Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: r4PdpGCd3vbM/ZnDuygoyyJKRgYErTAFXK0Y87SibOk=
Subject key identifier: B5:B9:84:8B:A0:44:AD:17:D5:79:0B:F6:76:3B:3E:C6:1D:87:34:50
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01901DEAAB4D90D975D84F17BD8D6197E4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0459
Signing time: Sat 15 Jun 2024 22:00:36 +0000
Manifest this update: Sat 15 Jun 2024 22:00:36 +0000
Manifest next update: Sun 16 Jun 2024 22:00:36 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: 7AwBvuQ2oozf2K3ONpEdOTZ+FU9vHizZJCCHGRb9JfQ=)
2: MFAat1nHEjtaN7CsttvgEI8qlFg.roa (hash: IA2F6I5e0i7ae56bjvpt5AQS+9x2T2H3EjKfvY2U4Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:ab:4d:90:d9:75:d8:4f:17:bd:8d:61:97:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Jun 15 22:00:36 2024 GMT
Not After : Jun 16 22:00:36 2024 GMT
Subject: CN=b5b9848ba044ad17d5790bf6763b3ec61d873450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:d2:3d:91:f8:ea:f1:f3:fe:40:4d:3a:67:
e3:4a:24:dc:99:8c:91:bf:82:a1:b2:f8:15:7c:69:
2e:90:11:1f:ca:bc:5c:8e:d5:86:56:11:01:58:27:
dc:33:0a:dd:0e:a7:48:d7:6a:81:e8:34:b3:b2:a6:
2f:89:70:db:2d:76:d2:6c:c0:6d:f4:8e:cc:57:1f:
a7:14:87:96:e3:0d:17:9e:1d:e0:db:e1:8f:ab:da:
8f:05:b2:f9:03:c4:0a:e8:7c:fc:06:db:06:78:84:
5b:2a:61:f8:6b:73:cc:f1:9f:90:63:c6:d7:60:00:
d3:e0:c2:2c:49:34:46:87:5b:7b:c6:93:0a:c8:6f:
96:f0:c9:70:4b:04:0b:7a:e5:10:cf:f0:d9:cb:65:
f8:1f:a4:df:16:ec:0f:50:b5:99:78:71:89:60:b1:
7e:8f:62:6a:34:e4:c8:84:ea:f8:bd:d1:65:de:db:
73:56:48:ca:ac:ff:7f:a1:62:00:60:60:47:a8:14:
1e:d5:95:a2:f2:7c:57:dc:51:d6:fa:5b:1b:3a:d6:
21:49:d8:2e:a2:71:a8:a0:4d:79:3e:d7:09:d4:7f:
ab:b8:92:63:80:a0:c5:76:4c:48:ef:23:f2:5b:c9:
cd:52:42:9d:7a:b4:a5:64:15:4f:6b:22:c0:82:ed:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:84:8B:A0:44:AD:17:D5:79:0B:F6:76:3B:3E:C6:1D:87:34:50
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:90:07:cc:53:e1:9b:66:0b:79:f4:5e:b5:52:49:b3:5c:fa:
b4:d1:40:84:a0:13:be:ea:1c:dd:74:3d:f6:cd:4b:8a:2f:da:
b9:5f:43:75:86:8f:74:de:b3:2d:40:97:f7:e1:4a:67:52:02:
7d:74:4c:a4:ad:18:1c:e4:fc:d7:be:27:ee:af:18:6c:5e:b1:
c6:6d:d4:43:43:d4:cc:71:24:0e:43:16:a2:bf:9f:55:d8:aa:
2d:18:58:d1:c3:8a:ae:e1:f0:aa:b7:47:11:59:74:5f:02:56:
bc:55:76:41:47:db:8b:a4:64:38:26:f9:81:5c:14:85:1e:85:
37:5d:b5:4c:87:5d:15:7d:c7:83:d7:34:7d:eb:86:d1:bb:91:
59:f3:43:04:e0:44:48:4b:2d:62:d8:34:8a:ed:9b:30:a4:3a:
ba:9f:da:b6:be:66:7f:7f:9b:ef:d7:34:e0:5b:a9:b8:57:ce:
6d:18:5a:f8:63:05:6f:83:1c:b2:0b:78:53:9b:30:3f:4d:75:
e1:c6:93:1e:0c:da:19:20:c4:5c:a5:b5:1e:67:d2:88:b7:fe:
fc:45:fa:2f:db:d1:73:06:e2:05:08:ca:dc:3b:33:7f:64:a6:
72:a5:46:db:5c:f9:bc:6a:4f:50:f1:e4:41:66:f9:a8:8a:8d:
7b:e9:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:02 2024 by rpki-client on console-ams.rpki-client.org