Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
File: ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft (raw, json)
Hash identifier: V2mG8SP1t3p/J+w+j+vlQ1OgiOrJ8PqfRHnF4hfW480=
Subject key identifier: 49:50:35:E0:AD:29:D8:41:58:61:C9:A4:0D:5B:C2:C2:15:72:59:28
Authority key identifier: 89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
Certificate issuer: /CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Certificate serial: 01901CD8866AB3CAD6F43F8C883E5B2879C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
Manifest number: 0AC2
Signing time: Sat 15 Jun 2024 17:01:10 +0000
Manifest this update: Sat 15 Jun 2024 17:01:10 +0000
Manifest next update: Sun 16 Jun 2024 17:01:10 +0000
Files and hashes: 1: ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl (hash: UqwyfgSxUeHgLVjT9Y9thrFEYgbgTBuZLrhzPrg5leM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:86:6a:b3:ca:d6:f4:3f:8c:88:3e:5b:28:79:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Validity
Not Before: Jun 15 17:01:10 2024 GMT
Not After : Jun 16 17:01:10 2024 GMT
Subject: CN=495035e0ad29d8415861c9a40d5bc2c215725928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:f9:e7:4f:41:cf:af:f1:52:0b:a1:e3:02:
49:60:a0:55:6b:76:66:79:7d:75:7b:54:ff:96:8c:
07:ac:11:ac:8a:1e:bf:c3:21:5c:4e:89:d2:79:cc:
ab:0c:26:a4:7b:41:17:a9:29:de:93:20:2b:37:ef:
3c:d8:a6:e5:c6:7d:dd:71:0a:66:c9:36:b1:0c:a5:
77:2e:d9:27:0b:f3:c4:4b:39:26:6d:9f:a0:a7:b3:
31:41:74:19:ad:a8:ca:c8:82:eb:38:71:04:0a:90:
d8:39:aa:92:a0:fa:f2:46:60:6a:01:f2:86:85:6f:
83:ff:b5:b5:62:78:40:55:89:ae:35:f4:f9:95:bd:
57:74:de:c5:2d:46:84:2c:bb:e3:a4:dd:c7:f8:3b:
01:5b:0b:0c:85:ef:c7:ec:3a:75:fe:42:f2:f6:44:
46:17:e4:8a:37:b2:8b:d8:52:94:ee:ab:a2:c0:5f:
11:bf:ea:16:b9:ed:27:85:66:b7:14:2b:96:73:77:
3c:fc:ec:f4:e1:e3:79:1a:6f:57:13:37:15:44:1f:
c8:80:d7:5e:40:42:ed:84:9d:b6:4b:6c:04:53:86:
8d:2f:ee:5b:9e:73:20:9f:8f:ce:8f:8e:4c:b2:13:
9c:4b:c9:c1:b0:33:e0:1f:2c:85:d5:af:7b:ff:e8:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:50:35:E0:AD:29:D8:41:58:61:C9:A4:0D:5B:C2:C2:15:72:59:28
X509v3 Authority Key Identifier:
keyid:89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:ab:9a:32:ad:d2:71:e5:2a:87:b3:30:16:13:68:b8:99:
e4:3b:ff:01:2b:89:5a:02:02:f6:c1:a5:7d:d7:dc:51:99:b0:
02:d9:d7:cc:88:ca:34:b2:72:e0:6c:62:fa:0e:b4:88:7f:70:
25:5a:4f:b6:84:bb:e9:6e:ae:ae:f6:8b:f1:ae:e3:40:6f:fb:
7c:fd:5d:bb:f3:70:c3:7c:39:e6:b8:8f:fe:47:b2:b2:ff:fd:
f7:ad:d4:5f:a2:c6:c2:c9:2a:18:ea:cb:99:4d:1b:8d:93:74:
ec:26:ae:c7:de:75:e9:5c:14:73:b1:3d:de:b1:56:9a:1d:36:
42:e2:7b:97:8d:fb:5f:63:ed:d4:ca:80:8f:17:0c:c6:b7:fa:
52:cd:77:6f:0d:d4:33:92:cb:8d:02:84:4d:47:52:fc:0c:5e:
1a:c7:0a:be:1c:06:24:a9:54:b9:cd:ec:35:51:41:73:c3:db:
75:95:7b:8d:8c:04:d8:21:50:b9:0b:4f:f1:b4:bb:e3:48:53:
90:e9:f3:ca:02:f8:f4:97:8a:16:96:bc:a3:ba:86:40:77:90:
e1:fd:b7:a0:0a:36:9b:b5:fe:f9:80:21:37:5b:80:fd:71:96:
f6:5e:d9:13:36:e3:0c:0e:41:9e:44:c8:07:f4:19:f7:ec:c0:
cc:6e:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:49:12 2024 by rpki-client on console-fra.rpki-client.org