Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: XIyohcFMWx6fsesZrPuWqsesXFBUS3BSKUzmwXYNHQI=
Subject key identifier: C4:C2:13:2C:0A:F6:AC:D4:AB:E6:B2:65:38:AE:41:60:85:B3:E5:22
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 01903AE26FD91648D584BBB045D06E889CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: AC
Signing time: Fri 21 Jun 2024 13:00:36 +0000
Manifest this update: Fri 21 Jun 2024 13:00:36 +0000
Manifest next update: Sat 22 Jun 2024 13:00:36 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: KB/fjKz2qWZ5XyEUKHeT900HRWsZ4jsWnTJxX9I4tkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e2:6f:d9:16:48:d5:84:bb:b0:45:d0:6e:88:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Jun 21 13:00:36 2024 GMT
Not After : Jun 22 13:00:36 2024 GMT
Subject: CN=c4c2132c0af6acd4abe6b26538ae416085b3e522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:49:af:17:3f:b6:14:f1:f6:71:88:00:b6:
51:cd:e7:d3:f0:32:36:7b:2b:82:e7:ce:13:89:04:
f6:de:65:3e:72:c1:42:87:65:b3:78:74:8a:57:c8:
da:c7:bf:fd:09:2d:9c:86:6a:cc:47:96:38:c7:65:
b5:ae:0d:b6:e4:82:70:84:7f:67:6e:97:07:37:de:
86:67:73:b4:8f:1e:9e:ec:8a:df:1f:d1:95:ca:5d:
1b:ae:4e:80:ce:8c:1b:b3:8e:7e:6b:63:b8:78:ad:
d1:19:d0:7f:60:97:7a:26:1b:11:5a:9d:f7:87:a5:
69:f0:c7:a3:d9:17:1e:f7:06:ee:b1:d0:b5:2e:bd:
af:f8:b1:59:ca:f0:16:e0:65:d3:49:65:c9:d8:3d:
11:54:82:40:9c:a3:5b:1d:12:a4:ea:6d:c1:0a:cc:
9e:fc:fd:6e:b9:aa:8b:01:a0:5c:c1:82:b2:71:94:
88:c0:d7:ec:fd:dd:c4:fd:6e:6c:fb:7f:8e:6c:58:
23:df:a3:16:f2:3e:2b:c3:a3:4d:c4:4a:59:23:43:
c5:59:cf:50:0e:ba:81:28:1e:c0:e3:6c:39:2f:29:
e1:87:8c:1e:65:1a:5a:44:ca:34:a5:93:fb:21:3b:
79:3f:55:37:1f:45:56:42:66:dd:a6:85:c5:ad:16:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:13:2C:0A:F6:AC:D4:AB:E6:B2:65:38:AE:41:60:85:B3:E5:22
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:8f:4e:73:19:ec:2a:a8:35:27:65:24:36:96:e4:b3:c2:
38:24:a7:a6:18:20:6f:79:f5:b2:d3:f7:49:7c:0d:b9:2b:b1:
ea:11:fd:56:d3:1c:71:1f:73:bb:3b:a7:32:45:a7:3b:41:67:
bc:70:aa:80:f3:c0:e8:8a:65:f7:fa:1c:58:cc:26:35:5d:27:
f0:25:22:91:dd:4a:96:83:b0:1e:30:12:f4:83:9f:6a:3d:de:
b3:f2:ef:a2:25:a0:25:7e:9c:f2:be:d1:fd:71:43:72:eb:6e:
02:ea:8b:81:a3:4f:8b:49:28:99:10:01:06:53:24:29:9e:bc:
2a:c1:48:9f:82:77:fa:38:be:c4:50:da:77:38:20:bc:62:64:
01:80:0a:db:a8:72:5a:89:46:47:8f:96:10:2f:e4:87:ff:e0:
80:60:85:d6:f3:64:63:98:8b:9d:53:97:61:8c:d2:9b:2a:a9:
f9:70:43:ca:67:08:fc:29:ea:30:48:6f:37:3b:d4:3d:85:5b:
f8:45:c3:54:ca:dc:1d:e4:74:25:0f:15:bd:ee:b3:84:78:dc:
92:fc:2f:7f:f6:a3:5b:49:f8:4a:8b:cb:37:2f:d2:c7:a3:54:
ee:59:ef:9e:90:f7:89:25:a4:08:d2:9a:5f:9b:36:90:c1:e5:
6f:f8:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:39:08 2024 by rpki-client on console-fra.rpki-client.org