Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: yOg5T9DjeiXHbA4H5L0FEEeSEPVOv8TQayT+sPFYZ10=
Subject key identifier: 86:94:A2:42:FF:D9:ED:3E:F5:D0:4C:1A:5A:F4:81:CC:00:33:5C:27
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 01903E1AB6C8A3EF52174192A7479456CF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 0C61
Signing time: Sat 22 Jun 2024 04:00:56 +0000
Manifest this update: Sat 22 Jun 2024 04:00:56 +0000
Manifest next update: Sun 23 Jun 2024 04:00:56 +0000
Files and hashes: 1: Y4tSRVyScqX9DQYxjb_3vAqB2eI.roa (hash: Bxm4VqLQY2X8NZaDed7Tq7KMW2LjfQP0AFsk0Fn62J0=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: kPcsZbLLaPyzluSmOyjZusdHLIvTaui9lmkW/Qm9YDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:1a:b6:c8:a3:ef:52:17:41:92:a7:47:94:56:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jun 22 04:00:56 2024 GMT
Not After : Jun 23 04:00:56 2024 GMT
Subject: CN=8694a242ffd9ed3ef5d04c1a5af481cc00335c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:46:92:ac:a8:2a:90:db:02:56:f4:f8:b5:
d3:98:a1:3c:2a:e1:f0:81:f9:cc:cf:51:79:fe:b0:
e6:a4:9b:eb:4f:f6:39:3a:85:ef:91:08:2b:d1:b8:
07:6a:36:ed:93:ff:0e:36:53:22:eb:9b:4d:a5:39:
d1:31:46:4f:08:73:24:16:b4:ca:89:d2:eb:6f:24:
d5:1e:46:cd:4e:fd:48:62:07:91:2c:88:33:0d:54:
ea:4c:46:88:da:f6:7d:9e:e7:26:57:1d:eb:65:e1:
e7:60:78:24:d2:c9:3a:d7:eb:a8:14:fe:cd:28:96:
36:fe:f8:a5:42:21:61:69:ae:28:4e:1a:5a:b6:dd:
df:61:78:08:3f:cb:5d:2f:3f:87:52:04:35:9f:d1:
c8:d9:c4:36:39:8a:ae:04:46:12:42:64:69:e3:97:
11:70:65:aa:b0:ab:7a:36:9c:20:9e:b4:c8:99:b2:
25:63:53:81:df:be:91:48:e9:16:20:5e:5b:49:f7:
3f:78:b9:6c:ed:86:f1:69:ad:1e:49:0e:e1:0f:65:
a8:55:9a:5f:3a:28:e5:77:46:47:2b:bc:95:d5:42:
e4:37:a6:4b:2c:86:46:f5:1e:9f:2d:0f:94:76:21:
dd:df:e9:74:67:02:c6:d8:9d:61:cd:93:1d:5e:36:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:A2:42:FF:D9:ED:3E:F5:D0:4C:1A:5A:F4:81:CC:00:33:5C:27
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:a0:77:16:eb:9a:60:a6:8c:5f:80:ff:c8:17:dd:7f:d8:
68:52:f0:be:20:10:eb:47:87:26:b0:b8:a0:14:a9:c5:3c:9f:
91:90:d9:45:85:24:9a:05:2a:c9:d5:ca:b7:51:c9:e5:1a:36:
8d:29:08:9e:db:18:63:0d:72:e6:9d:0b:9c:82:0d:f8:23:1b:
7b:04:39:ee:ae:63:d3:36:c3:07:ed:d7:98:1b:13:56:bf:75:
0f:d1:c4:12:84:46:e8:4e:55:5b:a5:08:15:12:3b:1b:2d:c9:
0e:06:33:07:f7:f5:bc:77:e0:71:2b:64:b7:a1:1a:c3:d4:68:
48:6b:ae:1f:8b:12:8d:e3:90:a7:a6:29:d1:ef:31:79:a3:f5:
46:53:72:2c:34:e5:1f:24:c2:87:15:0b:7f:57:8d:88:be:f6:
05:62:d8:5a:8d:67:f4:d7:45:9c:e1:b3:4d:d9:c1:57:73:f3:
17:62:1c:8d:73:59:d8:2c:f4:d1:0b:49:d2:fc:33:49:fb:d6:
f7:97:25:65:46:b0:65:94:27:d0:29:03:ed:0c:8f:6c:4a:2e:
94:87:06:20:0f:3f:32:cd:d1:4a:ab:1a:af:55:3a:42:56:9a:
61:18:85:93:a2:41:ab:74:fc:aa:fe:04:c5:75:26:c7:14:99:
45:88:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:34:05 2024 by rpki-client on console-fra.rpki-client.org