Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: EAk+cOckjduvrgyaorz187oHzSCP2Cd0SInuPUG7+8I=
Subject key identifier: 33:DC:45:15:4D:FA:B0:D1:12:F2:8B:F6:49:4C:7A:85:B1:D9:D1:BB
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01903585CE1C3A69FB96EA55FA6A13475569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 067A
Signing time: Thu 20 Jun 2024 12:01:19 +0000
Manifest this update: Thu 20 Jun 2024 12:01:19 +0000
Manifest next update: Fri 21 Jun 2024 12:01:19 +0000
Files and hashes: 1: 0TtBUb8fAjpTR00xfwE2DLSL7eM.roa (hash: oTEx/1SMgd8cV5v+L+E3c5aNKeW4iJwi4bwmw4n2DCs=)
2: AZM9zKcwm_TkuXGYuvqbpZY8jLU.roa (hash: QRYQliD202ba1q6T11ky93UQWeDtCXqCxejgIjypWzE=)
3: CaqiOsNrkqrGtQqaMbPS7J9bUuY.roa (hash: YKkQnFiU3pZ5puGZfR6TUQswrrUvhuCud2uFOYPCmgQ=)
4: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: HeUdhYirLSudptBiRWunUI8dVaPZw8JLlK7VCpZ43gg=)
5: jQ2cflyxNzZYOKWPuJgcSlfsh-E.roa (hash: 2BOQ89HVUiTwWZ6ByC5mpeMZAHzL/V4U2T1buEzTe58=)
6: u9t-OuqsWXhikCBkvziiqjjCmSM.roa (hash: tR/NXml1UsiKOpjSe6lkIM8sQq2+0vulyXRkFS9wMN4=)
7: y5lAHhCb8GgSYZ7O3mCp0SieCuU.roa (hash: xcakkK2zamK0AoC6fPM7elasmCX263Te8kqACyqtzRQ=)
8: yJhm-onMyYdMGlOVgTkoKrCFaLs.roa (hash: zPZvydx/EjnDgxYAT9Wr34GsW6t+DVPW3lIrvUo+EsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 11:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:85:ce:1c:3a:69:fb:96:ea:55:fa:6a:13:47:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jun 20 12:01:19 2024 GMT
Not After : Jun 21 12:01:19 2024 GMT
Subject: CN=33dc45154dfab0d112f28bf6494c7a85b1d9d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:ff:5b:4c:06:32:67:96:39:2c:0f:57:e6:
f9:78:1b:7f:32:95:62:20:f6:55:70:84:af:98:c3:
d2:07:ff:7f:6e:9d:8b:a1:a6:7b:51:7b:11:d9:83:
98:50:d7:aa:6a:61:c8:f4:0e:a8:31:95:80:de:70:
11:30:61:3f:0d:f6:b1:e6:ce:e5:0f:81:fd:07:90:
b8:03:d3:0c:ca:62:49:4f:91:2a:1e:cb:27:91:04:
e4:c2:6d:5a:8f:fe:29:1d:96:41:1b:db:38:19:e9:
cb:ca:ac:3e:73:91:71:d8:22:46:5b:5f:e9:2f:45:
b1:f4:1d:a8:58:43:8b:1f:76:07:e8:b2:5f:4c:81:
91:dd:2f:ee:a3:e4:2c:5d:87:1a:e3:47:89:32:10:
51:c0:5c:f7:18:f1:d7:a6:44:35:c5:23:62:04:c4:
78:b7:91:1a:a2:5e:fb:e7:fc:c7:c3:17:d3:e5:b4:
34:08:b7:84:27:8b:bd:b1:b0:d3:04:a8:97:df:db:
ad:fa:cd:6b:68:36:ea:45:8a:94:fd:e6:6e:e6:4f:
c7:ee:ce:70:9b:4c:5b:5a:1c:70:fc:6a:06:b0:79:
d7:a2:a0:9f:46:89:78:8a:ad:be:93:00:8d:a7:d0:
96:d0:91:90:59:29:8f:92:85:6c:52:07:a6:9e:96:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:45:15:4D:FA:B0:D1:12:F2:8B:F6:49:4C:7A:85:B1:D9:D1:BB
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c6:84:e1:c2:94:67:de:25:94:d2:d6:61:39:9d:42:7d:1f:
82:83:ae:89:ae:84:0e:52:39:8d:78:c1:a5:f8:2c:47:2a:1b:
bb:36:31:6c:d4:ba:ff:40:a8:57:d5:d3:4e:d4:1a:5f:ac:57:
01:9b:39:87:05:ce:0f:8a:72:e7:e9:8a:44:2d:c2:79:c0:7e:
16:5b:01:be:84:c6:c5:c0:4e:86:a9:41:19:fc:7a:c9:90:12:
4c:a7:e4:30:92:77:b4:ea:36:a3:57:08:c1:20:fc:96:dd:4e:
86:4f:b8:c7:3f:62:96:aa:39:8e:2d:05:9a:e6:20:f1:4f:a8:
19:05:70:7b:e3:dc:9a:d4:fd:c3:17:51:a3:f3:1b:a6:74:03:
2f:57:29:bf:83:5c:69:1a:83:78:76:10:e6:7c:f9:ef:ab:2b:
a2:29:7c:f2:01:cb:86:e7:bb:c4:46:d9:82:5c:d5:13:10:c5:
63:85:08:45:dc:36:c5:9a:f0:ae:2d:cb:4c:17:10:a7:a4:4f:
dc:2c:93:c3:ba:43:21:58:0a:8a:10:91:6f:47:07:32:39:03:
de:60:cf:43:88:20:49:05:d9:ed:1e:b8:16:9a:0a:e8:b0:e5:
d3:9c:ae:82:4b:48:a7:31:2e:cd:d7:25:0a:39:c8:0f:71:b1:
92:44:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:37:51 2024 by rpki-client on console-fra.rpki-client.org