Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: qzcWiDbEdcl74gSNqZdntIcqKYLudPJ32/YP4RNQv5s=
Subject key identifier: 28:A9:E6:0E:CA:1A:2F:40:F5:99:0F:17:E4:E3:71:EC:25:E3:4C:79
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 0190429CDDE36C491AED0BC165C2C11FB156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 11D3
Signing time: Sun 23 Jun 2024 01:01:35 +0000
Manifest this update: Sun 23 Jun 2024 01:01:35 +0000
Manifest next update: Mon 24 Jun 2024 01:01:35 +0000
Files and hashes: 1: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: xr6gkOGAbuPPQIjMHrotjItXt3QgeV4vDEZ8yg6l9ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:42:9c:dd:e3:6c:49:1a:ed:0b:c1:65:c2:c1:1f:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Jun 23 01:01:35 2024 GMT
Not After : Jun 24 01:01:35 2024 GMT
Subject: CN=28a9e60eca1a2f40f5990f17e4e371ec25e34c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:32:24:9c:7d:bf:81:35:8d:7c:bf:33:2b:
79:71:58:3b:98:98:7e:e0:99:c1:33:1b:89:64:a8:
90:30:cb:cb:74:fa:9c:22:d1:a2:16:ab:9e:74:cb:
a7:d3:43:1d:57:59:33:eb:c4:09:bb:69:14:b5:63:
e5:9c:c3:4c:c9:2e:a4:86:c9:c4:5d:02:fa:b3:6b:
15:02:c8:e3:46:df:c8:4e:97:df:e6:1b:6c:66:0e:
9b:ec:10:cc:02:bd:0d:42:cb:78:cb:dc:cf:bc:20:
ea:82:64:42:82:93:b4:b9:2a:54:cf:fa:d8:23:a7:
30:b2:d3:a4:0a:ed:f6:48:ab:d7:3a:08:c5:df:b8:
7d:a6:ce:c3:c4:b3:5b:27:81:54:58:ee:96:2f:19:
de:4d:76:38:9e:ec:27:40:45:5c:17:31:49:d0:cf:
08:22:bf:94:8a:a7:16:a1:7b:bc:5a:52:af:5b:61:
d1:5e:5d:ca:47:38:7e:59:39:ed:35:fa:95:f1:d3:
d8:b6:c3:58:c6:3c:08:74:46:ea:6a:01:43:02:53:
d2:b8:f1:76:3d:23:b6:e1:f2:dd:38:14:93:b4:7a:
64:82:fe:0c:4f:1f:77:b1:10:4f:dc:9c:1c:b0:27:
b4:3d:fd:2d:e8:c8:3b:bd:d9:57:4f:2d:42:9a:39:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:E6:0E:CA:1A:2F:40:F5:99:0F:17:E4:E3:71:EC:25:E3:4C:79
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:03:80:4a:cf:73:93:1e:9c:77:b5:c9:53:c3:b5:2d:ac:b2:
1a:86:f6:e5:ac:f7:f4:8b:e3:f1:43:ff:23:58:9b:91:cd:70:
d5:58:e8:3a:61:6e:8a:27:f2:89:56:ae:ec:a5:9a:03:c6:a7:
d8:a9:d9:44:60:14:55:62:c3:d6:94:be:a9:48:25:eb:59:5b:
b4:8b:d8:86:39:88:49:f4:9d:9a:b1:bb:fe:26:ba:2a:d0:13:
bd:0e:7e:e2:c8:60:e1:5e:14:ec:ec:5c:ab:07:83:f8:ea:86:
df:f0:10:fb:0b:ab:e7:5f:31:ff:11:eb:f2:6c:52:c1:95:69:
87:79:9d:bb:40:0f:33:bd:b7:80:ec:c3:66:a8:30:8c:38:91:
0f:8f:c1:5e:89:fe:d3:24:69:46:7e:0e:87:f9:9e:ee:87:b4:
7c:ad:0f:be:1e:75:a4:35:93:fd:e8:43:c6:02:3a:5e:0f:b5:
e8:74:c8:b8:66:45:54:5c:c0:4c:dd:a5:37:2e:c9:ab:61:a3:
da:6f:e7:f1:6d:59:fe:9c:6d:25:81:42:52:51:5e:ff:3c:1e:
da:62:55:83:8c:75:79:2a:fc:4b:cf:f6:94:56:18:31:4b:3d:
1f:17:3e:59:23:9b:5a:d8:d8:b9:59:82:5e:ed:9a:92:e6:76:
cc:d0:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:08:37 2024 by rpki-client on console-fra.rpki-client.org