Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
File: hFMo2_ilOEKLLl4BiFhQFctYu0o.mft (raw, json)
Hash identifier: 9/Br1cYvxu9+wceLIZNNzDZfQdqGf3HBE6jncXSYW/s=
Subject key identifier: 42:6B:17:71:EF:2E:B5:C8:02:26:3E:7B:DD:E1:88:A6:7B:0E:2A:8F
Authority key identifier: 84:53:28:DB:F8:A5:38:42:8B:2E:5E:01:88:58:50:15:CB:58:BB:4A
Certificate issuer: /CN=845328dbf8a538428b2e5e0188585015cb58bb4a
Certificate serial: 01901DEDA5B511AF96C42C65E549BAAC0C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
Manifest number: 02CA
Signing time: Sat 15 Jun 2024 22:03:51 +0000
Manifest this update: Sat 15 Jun 2024 22:03:51 +0000
Manifest next update: Sun 16 Jun 2024 22:03:51 +0000
Files and hashes: 1: hFMo2_ilOEKLLl4BiFhQFctYu0o.crl (hash: YznAVvIwn5rTtM2Z/OW8h2Cad5UXDGRjE6CfkixcWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:a5:b5:11:af:96:c4:2c:65:e5:49:ba:ac:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845328dbf8a538428b2e5e0188585015cb58bb4a
Validity
Not Before: Jun 15 22:03:51 2024 GMT
Not After : Jun 16 22:03:51 2024 GMT
Subject: CN=426b1771ef2eb5c802263e7bdde188a67b0e2a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:cd:28:21:c1:a3:48:b2:da:8e:2f:b7:59:
8c:06:e7:ed:0e:50:1e:28:50:37:21:7e:6b:ff:75:
b9:32:98:1c:74:60:94:a0:6f:49:6b:29:7c:4a:9f:
3d:4d:23:d6:b0:70:e9:06:44:26:51:bf:b2:d9:ce:
a2:24:16:f3:a7:f8:46:96:36:d5:2f:cc:bc:22:ed:
17:71:15:5a:eb:06:9f:98:6e:4e:bf:cf:07:ca:3e:
d7:c5:2a:33:91:23:fd:4f:e6:94:61:93:0d:e3:cc:
eb:c2:5c:58:96:c8:74:6a:9d:ec:4b:ad:03:e9:87:
76:15:8f:9c:f0:88:0b:f4:95:0c:d7:6d:13:4f:cf:
8f:5e:f3:c9:91:b6:1d:31:c4:32:51:7e:d3:68:95:
6e:1d:34:44:45:41:50:23:5a:d3:7e:3c:b7:83:cb:
a5:30:c0:0b:34:d7:98:1b:fd:27:de:dc:ef:62:5a:
ec:62:b8:11:76:b0:16:e3:af:a5:c7:c8:55:f7:60:
05:ea:93:2f:00:43:9f:13:0d:ae:62:18:d9:36:4d:
51:66:f8:75:4e:0b:31:c4:b5:9e:30:d8:24:37:4f:
f4:1e:bf:1b:cb:be:0f:7a:3b:3d:db:c4:93:7b:a5:
7f:e7:c4:af:3e:e9:86:4e:e6:49:7d:e2:1e:03:0a:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:17:71:EF:2E:B5:C8:02:26:3E:7B:DD:E1:88:A6:7B:0E:2A:8F
X509v3 Authority Key Identifier:
keyid:84:53:28:DB:F8:A5:38:42:8B:2E:5E:01:88:58:50:15:CB:58:BB:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6b:d5:a4:18:f7:5a:e7:90:2c:4a:a4:a9:41:a4:43:08:f6:
3e:10:24:43:ff:48:5b:28:a5:80:3e:14:63:e2:c1:dd:7f:ee:
72:70:47:2c:cc:54:db:cd:bc:dc:f7:e5:09:fa:7e:87:df:fe:
c9:55:be:ba:dc:e4:5e:ec:e8:fd:60:42:b3:d7:fc:46:14:12:
7f:68:dc:34:d8:45:9e:ba:e2:ff:a1:56:3e:09:1f:f0:fa:9d:
da:b5:e2:21:a9:ca:a2:d0:d9:03:0a:a2:1d:51:a5:fa:1f:55:
37:1f:5c:49:31:59:39:3b:15:f5:e7:fe:35:5b:66:9b:c5:3e:
fb:5e:a0:1e:af:44:ec:2c:55:ed:9b:d5:9c:64:a2:af:e3:74:
8f:b5:f4:e4:2b:21:f9:8a:a6:99:97:7c:a3:1d:cd:78:8a:a2:
ef:00:e8:53:b2:88:b0:97:49:50:94:44:ee:94:56:5c:ee:47:
f7:70:e0:4d:6a:12:ca:71:85:ca:ec:12:fa:35:22:4a:09:2a:
f5:83:4a:0b:93:a3:1d:30:bb:a3:86:e8:3d:15:16:f9:63:52:
90:ef:b3:66:88:ee:cc:31:74:1b:0d:9f:ff:b2:49:03:1e:4d:
2c:4f:2d:f5:83:6d:e5:de:b8:0d:9e:70:0d:e3:3e:d6:60:62:
96:2b:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:55 2024 by rpki-client on console-fra.rpki-client.org