Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: h5GSoTCRpMg+WnXstrro0YOss3M8gVgsUtiYK+mVtD0=
Subject key identifier: 8D:51:63:CE:3F:1C:56:43:F6:AF:9F:3F:5E:A3:A5:14:B9:5A:E0:9B
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 01901DED98085CD88874262F5F95E5CD4269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 0DBF
Signing time: Sat 15 Jun 2024 22:03:48 +0000
Manifest this update: Sat 15 Jun 2024 22:03:48 +0000
Manifest next update: Sun 16 Jun 2024 22:03:48 +0000
Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: QkNnzBl1gH9r71XFvbqNunoeBuL/KyD2wiFYpPVQCFo=)
2: jFAwSqBzRuBudxT3F7vkiEfGmpU.roa (hash: xIVnf7C/C+r5vHb1QikPMamW8zRNPxkkLXdmAh1hiYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:98:08:5c:d8:88:74:26:2f:5f:95:e5:cd:42:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jun 15 22:03:48 2024 GMT
Not After : Jun 16 22:03:48 2024 GMT
Subject: CN=8d5163ce3f1c5643f6af9f3f5ea3a514b95ae09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:7d:35:c7:45:f2:e0:8c:08:ae:d1:9e:4d:
2c:c5:25:54:eb:ea:e1:17:2b:8e:6a:74:a7:7b:f0:
43:bc:46:73:f1:7f:62:33:0c:f2:87:0b:64:d4:b7:
c6:fc:97:62:ef:12:11:80:b1:b8:66:e6:de:7c:69:
7d:47:75:ab:6c:ab:77:25:c5:07:bb:3d:ea:bb:a6:
a6:fa:9e:cd:1b:0b:95:97:f3:d7:31:99:5b:10:d7:
24:a5:34:95:6d:c4:51:a5:8f:fa:2b:55:0f:a5:47:
85:9c:05:91:54:de:a6:0c:9f:a5:5e:94:9f:a1:a5:
4e:ee:5b:e0:06:67:56:d8:44:8d:53:d3:6e:04:96:
ef:7d:3a:4b:da:da:a4:4c:1c:f0:74:3d:f3:36:2d:
15:69:57:3b:4d:68:91:f2:3c:ae:7e:a7:e4:f9:03:
83:db:2d:37:4c:b4:be:51:a1:14:89:ff:21:62:7d:
d3:ae:84:cc:58:56:63:af:83:e0:a2:48:b4:b0:8b:
aa:5f:fc:6f:3e:64:b7:a8:03:08:2d:f9:63:a4:cb:
c8:ab:c4:c1:4f:7d:6c:1a:07:80:ed:75:a2:e9:4e:
1b:22:ef:cf:76:b1:45:94:89:32:a5:68:68:39:a9:
16:23:f3:6f:95:f1:d2:22:16:de:f6:ac:8a:3f:a1:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:63:CE:3F:1C:56:43:F6:AF:9F:3F:5E:A3:A5:14:B9:5A:E0:9B
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6f:ea:c3:e5:d0:41:5f:6d:f1:82:c8:ee:29:2a:21:d2:25:
6e:f4:c5:ca:6d:aa:46:7b:88:08:01:fd:11:d8:12:23:db:61:
b8:c9:f1:59:7b:5b:ff:3b:7a:fe:cc:7f:46:3e:f3:e3:01:df:
8a:a8:0c:d3:da:c0:87:8a:76:4c:60:ff:e8:42:1f:4b:57:a1:
db:26:b8:30:93:2d:ca:61:e0:13:b8:1c:fa:cd:c7:f5:0e:48:
6b:64:d7:cc:e0:c5:9a:33:88:d1:2d:c6:a9:ca:3e:0a:8f:a4:
db:76:d7:84:4b:ad:75:1c:ec:c4:b4:55:cb:8a:df:1d:e9:97:
34:b2:80:bc:6f:d7:c4:be:12:fd:ae:cd:d0:61:dd:43:c7:5f:
e8:7f:54:ea:d2:df:49:b7:e6:a7:48:70:b2:0b:81:41:04:df:
d0:5d:6e:db:5e:42:15:21:54:4c:7c:e8:54:cd:0b:72:d3:29:
fe:97:b4:3b:36:19:10:07:93:9b:37:a3:05:7b:fc:77:2e:d9:
e3:ab:73:cf:7d:70:6c:c7:4a:63:fa:7c:93:cc:93:48:03:2d:
e7:d8:ce:12:6e:ad:1e:a7:41:e2:7a:4a:96:9c:f0:71:84:5b:
aa:64:76:1c:01:49:e6:8a:d5:24:6b:4b:12:3a:9a:95:b6:32:
f1:d9:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:07 2024 by rpki-client on console-fra.rpki-client.org