Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
File: OBssWXKaU7hBEqryyhIo80JHo5s.mft (raw, json)
Hash identifier: IKjEf5x7vjCaGJPq6PzuoDUPn8YhjAfWF4QSlaXydFk=
Subject key identifier: 47:B6:D2:2E:47:5A:CD:38:52:25:39:8F:90:36:6B:39:BD:F9:66:3C
Authority key identifier: 38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B
Certificate issuer: /CN=381b2c59729a53b84112aaf2ca1228f34247a39b
Certificate serial: 01901DEABA41AA1ACBE63D51F32CBBB8BBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 22:00:40 +0000
Manifest this update: Sat 15 Jun 2024 22:00:40 +0000
Manifest next update: Sun 16 Jun 2024 22:00:40 +0000
Files and hashes: 1: OBssWXKaU7hBEqryyhIo80JHo5s.crl (hash: oNzGSH6cYQJPXqOms3YA91iIpz6PVxgZ05nnhr1EkN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:ba:41:aa:1a:cb:e6:3d:51:f3:2c:bb:b8:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381b2c59729a53b84112aaf2ca1228f34247a39b
Validity
Not Before: Jun 15 22:00:40 2024 GMT
Not After : Jun 16 22:00:40 2024 GMT
Subject: CN=47b6d22e475acd385225398f90366b39bdf9663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:ef:52:61:de:51:4d:7e:16:e2:9c:4d:91:
cb:07:33:d3:c7:b9:3a:b8:7c:6a:0d:28:4e:a0:01:
e5:57:d2:a9:6c:f6:04:df:c6:f9:24:15:a4:cb:df:
7e:b4:bb:98:92:3f:df:c0:33:9c:1a:4d:dd:13:5a:
cf:1a:59:02:ea:2d:99:16:b4:cf:1b:a2:d6:37:4e:
88:17:c4:68:31:4e:95:98:57:8c:c5:f7:9c:c5:bf:
e1:e5:76:ac:76:f2:97:50:e6:dc:b5:c6:3c:7b:2e:
47:30:58:3f:d2:0e:01:3c:cf:46:a3:4b:29:e6:2d:
1a:0c:65:24:ac:76:0f:59:6b:b9:f2:d8:a9:19:12:
75:2f:01:2b:4c:d3:8d:05:d4:2a:12:c9:0a:c6:f8:
b8:32:49:25:a4:b5:40:a9:d7:15:0a:4e:b8:ec:ae:
05:d0:ca:50:cd:a4:52:46:37:f6:f1:63:50:c8:e2:
77:62:ed:34:7d:8a:c9:b2:bb:74:65:36:c2:a2:1c:
19:a0:e2:2c:37:97:6f:ea:e7:92:ab:4b:42:cf:ae:
01:45:45:85:f1:d2:7d:40:38:d5:b4:3f:9f:34:0a:
90:d7:c9:f7:77:a6:91:07:db:d4:a2:3e:b9:65:13:
36:fc:84:91:d6:b9:cc:08:29:39:58:32:fd:49:c1:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:D2:2E:47:5A:CD:38:52:25:39:8F:90:36:6B:39:BD:F9:66:3C
X509v3 Authority Key Identifier:
keyid:38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5e:22:ea:d6:d2:93:53:8c:30:05:b3:fa:96:3e:66:15:68:
ed:f0:a8:f2:04:a8:73:15:44:a6:3f:1d:46:6b:24:c8:5c:fc:
9b:cf:e2:a2:c1:7e:79:99:b3:0c:35:d4:75:9e:04:50:d7:9c:
eb:8e:7b:16:30:b0:62:0d:b2:c8:88:04:76:06:fe:47:38:ab:
ee:2d:92:cd:0d:df:91:6d:d5:c2:8f:6a:85:49:9e:09:f9:3e:
c7:ae:33:80:74:55:ab:47:f0:44:ab:8e:2b:20:b6:c9:c9:b7:
c6:96:9b:08:27:68:c7:b3:7a:51:54:66:9a:77:6e:a6:b8:6a:
82:16:e6:2e:d2:f4:cf:40:ac:8e:63:11:93:af:0b:41:27:a6:
c5:6b:39:65:6a:f1:28:40:39:ab:5e:9b:c8:d4:6c:a3:86:ec:
a9:bc:ea:3a:2f:d8:f6:63:16:99:83:65:af:1c:40:74:c8:67:
b3:a7:ff:af:8d:18:12:6c:1f:bf:04:dc:6a:8e:76:96:72:97:
2a:7c:a9:7d:9f:51:88:ff:bd:02:74:9d:34:6e:18:e0:07:61:
96:93:8c:3d:40:ea:bd:4c:a7:e8:a3:1b:3e:2f:e6:08:15:fd:
46:ac:95:a8:a2:68:a7:9d:8c:0a:b0:72:6a:a0:f8:89:97:bf:
75:19:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:49:49 2024 by rpki-client on console-fra.rpki-client.org