Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File: KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier: icmdTYami2Oqomt8YZTJyB1r/S+s7D762l90TOdqzI4=
Subject key identifier: 95:DE:41:D6:B5:DB:4F:78:DF:EA:9B:98:58:CE:36:14:DA:99:B8:C8
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 019037AACE26889801AB30BD85C96C1520CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number: 05AC
Signing time: Thu 20 Jun 2024 22:00:58 +0000
Manifest this update: Thu 20 Jun 2024 22:00:58 +0000
Manifest next update: Fri 21 Jun 2024 22:00:58 +0000
Files and hashes: 1: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: 80iIAHNDq5HP36EyQvvXpadCb+oP4rrcx6ADuabOXyo=)
2: z_puzyIY80Ss701IWZu1J-2_ueg.roa (hash: /c2FmbwxtsGs8OeiSybZnf3p2GuZpRyLUnsm5fYocIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:aa:ce:26:88:98:01:ab:30:bd:85:c9:6c:15:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Jun 20 22:00:58 2024 GMT
Not After : Jun 21 22:00:58 2024 GMT
Subject: CN=95de41d6b5db4f78dfea9b9858ce3614da99b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:70:6e:31:f5:b7:46:f9:a2:9f:5f:bb:d3:
60:e5:44:bb:88:0d:6e:39:01:1b:43:95:31:b1:bb:
d2:ba:ca:4a:de:54:d6:fd:07:08:45:59:07:f1:62:
4c:74:22:f7:cb:45:07:92:72:0c:7b:75:c0:54:fa:
5a:d6:25:96:41:3b:1a:fb:18:9d:00:0d:b0:30:b3:
f5:b3:57:d2:be:81:02:35:17:22:51:4f:f3:9b:3d:
51:91:16:91:e0:57:87:8c:30:ab:26:29:48:29:30:
10:03:be:68:8d:74:88:95:ed:e2:33:38:b4:3b:12:
b7:e6:40:d9:5a:5d:dd:b7:01:d4:3f:94:f9:ce:f8:
e8:58:b0:84:10:a1:01:9e:bb:c9:fc:a2:e3:60:48:
9e:7a:7d:cc:98:64:40:23:5c:8c:55:bf:18:65:52:
a4:5b:48:8b:4c:53:d0:89:6d:60:21:d0:39:21:41:
5d:c1:a3:ea:a0:59:9b:95:2b:f9:4b:a2:8b:96:f1:
dd:c1:e3:e7:e8:5a:7a:c5:76:db:39:40:f8:b1:48:
7d:be:10:83:36:1c:c6:16:4c:40:df:0f:7e:e9:0b:
64:35:05:e6:92:8e:3f:c9:78:d5:93:d3:db:aa:ff:
c5:31:78:0f:ca:c7:86:f6:63:4b:a5:2f:79:20:c6:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:41:D6:B5:DB:4F:78:DF:EA:9B:98:58:CE:36:14:DA:99:B8:C8
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:9e:63:62:42:f5:41:3e:bd:f0:39:41:f6:48:26:6e:d5:
9f:8d:c0:e0:d5:d8:ea:1a:14:77:d1:f4:93:1b:5e:9a:f3:85:
fc:bf:75:dd:98:62:6c:5f:c9:b6:c2:37:b0:75:d4:47:1d:e7:
e3:22:63:85:5d:a5:81:4e:e7:da:6c:dd:7b:a9:a5:90:03:53:
5c:1b:b8:23:54:f6:5e:f1:1e:03:eb:50:04:17:34:63:76:56:
c4:55:75:d7:31:26:9b:fc:04:dc:70:e6:9c:a9:0c:92:01:06:
3d:b6:5b:fb:a1:ff:fc:57:40:ce:0c:31:32:c9:40:32:c5:f2:
a5:ae:1b:d8:e9:52:18:85:6c:c6:92:3b:d5:db:91:d6:04:12:
79:22:4a:7c:c2:37:5a:9c:7f:97:4d:59:12:40:43:79:6f:ab:
e4:d6:9a:5a:74:15:b4:87:c9:30:bb:6c:9b:fa:af:6c:1b:93:
54:ba:4c:7e:2b:88:e3:ab:bc:0d:cd:52:bf:b0:56:e9:db:6a:
b3:fa:fe:fa:82:da:99:ae:99:ad:1d:2b:51:8f:4b:20:03:70:
7f:e4:55:6b:aa:0b:e6:eb:3e:f7:e5:61:1a:14:b6:5e:df:4c:
72:4a:5d:f6:73:fe:e3:57:1e:de:96:59:de:e5:78:4f:c9:3f:
12:23:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:36:37 2024 by rpki-client on console-fra.rpki-client.org