d2:39:
50:b5:1b:16:7c:af:34:b2:ee:af:43:c7:84:33:44:
06:17:e2:d5:4a:ff:35:ba:16:f8:2e:71:a8:38:59:
f3:a2:3b:4b:78:09:0e:e8:56:7f:b5:6b:da:cf:b4:
44:b3:c7:be:99:a7:07:c9:c1:91:2f:ef:d2:cd:42:
67:6d:2a:8d:b2:65:74:a1:9a:63:cf:7f:b3:85:52:
75:26:6c:47:4a:3a:31:30:a4:36:05:3e:f0:18:44:
0d:89:68:cb:44:4e:34:54:f5:ae:34:fe:c7:8f:66:
f9:de:c0:6f:75:f6:9f:be:40:5d:09:6d:72:44:94:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:26:98:4B:1B:C3:7A:76:0B:1C:FC:73:26:32:4B:BE:D7:05:FC
X509v3 Authority Key Identifier:
keyid:A6:79:27:23:F5:0E:73:2C:38:92:08:94:06:70:A5:E0:A8:96:CF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnknI_UOcyw4kgiUBnCl4KiWzzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc3c68-d550-4f09-a151-5b03dc8f7c0e/1/pnknI_UOcyw4kgiUBnCl4KiWzzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cd:38:01:7e:59:0d:ba:c6:0c:e9:2d:81:f4:76:0d:1f:6a:
2e:41:ad:7f:b6:3c:b5:3f:af:86:08:81:8b:2b:ac:e1:0b:27:
65:08:85:16:f4:c2:fb:8c:1d:2f:81:15:de:3e:8d:9f:4e:38:
83:df:e0:57:77:09:d9:a2:15:04:41:14:52:19:59:16:9c:5c:
65:32:be:66:99:46:98:d4:72:5e:2d:69:40:a6:da:d5:b8:4b:
0c:1c:2e:3a:c6:82:92:08:d0:b3:a4:aa:ee:79:b9:f5:a6:f8:
43:d1:1d:4c:6a:24:ce:21:2c:dc:48:08:00:15:24:7a:81:17:
29:f0:1a:1e:1d:36:f9:b7:d9:56:5c:7a:6b:a0:74:48:c5:c9:
9e:77:9e:d8:71:53:9b:aa:e8:83:32:7d:79:83:7b:d7:9f:3d:
54:1e:96:f2:0f:37:63:85:1a:c3:7f:68:a2:02:9d:b2:44:5f:
7f:ed:78:df:df:b8:66:5e:f8:96:b3:82:6d:e8:24:dc:5e:4a:
6c:77:32:4e:48:0e:55:c7:4a:48:27:bd:1f:04:b7:8b:2a:87:
82:df:63:6a:d4:27:52:b1:ec:87:91:1c:a1:90:93:1c:3a:fa:
53:ed:1a:42:36:ea:ba:3e:de:3b:f2:e3:83:df:3d:66:1f:8e:
61:40:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:23 2024 by rpki-client on console-ams.rpki-client.org