Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: gYKyMmYO2cXX7fCrf9D7GC0FP7NAP7J1RYT46zGPUDo=
Subject key identifier: 53:5C:22:8F:F5:CC:E2:71:66:B3:C9:6D:57:26:B4:CE:D7:D9:4D:C0
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019041898465CE148048141366E9AAD18738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: AC
Signing time: Sat 22 Jun 2024 20:00:49 +0000
Manifest this update: Sat 22 Jun 2024 20:00:49 +0000
Manifest next update: Sun 23 Jun 2024 20:00:49 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: HQNhyUDuezzHdCN74E6hzeYghnp32anNTrhlLYKZWK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:84:65:ce:14:80:48:14:13:66:e9:aa:d1:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Jun 22 20:00:49 2024 GMT
Not After : Jun 23 20:00:49 2024 GMT
Subject: CN=535c228ff5cce27166b3c96d5726b4ced7d94dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:e2:da:8c:7b:0f:18:92:b0:b7:86:3d:c5:
e3:fd:f7:76:79:7c:1e:27:be:a8:88:11:5a:93:ed:
c4:92:b1:a0:19:54:aa:02:7d:4c:47:97:a0:96:da:
17:c8:96:de:72:dc:55:87:d6:a4:15:7a:83:54:c3:
53:c5:03:a9:f0:39:0c:a2:5c:6e:43:b6:2e:b0:e2:
77:ce:5d:ba:5f:77:08:a9:3b:33:d6:19:34:8f:9e:
65:f4:6b:48:78:29:18:f2:3b:3a:e9:f3:5a:2c:59:
ca:19:88:fb:25:15:41:f7:40:06:2a:f5:d5:78:f9:
da:28:e7:4a:a3:9a:ab:d1:1f:b9:a5:53:f5:4d:71:
ea:1a:d7:d8:7b:27:28:3c:4e:4a:49:a0:ef:02:ef:
17:5e:c4:4f:3f:46:48:74:1f:d6:5e:61:9a:17:a9:
9a:8a:2c:bd:16:ac:29:1b:a5:a5:22:34:fc:c7:1c:
07:1b:ed:74:aa:18:5a:ed:10:b0:f4:f5:a6:e9:c2:
32:bf:56:2e:3a:0a:e1:e1:a7:bf:1e:d3:de:e5:6a:
2b:36:ee:00:4c:e3:89:7e:04:26:73:da:b1:3c:2e:
c2:96:51:7c:e5:3c:bb:60:c3:78:26:4e:de:84:d9:
ef:39:58:e0:b0:f4:05:9c:2b:42:11:df:63:5d:51:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:22:8F:F5:CC:E2:71:66:B3:C9:6D:57:26:B4:CE:D7:D9:4D:C0
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:48:de:c5:f5:3e:80:f6:14:95:1d:c2:31:ff:76:01:84:
53:1e:dc:b9:09:88:7c:c3:58:9c:f4:7c:0a:6e:02:c4:b4:de:
55:02:bd:7c:72:8d:c1:4c:2f:a8:20:05:e6:dc:ca:55:c6:65:
e3:11:72:cf:d1:2f:cb:6a:35:79:19:51:1c:b7:80:15:93:6a:
78:05:3c:95:a8:eb:71:e9:c9:21:c4:69:bc:a7:8a:22:5e:f5:
f7:cb:8d:82:81:90:7f:e9:ca:fd:fa:97:60:9c:58:ee:43:6e:
4c:66:c3:20:f2:2f:7c:8b:b0:1d:56:1b:77:78:21:6b:6e:45:
84:de:a1:5c:49:8a:b4:53:31:27:38:e0:38:39:64:a8:bc:99:
d5:98:d7:ef:29:85:af:ea:8d:77:74:d0:32:db:36:eb:ff:19:
d9:21:36:4e:b1:6d:bd:f3:f0:a9:5c:7b:ae:c7:91:11:cf:12:
20:5f:ea:59:89:12:9e:8c:1e:0c:a4:b6:63:89:6e:7a:f4:86:
d4:37:e6:fa:d1:64:8c:7c:84:9c:57:0f:0b:11:62:86:f5:2e:
7c:b1:bc:a6:2b:cf:e8:f8:36:21:d1:0f:87:22:8e:66:70:94:
4d:6f:fe:4c:ea:a4:b0:46:2e:a8:ac:93:e0:d4:76:96:72:24:
49:f6:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:59:45 2024 by rpki-client on console-fra.rpki-client.org