Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: 8yGfYqLPDr1GdPUY2NhTBkdoJ2oxYifkTqK5g5Q+YG0=
Subject key identifier: 77:1E:B8:C5:C1:91:C1:A1:B4:F1:2F:E5:17:5D:DA:9B:EC:F0:CF:86
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 01901E8FAD1B5C448ACD824795D951BF1A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 0DEC
Signing time: Sun 16 Jun 2024 01:00:50 +0000
Manifest this update: Sun 16 Jun 2024 01:00:50 +0000
Manifest next update: Mon 17 Jun 2024 01:00:50 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: GaA5Bvl3bGdLYXOJfW/5Ylvgikmma2ywqLFIboBpXgg=)
2: bFyTSVWaksMFPIC5uBwbHyreY9E.roa (hash: 3FG371GIP9RsCMbfIl11e2kFW+ACT9X1ZyfToXR+GXU=)
3: reNYiWo9S-NrugOXr_4jFbghS_g.roa (hash: 0z3wlnDlEROtnkWdI8KPfL+waRYLTRMYoibxjUPz4q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:ad:1b:5c:44:8a:cd:82:47:95:d9:51:bf:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Jun 16 01:00:50 2024 GMT
Not After : Jun 17 01:00:50 2024 GMT
Subject: CN=771eb8c5c191c1a1b4f12fe5175dda9becf0cf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:c5:3c:29:d1:5d:30:b7:a0:5f:73:95:b7:
9a:f9:b0:a6:83:90:95:d9:21:ba:c8:2d:8f:9b:8d:
4e:b6:1a:0a:3a:41:97:1f:d3:26:33:7d:f2:6d:bb:
bb:ef:65:79:14:78:ac:f2:bd:c0:13:58:de:b7:6e:
af:ce:bd:50:10:d2:3d:16:10:de:0c:ca:d7:d7:de:
5c:29:a3:bd:ab:b7:24:8c:14:3d:e7:70:80:57:80:
5e:65:ce:1c:05:40:e6:4c:51:27:3b:08:9e:a3:ad:
08:f7:4b:23:af:05:f7:2a:5e:0d:ab:5e:87:45:af:
f5:ee:3b:0d:37:b4:5b:59:f4:80:cf:3f:bf:6b:35:
0d:e7:10:eb:ab:9a:90:f1:4e:85:12:74:cf:4d:39:
6e:00:a3:58:2b:0e:69:94:3f:85:15:7b:ef:45:2b:
d2:73:3e:5d:53:77:fc:3d:78:0d:70:14:96:09:7c:
20:e3:c7:5f:c1:bd:04:a9:2c:d2:1d:9d:f3:ca:bc:
c3:05:95:b0:10:cb:0f:fc:ac:c9:da:4c:db:f7:df:
b5:70:f2:a8:0a:6b:eb:47:a9:17:e8:0c:28:1b:33:
86:8d:88:96:6b:7f:cc:a6:3e:d9:52:74:db:32:3e:
d2:b4:fe:32:d6:dd:dd:fe:f4:9f:b8:1a:ff:66:1d:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:B8:C5:C1:91:C1:A1:B4:F1:2F:E5:17:5D:DA:9B:EC:F0:CF:86
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:bf:cc:66:af:0d:f5:b4:6b:be:e9:b5:8b:e2:07:b7:f6:
ad:0d:44:1c:d9:68:de:49:c1:56:6d:a5:4d:bb:db:d0:4c:74:
12:ae:fd:15:47:a5:2d:b6:d3:14:5b:92:96:43:d2:42:a9:32:
a7:b6:6d:c1:8e:ae:c9:18:a9:1b:bf:22:b0:d9:65:94:51:24:
56:9e:df:5a:11:5d:01:c2:1e:f8:be:93:5d:1b:2d:d9:60:b8:
fa:6c:f2:49:0a:f1:33:60:7a:62:c3:e5:b1:73:5f:16:cd:51:
7a:c0:f1:5f:79:d6:83:4c:5b:8f:62:f7:a2:4b:f1:06:ec:66:
05:ca:52:4a:3a:33:bc:f3:97:90:c1:67:d2:97:a3:dd:35:e1:
a0:87:83:4b:5e:86:c7:4e:3a:1c:1c:13:81:0e:45:4d:22:12:
47:c1:39:71:8d:03:9c:c4:f6:90:28:9e:b9:1b:95:7b:87:11:
e9:66:48:2c:0f:6f:91:87:9b:3c:06:70:03:eb:ad:c1:e8:19:
26:9f:72:21:ba:86:3e:2b:b1:06:1d:9d:2f:e7:ee:53:a8:67:
0b:85:12:e3:24:dc:89:d6:fa:ba:d0:b5:59:00:e7:32:ff:59:
17:16:c5:20:05:7d:58:a3:92:4e:82:d1:50:dc:8f:dc:c8:56:
f8:32:65:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej60bXESKzYJHldlRvxpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOTA0MTU1ZWUzYWNmZTNmZWE4YmJmZWU4NmU5N2M1OGM4
OTkxZjQwHhcNMjQwNjE2MDEwMDUwWhcNMjQwNjE3MDEwMDUwWjAzMTEwLwYDVQQD
Eyg3NzFlYjhjNWMxOTFjMWExYjRmMTJmZTUxNzVkZGE5YmVjZjBjZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLnFPCnRXTC3oF9zlbea+bCmg5CV
2SG6yC2Pm41OthoKOkGXH9MmM33ybbu772V5FHis8r3AE1jet26vzr1QENI9FhDe
DMrX195cKaO9q7ckjBQ953CAV4BeZc4cBUDmTFEnOwieo60I90sjrwX3Kl4Nq16H
Ra/17jsNN7RbWfSAzz+/azUN5xDrq5qQ8U6FEnTPTTluAKNYKw5plD+FFXvvRSvS
cz5dU3f8PXgNcBSWCXwg48dfwb0EqSzSHZ3zyrzDBZWwEMsP/KzJ2kzb99+1cPKo
CmvrR6kX6AwoGzOGjYiWa3/Mpj7ZUnTbMj7StP4y1t3d/vSfuBr/Zh0hcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHceuMXBkcGhtPEv5Rdd2pvs8M+GMB8GA1UdIwQY
MBaAFN+QQVXuOs/j/qi7/uhul8WMiZH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQt
NjQ2N2Y0NGI0M2JmLzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80NDJlMTctNDE5OC00MzViLTk2ZjQtNjQ2N2Y0NGI0M2Jm
LzEvMzVCQlZlNDZ6LVAtcUx2LTZHNlh4WXlKa2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwq/zGav
DfW0a77ptYviB7f2rQ1EHNlo3knBVm2lTbvb0Ex0Eq79FUelLbbTFFuSlkPSQqky
p7ZtwY6uyRipG78isNlllFEkVp7fWhFdAcIe+L6TXRst2WC4+mzySQrxM2B6YsPl
sXNfFs1ResDxX3nWg0xbj2L3okvxBuxmBcpSSjozvPOXkMFn0pej3TXhoIeDS16G
x046HBwTgQ5FTSISR8E5cY0DnMT2kCieuRuVe4cR6WZILA9vkYebPAZwA+utwegZ
Jp9yIbqGPiuxBh2dL+fuU6hnC4US4yTcidb6utC1WQDnMv9ZFxbFIAV9WKOSToLR
UNyP3MhW+DJlcA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:50 2024 by rpki-client on console-ams.rpki-client.org