Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: x7Xzg+Azc9p/U22Ej38u1BJyv+RaCoBF/xMgecNTW58=
Subject key identifier: 9A:28:F4:5B:82:D8:D7:D9:25:1C:76:77:5D:3E:0A:34:85:FC:C6:72
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 01904868468DE1062754467C97BDB504F719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 11D9
Signing time: Mon 24 Jun 2024 04:01:51 +0000
Manifest this update: Mon 24 Jun 2024 04:01:51 +0000
Manifest next update: Tue 25 Jun 2024 04:01:51 +0000
Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: dcdP7RwQ3grUswTbOqk5Cpa404YfhxbNVOBK0LQramY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:68:46:8d:e1:06:27:54:46:7c:97:bd:b5:04:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Jun 24 04:01:51 2024 GMT
Not After : Jun 25 04:01:51 2024 GMT
Subject: CN=9a28f45b82d8d7d9251c76775d3e0a3485fcc672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:4d:8a:9f:bf:c5:d5:91:b0:4e:dd:d1:48:
2a:3a:ad:48:b6:11:0a:92:50:c0:ef:82:be:f2:23:
d4:99:c4:8c:96:3d:32:f5:74:91:2c:38:e3:a1:45:
17:5a:17:cb:41:be:ac:30:65:a3:aa:9e:58:dc:23:
70:5d:81:36:f3:93:98:ee:23:0e:95:99:ee:8e:f7:
98:9f:7b:e4:9a:9a:2f:09:9c:30:cc:f8:24:29:70:
97:0b:d6:f1:fe:45:73:21:f2:6a:5a:9a:3c:32:1f:
79:39:05:06:3c:11:86:a2:0d:fb:a1:45:cc:74:7b:
60:e1:f8:37:d7:b4:cb:ef:5f:f7:eb:45:05:f1:9f:
c2:96:85:5c:aa:61:d0:75:77:60:94:43:6f:96:48:
df:aa:48:1e:36:2b:68:5f:11:66:df:c0:3b:12:68:
63:bd:93:47:84:75:2d:dd:85:7c:79:8f:f2:d5:ff:
55:ae:29:eb:20:3f:d8:9a:06:29:11:80:23:d8:35:
13:6d:a1:0a:1c:69:a5:45:d2:d9:78:1e:c5:c2:d1:
f8:2e:71:56:b6:12:dd:a3:6b:2b:c0:9b:96:b6:f6:
30:12:ca:0c:bd:02:df:09:6c:e4:0c:39:83:34:96:
e6:be:dd:95:5d:b0:7f:0b:4f:4d:68:33:be:7c:66:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:F4:5B:82:D8:D7:D9:25:1C:76:77:5D:3E:0A:34:85:FC:C6:72
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:10:9c:2a:a7:3b:7f:9e:12:0d:9e:eb:bf:04:72:62:bf:
f4:a1:cb:34:90:d9:ca:37:49:a1:db:8a:34:7f:b6:29:52:2a:
a3:a3:15:86:25:f7:e7:9a:26:c3:e3:fe:61:59:f6:0e:f4:97:
e6:d8:db:2c:83:76:2b:6c:93:4e:34:5f:ef:ea:92:55:6a:fd:
22:31:87:56:4e:00:55:5d:43:6f:c9:e5:a6:45:8c:c9:9c:1c:
94:2e:97:d5:aa:c2:f8:ac:78:d1:60:62:75:80:99:19:3d:1d:
82:cb:8a:6d:7d:c2:7f:c4:84:55:65:ac:49:de:1f:f0:fb:f0:
d5:f0:f0:f8:72:1f:1c:eb:63:54:51:94:8c:70:41:cf:0e:44:
1b:f2:4a:99:c4:5d:7a:99:ed:d0:30:51:08:cc:32:5a:e7:16:
8f:11:31:da:4c:fe:56:4d:f1:d0:b5:30:60:ca:9b:c9:86:32:
83:4d:5e:16:5a:f5:ff:ea:88:34:a4:09:1c:06:db:3b:4c:04:
ff:b1:4e:5f:5e:da:1d:3f:72:c6:9b:d8:92:80:9f:a7:4e:48:
95:9b:1f:46:f8:d8:bd:0c:83:56:3a:ec:81:06:d3:05:dd:5e:
3f:79:7a:c2:ab:b1:3b:b2:a5:67:19:03:e9:33:e4:8e:f8:70:
e5:8d:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:17:26 2024 by rpki-client on console-ams.rpki-client.org