Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: oc9os8Gx7QZ3O4/mgVOATkMtL/zVZYKXUkzixK3N9uQ=
Subject key identifier: 28:C8:1E:46:75:C6:07:93:DC:0F:2E:77:93:F0:F0:B0:AE:49:90:43
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01903707158FD1B5557F25776A24B8E87938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 11D1
Signing time: Thu 20 Jun 2024 19:02:09 +0000
Manifest this update: Thu 20 Jun 2024 19:02:09 +0000
Manifest next update: Fri 21 Jun 2024 19:02:09 +0000
Files and hashes: 1: GNXWP4MIXXZv_Wx1SGm78mApm8Y.roa (hash: PVcmbI849da9QDOtT2+f8+Zk528OedcilY7aD+CR3B4=)
2: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: cDphXrvaY4bWDZyex9haYWZgIalTsUqC8avHr1ylXeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:07:15:8f:d1:b5:55:7f:25:77:6a:24:b8:e8:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jun 20 19:02:09 2024 GMT
Not After : Jun 21 19:02:09 2024 GMT
Subject: CN=28c81e4675c60793dc0f2e7793f0f0b0ae499043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:f6:e4:cc:12:d4:4a:11:3c:04:b2:6f:01:
dc:5d:6d:9e:ab:b0:84:0c:2a:ee:6d:00:63:b7:00:
b4:f4:5f:52:f5:ca:b7:d2:4e:ff:b7:67:7d:56:9f:
71:65:e3:ce:33:90:ba:bf:a8:cc:1c:89:0d:d7:20:
a4:90:7d:d6:95:3a:8f:b6:6b:b9:ff:c1:3b:d2:c7:
fd:21:d4:29:19:4c:9c:d5:d0:10:0f:d7:bb:5a:7c:
de:c5:3a:4d:75:97:64:b6:f4:2e:4c:7e:df:de:86:
6b:39:f8:58:b6:da:b6:11:5e:38:39:1c:22:17:b0:
8a:93:11:f3:a1:74:ad:da:38:75:bb:f4:f3:c9:cc:
7f:3c:7d:b6:ac:80:6b:05:95:d4:a7:16:79:1b:9a:
74:1f:f5:43:77:3a:94:47:67:70:2b:18:c6:61:9b:
e8:df:55:58:2b:3b:43:60:ae:24:df:fe:36:20:bc:
f4:4e:26:66:b0:db:25:94:31:cc:89:fc:ac:bf:93:
9c:6d:df:94:da:2b:79:94:b5:2c:8b:5d:93:e2:6c:
a9:49:d9:20:12:13:0d:18:82:18:eb:28:aa:eb:ba:
8a:7a:bb:09:48:19:02:bc:41:34:20:ff:7d:5d:ce:
9c:28:9b:cd:a3:0f:e7:33:4a:1e:49:3d:b5:9a:c1:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:1E:46:75:C6:07:93:DC:0F:2E:77:93:F0:F0:B0:AE:49:90:43
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f9:72:85:9c:c4:10:c3:6c:e1:af:f7:64:94:bc:78:86:79:
01:4c:31:0f:c9:9f:42:a3:06:b7:5d:fc:08:66:39:16:ca:a9:
75:b8:42:41:9e:e9:d1:0d:0c:e5:64:b2:32:d6:62:6a:e7:4c:
36:6c:a7:a7:e1:fd:cc:ed:a9:4c:60:22:a9:f3:51:23:d4:00:
9a:40:29:80:db:61:6b:8c:13:77:80:2e:40:a1:f7:e9:ce:10:
d5:26:59:ba:09:29:99:dc:2d:6d:4c:44:7d:73:3d:ed:b8:a2:
b1:b4:a9:2b:03:7d:90:f2:2d:54:35:d0:4e:81:8e:eb:53:5a:
c9:49:e3:96:73:80:bc:20:a3:06:a6:fa:21:ad:79:37:34:e4:
f2:42:fe:bb:c6:e4:9f:e0:e4:cd:94:e9:56:e2:52:6c:10:03:
b3:8b:af:15:af:09:b7:83:95:4a:14:34:b4:e1:92:45:bd:3d:
bf:8f:cd:c4:80:d7:8c:6b:10:33:c9:f0:a5:b9:b3:45:f5:48:
84:70:07:6b:ce:0b:e0:dd:af:f6:08:bb:15:5c:39:f1:54:0b:
a4:a8:10:83:d7:b8:3f:a8:71:19:94:5f:4d:7e:c4:88:2c:9f:
ee:f3:b9:3e:43:d0:39:4b:74:97:e5:ab:e5:e0:fb:91:bf:72:
a9:a5:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:34:11 2024 by rpki-client on console-ams.rpki-client.org