Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
File: oYhrwvjZOpz8WoN-LydS7knyJHQ.mft (raw, json)
Hash identifier: yPpj6Ity5jyBYHOnwL1wKdBOf+pQYP6Hwnlq6LGc+pk=
Subject key identifier: 53:F1:1C:09:C9:11:D8:B9:99:94:2A:88:2C:30:E3:0D:29:AD:07:83
Authority key identifier: A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
Certificate issuer: /CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Certificate serial: 01901E58CBF42201A0BC6F0EA50689C5B3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
Manifest number: 11C2
Signing time: Sun 16 Jun 2024 00:00:54 +0000
Manifest this update: Sun 16 Jun 2024 00:00:54 +0000
Manifest next update: Mon 17 Jun 2024 00:00:54 +0000
Files and hashes: 1: oYhrwvjZOpz8WoN-LydS7knyJHQ.crl (hash: 3aCAUPcoN4tVxyFEbXZNNkrmxu3Eie13/2S17CIUBjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:cb:f4:22:01:a0:bc:6f:0e:a5:06:89:c5:b3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Validity
Not Before: Jun 16 00:00:54 2024 GMT
Not After : Jun 17 00:00:54 2024 GMT
Subject: CN=53f11c09c911d8b999942a882c30e30d29ad0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:af:ad:34:50:d4:65:f5:86:d9:df:9c:32:
91:38:c8:93:1c:ef:b5:aa:a4:c3:5f:40:53:12:f9:
d1:71:2b:10:07:19:ea:0b:aa:a0:d6:dc:45:34:2e:
d7:82:cf:95:09:48:0b:d5:ca:9c:9e:e0:72:08:28:
c3:2f:47:7e:41:e5:2c:5d:0e:ca:f8:03:68:e7:80:
47:61:9f:2d:ce:c1:c9:46:3b:a3:63:cd:5f:a2:26:
43:3e:7d:53:ff:a5:88:7e:59:5e:7d:4c:9d:fd:54:
7a:38:04:e2:4d:73:20:32:bd:ba:fc:0e:49:e8:6b:
8f:46:b8:40:99:b7:f6:12:91:61:fb:bc:d0:05:ea:
4c:95:5d:df:45:f3:c6:64:b2:07:65:ed:b6:3c:da:
a8:3e:93:40:75:91:92:04:c2:11:99:34:bb:eb:07:
34:cb:8c:a5:94:7a:92:89:12:d7:ec:4d:65:86:7f:
0f:2e:e3:96:43:8f:9a:e7:00:93:d7:1a:46:d9:2b:
7d:f9:5e:52:7f:2c:75:88:66:74:1d:ab:2e:f2:54:
fc:39:95:9e:2f:52:0d:b0:b3:c5:84:54:03:3a:99:
d3:22:b6:3e:d7:5f:ec:b1:13:31:58:16:e2:c3:ac:
11:3c:97:0c:20:21:3b:25:26:02:d8:26:14:02:da:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:1C:09:C9:11:D8:B9:99:94:2A:88:2C:30:E3:0D:29:AD:07:83
X509v3 Authority Key Identifier:
keyid:A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:56:d5:7a:4b:d5:4c:e9:74:a2:28:b4:2d:ef:dd:72:e2:
67:28:3c:04:97:c8:94:77:fa:63:bf:05:f2:78:83:2e:7f:13:
4e:4a:68:5d:14:db:4d:b2:c2:b1:4f:bd:9f:50:0c:23:ee:cf:
13:e3:73:4b:d0:12:f6:db:5d:0c:9c:01:a0:0a:65:32:fa:c7:
a4:86:56:e0:42:06:47:52:df:27:98:6f:cf:2e:05:6c:a8:d1:
e4:a9:53:6e:49:1a:70:b4:14:b5:75:df:6e:e2:0b:b2:66:e1:
13:0d:4a:26:91:52:b9:36:42:58:24:47:a5:a0:83:65:7f:39:
3b:59:0b:08:c3:1e:17:bc:f8:82:a6:44:ac:ec:eb:f0:71:79:
10:78:fe:99:22:3b:29:05:e9:f1:46:f6:14:c6:96:0b:95:21:
73:fc:28:2f:f8:7b:b8:23:2f:6e:74:35:a7:fe:e2:e8:89:97:
23:4d:af:7f:12:55:67:fc:05:8a:82:5a:78:4a:60:f3:38:bc:
09:55:79:c9:70:90:6b:73:f3:6c:42:1f:ba:3b:cc:03:0c:de:
8c:c9:ed:12:46:33:29:0b:d2:8e:a7:f8:c6:f0:fc:ff:64:58:
97:0d:44:68:86:82:42:1b:aa:ff:66:53:25:b5:e7:e4:44:48:
3a:08:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:25 2024 by rpki-client on console-fra.rpki-client.org