Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: vaOLsHbwG2DpfBcs2yewfUZ67cV7uedV7hyeGK3EcS0=
Subject key identifier: 5A:91:1A:0D:B0:01:47:95:97:45:68:CF:FA:A0:A3:E3:33:70:5F:B8
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 01901E8FC462E7A5784256A6D7E9F482612A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 01:00:56 +0000
Manifest this update: Sun 16 Jun 2024 01:00:56 +0000
Manifest next update: Mon 17 Jun 2024 01:00:56 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: hQP/SpGqBOdjhvjgfghNedMbwhaYqAD/SAHtnxhQMbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:c4:62:e7:a5:78:42:56:a6:d7:e9:f4:82:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jun 16 01:00:56 2024 GMT
Not After : Jun 17 01:00:56 2024 GMT
Subject: CN=5a911a0db0014795974568cffaa0a3e333705fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:3a:6d:16:55:d1:19:43:d5:03:a5:bb:d1:
85:79:f1:07:ef:00:f3:a3:1f:bf:96:70:c4:61:2b:
7d:c1:e9:19:da:09:c3:31:f4:5b:30:65:a4:e8:d1:
ee:29:9a:46:f5:a5:cd:0f:a7:74:37:7c:27:a8:9a:
61:5f:b6:99:89:6b:c0:c7:df:d6:ae:62:58:cb:a0:
dd:b7:95:f7:47:3b:96:4e:e6:67:10:d9:59:88:27:
6b:48:cb:d0:70:1b:d4:e2:30:ad:6e:4a:3d:11:ff:
d8:cd:8f:3a:49:b0:0f:ec:23:1c:5e:91:f5:b9:74:
a4:ea:eb:6a:fb:54:ba:e1:ca:a5:01:7c:c7:ad:79:
08:fa:1e:43:88:41:03:b3:b5:8b:4d:78:3b:14:3a:
1d:0e:12:86:04:07:cd:f4:37:e1:e0:c6:46:ff:e2:
a2:1f:d3:3f:15:15:36:79:0f:29:5e:f4:8d:0b:27:
09:0b:6b:28:ca:48:73:47:b7:34:b7:bb:7d:aa:06:
8f:c4:ce:13:64:4a:45:e6:a8:3f:07:76:22:95:a4:
68:74:1e:6e:26:fb:70:dc:ef:bb:ae:f3:5c:35:ff:
91:51:d1:cb:f3:53:1b:ba:1a:50:3f:3c:ac:5e:fa:
e4:88:ff:35:32:25:15:71:f8:24:d8:85:27:1a:7a:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:1A:0D:B0:01:47:95:97:45:68:CF:FA:A0:A3:E3:33:70:5F:B8
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7d:d0:58:6b:45:67:04:4f:76:84:02:10:07:3a:5b:08:2f:
70:f7:cd:6c:69:36:2a:a8:53:95:25:c9:b2:3f:a3:a6:89:fb:
c4:20:7c:41:32:55:e8:31:64:72:73:f0:f1:83:b5:bf:9e:3c:
ed:9e:d4:e0:c6:54:98:ed:65:d5:29:e8:9f:43:13:76:df:c2:
dd:e4:f6:7f:a1:b0:58:5e:74:27:f6:23:48:4c:89:78:89:e0:
63:0c:23:e7:25:7b:9e:5d:c9:71:a9:c1:49:d7:94:15:b8:28:
c0:2b:bc:cd:51:37:ff:4f:20:3b:17:65:c2:79:cf:85:2a:3b:
e0:97:c1:af:8c:85:0d:e5:04:d1:d9:27:c2:83:51:9c:ad:58:
ea:46:d6:88:ac:f6:df:7b:93:b4:9b:17:95:72:fa:22:97:72:
b5:ca:fc:c3:41:64:52:94:5a:13:07:9c:54:bf:ac:1a:61:cd:
b9:6e:3a:36:ad:eb:0d:eb:ad:69:fe:40:4c:7c:99:e2:1f:c9:
ad:34:60:48:9b:76:c2:bb:07:d9:24:a0:ca:64:77:3c:72:1d:
bc:61:82:73:40:fd:e9:1c:4f:84:eb:a8:8d:d3:b6:85:92:93:
fc:a6:41:a2:54:83:4f:15:75:2f:ef:92:7e:5f:a8:3e:68:44:
83:c3:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:30:34 2024 by rpki-client on console-ams.rpki-client.org