Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
File: OQlq7uS6fDS4EkCtSRrEba90wx0.mft (raw, json)
Hash identifier: pcQ9gLVMBJI8uZBVgS4rY1kgOGe/OdISvZRAM2CXYNo=
Subject key identifier: 13:8C:12:CD:4B:A0:BA:AA:26:C3:4D:7F:12:87:32:0C:6A:F2:D3:28
Authority key identifier: 39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
Certificate issuer: /CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Certificate serial: 019041527443C4CA707DC5297F80DDFB9A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
Manifest number: 11D6
Signing time: Sat 22 Jun 2024 19:00:41 +0000
Manifest this update: Sat 22 Jun 2024 19:00:41 +0000
Manifest next update: Sun 23 Jun 2024 19:00:41 +0000
Files and hashes: 1: OQlq7uS6fDS4EkCtSRrEba90wx0.crl (hash: HvozTe3/13stobUASUs5nWFt5emwJoPF7RKWtNJeU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:52:74:43:c4:ca:70:7d:c5:29:7f:80:dd:fb:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Validity
Not Before: Jun 22 19:00:41 2024 GMT
Not After : Jun 23 19:00:41 2024 GMT
Subject: CN=138c12cd4ba0baaa26c34d7f1287320c6af2d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:44:1d:a7:e5:48:53:20:8d:b6:16:80:ff:
d3:72:01:87:30:d3:cf:ed:53:1d:ba:28:55:cd:15:
ce:4a:23:cf:0f:9a:a2:42:7c:48:f7:2d:45:35:c9:
5e:fe:e9:5c:95:89:81:68:f9:31:ad:8b:e6:fb:60:
d3:8d:9b:a3:f1:ff:5b:c5:ad:66:ee:39:80:19:9b:
d6:80:17:6c:b3:97:9a:d7:d8:cb:b6:34:95:22:8e:
c2:d8:c7:a8:e1:fc:c4:09:2a:d0:9d:13:5f:7b:f9:
52:d6:25:e7:22:cb:b3:a2:fd:d2:0b:cb:90:b7:34:
49:f2:98:eb:81:db:b7:92:fd:2b:60:e7:3e:c4:cb:
ec:89:85:48:a6:b6:2f:a3:b5:f1:11:c1:fd:74:c6:
9d:25:0f:68:6d:5e:5a:f1:8e:82:80:d3:b0:72:7b:
4c:bf:a7:91:4d:fe:36:bd:c5:ed:78:cb:3b:1a:65:
97:35:a2:22:43:ee:d7:67:b3:1c:1d:f2:e7:4d:58:
79:3e:7e:58:20:29:62:c5:3b:44:e1:b9:8b:e3:91:
20:4a:92:12:29:c4:32:2c:1d:91:88:3a:ea:5d:b8:
80:93:4d:f2:74:94:10:d3:96:cf:cc:b9:1c:56:50:
1b:92:8f:a5:ac:c6:61:a7:79:41:d2:81:2b:f6:ef:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8C:12:CD:4B:A0:BA:AA:26:C3:4D:7F:12:87:32:0C:6A:F2:D3:28
X509v3 Authority Key Identifier:
keyid:39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c0:6a:38:3e:13:e5:31:66:3b:06:01:ad:a8:08:f6:9f:47:
c5:d9:6a:cd:ec:01:60:6d:64:81:9b:ce:e7:e0:29:7c:7a:9e:
74:ff:2e:28:d4:7f:ea:9b:10:40:25:66:69:af:bf:86:e2:e0:
1d:a8:63:b5:d6:88:b7:59:ad:94:ca:89:1e:1c:6f:09:23:a6:
a1:ba:29:77:23:b5:33:6a:b6:85:12:bc:65:f3:16:46:99:94:
b4:96:a4:7a:f7:d1:53:3b:d7:c4:5e:fc:2a:15:0e:32:55:51:
6b:4f:17:65:cb:9a:af:38:dd:85:2f:c1:f4:a8:8d:89:f4:f9:
7e:2c:43:b3:00:47:ba:dd:94:ce:5e:e7:0d:c8:86:3b:a5:07:
7d:51:6d:a3:c7:2f:31:73:1b:ff:27:05:ec:46:4d:f3:26:0f:
0b:e5:8a:f6:31:db:29:e2:70:0a:90:90:38:92:e7:b6:90:93:
3c:ea:7d:a7:25:1b:82:2a:01:76:b2:29:16:8c:80:fd:6b:4c:
08:53:78:f7:bf:0b:e3:5f:d9:fa:07:d5:f4:2b:3f:a6:ed:d3:
89:a9:d8:66:81:09:ba:8f:10:7a:9d:fc:5c:32:a8:08:fc:c9:
f3:73:4a:a4:72:c7:b6:81:2c:e4:3d:e1:51:72:93:ad:f7:56:
39:84:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:23:31 2024 by rpki-client on console-ams.rpki-client.org