Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: 600e3S9maPjIHYfE9+w4DO04CKdJNOXjNTCOU07lE3I=
Subject key identifier: 05:21:D1:52:C1:45:81:99:9B:7E:13:2A:2D:0B:67:A6:14:E6:46:CE
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 0190340518FE998279CC0C76CE7D12F44B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 0BC2
Signing time: Thu 20 Jun 2024 05:01:07 +0000
Manifest this update: Thu 20 Jun 2024 05:01:07 +0000
Manifest next update: Fri 21 Jun 2024 05:01:07 +0000
Files and hashes: 1: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: +lAQCHb4SZzPAE84d4y+fQTrYkNc0kv7//NWAQhpoVA=)
2: Takwh2UUw4zKj4kR9VWKOZy0Uts.roa (hash: 9X3lNIMseAURT8n4kiHFuqssax4N2qy0qkkusRpu/RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:05:18:fe:99:82:79:cc:0c:76:ce:7d:12:f4:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jun 20 05:01:07 2024 GMT
Not After : Jun 21 05:01:07 2024 GMT
Subject: CN=0521d152c14581999b7e132a2d0b67a614e646ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:91:05:0a:6c:e1:06:14:d1:ce:55:34:b1:
87:ef:75:fd:6b:25:ff:88:cf:48:1e:65:3f:2a:8f:
71:a9:1c:57:2a:a9:d0:f3:d2:21:45:22:d3:2f:8b:
8f:8e:85:47:61:47:28:3e:eb:31:04:41:62:1d:96:
85:e9:4e:7d:e9:89:4e:da:71:ca:8d:20:ce:b9:a2:
5b:f1:4b:25:00:10:36:e2:48:b9:f3:f1:13:ef:c9:
95:18:ce:6f:20:d7:b0:5b:40:23:5d:76:70:da:07:
42:0e:ef:5d:8b:33:15:57:80:ab:89:14:38:db:aa:
ad:05:fd:dc:37:9d:08:d1:7b:07:2e:34:12:07:87:
b8:85:84:9b:0a:7f:13:2b:1f:eb:39:48:a9:8f:5a:
5c:2d:73:8d:c4:94:4f:20:c0:2a:d9:0c:36:97:12:
6a:c2:7c:2f:91:7b:32:52:77:14:d5:83:63:7d:d3:
97:9a:b0:3c:c5:fa:26:79:33:16:07:68:18:bf:ff:
04:62:d7:7c:a1:33:19:09:5f:2f:ee:70:44:2d:c5:
f4:9a:19:3b:45:64:30:c2:bc:8c:8f:cd:9f:e3:61:
1e:9f:aa:21:b0:4e:2b:fc:fc:23:ef:5c:6d:9b:02:
3a:cc:51:50:18:d9:b4:f4:78:b0:9f:14:86:3a:f6:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:D1:52:C1:45:81:99:9B:7E:13:2A:2D:0B:67:A6:14:E6:46:CE
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1a:ad:3d:89:e2:7a:ce:47:d9:5e:4c:86:c1:d9:0d:8b:b8:
30:fe:69:55:8c:bd:bc:07:54:38:62:80:05:93:bf:95:25:1d:
55:5f:c8:c1:3a:15:33:64:b0:8e:ad:73:b2:7e:3c:c0:a5:f1:
09:06:73:65:90:78:9b:c8:f6:4a:2a:4a:4d:47:75:51:92:82:
ac:f5:0a:b4:97:75:31:59:ff:8d:1a:f2:4d:b1:3f:51:5b:65:
2e:5b:00:4f:f4:ce:7e:2a:3e:97:77:d8:fe:cd:fa:c8:17:74:
92:bf:ec:9d:7c:18:33:64:c2:3f:f9:21:76:39:f1:34:c5:a0:
a3:3f:8a:2e:7d:27:ed:46:55:ac:1e:63:f2:91:54:47:ef:30:
32:39:47:96:03:54:0f:68:2c:4c:6d:1b:13:4d:04:29:3e:16:
9d:09:18:40:04:dd:64:32:40:53:d8:07:e3:37:f5:9a:05:10:
7f:f0:f5:50:9b:1f:90:ad:5d:59:42:51:64:26:93:dc:fd:58:
7c:d3:8e:9b:75:0e:35:6a:25:b7:d7:04:b0:74:ad:ef:b3:e1:
79:a6:87:76:89:41:ca:ae:c1:b9:96:85:a3:96:d2:5c:f0:e7:
67:03:b4:c3:9a:4f:68:1d:1b:d1:2b:38:71:a7:0e:e0:20:e2:
d9:48:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:22:03 2024 by rpki-client on console-fra.rpki-client.org