Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File: PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier: AayjYf4vSatEmBZaGHfUgwrW3/ytsEwGoshUt8aZl/c=
Subject key identifier: 33:C4:51:AC:8A:99:E1:5A:A7:D4:97:90:59:9B:79:58:F6:AF:3F:48
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer: /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial: 01901DEC4D492EE1D2CEB7C56B36B9649DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number: 0BAC
Signing time: Sat 15 Jun 2024 22:02:23 +0000
Manifest this update: Sat 15 Jun 2024 22:02:23 +0000
Manifest next update: Sun 16 Jun 2024 22:02:23 +0000
Files and hashes: 1: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: BW65TA1Y61r4fDHrRqhW2z7Ddsv4h9oQiT85PXqwk48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:4d:49:2e:e1:d2:ce:b7:c5:6b:36:b9:64:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Validity
Not Before: Jun 15 22:02:23 2024 GMT
Not After : Jun 16 22:02:23 2024 GMT
Subject: CN=33c451ac8a99e15aa7d49790599b7958f6af3f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:5f:da:8f:67:83:28:3a:f6:f5:c8:d5:33:
1a:d1:11:f0:f8:38:06:4b:81:d9:d5:ec:53:d1:90:
c7:0a:e7:68:0f:57:53:52:12:8e:a7:a3:40:c7:d8:
09:f2:ed:b7:fc:9b:3d:21:57:e1:42:53:cc:b3:c2:
83:a6:31:cd:65:7d:8b:67:45:12:81:85:05:62:9d:
4e:1c:bd:a1:2e:e3:8f:7d:ad:2c:a4:00:a6:3e:8b:
9b:48:82:52:45:57:18:d9:39:34:17:6c:d3:d0:68:
42:69:6f:c5:12:cb:7e:bb:1c:d2:ea:e2:71:ef:06:
15:65:0b:cd:ab:ef:a8:f5:15:ee:90:ab:f7:79:2f:
75:ef:9d:2e:41:6a:4c:50:95:99:d5:35:5d:3e:c2:
b6:1d:61:3d:3e:0a:3f:e7:9d:54:5d:5c:4b:6f:7a:
b8:de:3a:c4:7c:73:2f:90:c3:3d:6b:ce:09:15:27:
aa:b1:af:c8:16:34:35:31:f2:2a:ff:6d:e1:2e:9b:
8e:24:12:8d:09:66:aa:96:94:6b:0e:39:ba:a5:26:
a1:17:9d:46:1b:53:57:16:7c:ef:8a:ae:4a:ee:54:
5f:2b:2f:fe:07:b7:84:83:9b:a8:63:fd:33:e2:ba:
89:95:1d:46:18:93:55:11:01:a5:e8:87:76:31:7e:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:51:AC:8A:99:E1:5A:A7:D4:97:90:59:9B:79:58:F6:AF:3F:48
X509v3 Authority Key Identifier:
keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b2:9b:8a:d0:69:25:28:a2:dc:6e:a9:fb:bb:c9:ac:c0:8c:
d0:99:f8:99:e0:3d:3e:6b:f2:1b:25:09:69:fc:e4:0c:02:f3:
9f:f5:77:ba:aa:bc:dd:3b:7c:95:ea:86:13:98:13:29:3e:19:
59:6a:4e:d5:77:a8:90:86:57:57:8d:90:fc:55:06:bf:61:ae:
f5:6a:c0:1e:94:f7:c6:6d:4b:5a:72:84:e3:7d:fa:55:e0:b3:
3e:26:9a:b8:b5:5a:7b:6a:1e:29:e3:f3:ba:97:78:d4:f2:89:
6c:50:85:0b:cb:37:8e:b5:76:fd:a2:4c:ae:4b:80:b8:1a:2d:
95:79:85:c8:9a:90:d3:bd:77:69:63:10:db:14:b0:80:08:2e:
12:e1:21:41:c0:38:16:ca:da:40:77:da:27:9d:9e:1e:04:f6:
1c:8a:7d:9a:77:17:f8:31:03:c6:4b:d8:b7:35:d3:57:13:01:
6e:91:10:7d:9d:6e:8d:43:e5:47:0d:ec:24:91:5c:ca:f8:00:
17:a2:71:ee:eb:39:f7:e6:3f:c5:00:24:91:6c:df:04:40:46:
34:aa:16:b7:d1:5a:53:b9:a8:88:b7:e7:a4:48:75:1f:50:a4:
0e:51:00:c3:11:a1:3a:1d:58:90:d1:bf:d2:77:80:1a:5a:4f:
a4:76:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:07:18 2024 by rpki-client on console-fra.rpki-client.org