Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: hXWJP9oBT1v+9z0rQ/mIrppUZ9pNSubGZP1kv601vT4=
Subject key identifier: 20:D0:E6:4F:EF:05:C2:B2:67:80:8E:09:AF:A0:A1:1D:85:E6:35:E0
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 01901DEB6FE120933AF567402FAD6B1DEA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 11C3
Signing time: Sat 15 Jun 2024 22:01:26 +0000
Manifest this update: Sat 15 Jun 2024 22:01:26 +0000
Manifest next update: Sun 16 Jun 2024 22:01:26 +0000
Files and hashes: 1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: Qu31vlBWKw8I2L12CbGTw6qrJHewnZehAWYh1aa6A8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:6f:e1:20:93:3a:f5:67:40:2f:ad:6b:1d:ea:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Jun 15 22:01:26 2024 GMT
Not After : Jun 16 22:01:26 2024 GMT
Subject: CN=20d0e64fef05c2b267808e09afa0a11d85e635e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:b6:b5:5f:42:21:dc:2f:a8:86:93:53:fd:
a6:54:3e:f7:e5:ca:8a:f9:0f:28:c5:8b:9a:13:c5:
3d:d7:dc:c2:e3:d1:a2:c1:d4:42:65:62:61:31:4b:
4e:2d:a0:a3:ce:d5:70:e2:0c:34:e1:78:d9:7d:18:
62:cf:11:d3:57:b6:61:eb:4e:a6:ac:7c:06:10:17:
15:26:a5:cf:e9:a3:a5:9b:b1:e5:fd:6b:44:04:e6:
bf:2b:82:ec:8d:04:a9:7a:b6:01:fc:3b:f9:01:48:
3e:df:66:6c:b6:49:6a:82:80:ac:fc:0b:2b:dc:bc:
2e:f8:a7:ee:43:27:c6:85:9c:2c:15:a0:10:5b:25:
48:48:a0:69:eb:5a:2e:91:33:bb:b1:55:50:aa:c2:
20:e2:c7:ef:42:b0:69:0c:ea:59:cb:08:83:72:15:
f9:6a:2a:3d:3c:02:ae:a7:c8:18:4f:47:ca:c7:8c:
94:fe:7b:74:85:7d:e1:17:be:5f:ee:f9:a0:70:52:
4c:2a:9f:ed:6e:32:34:cb:6c:08:e1:18:78:c0:c2:
4a:3f:d8:c1:2d:07:03:1b:85:14:e2:8e:a3:f1:9b:
23:db:61:d2:4c:03:36:35:85:d2:44:88:81:6f:2f:
98:a6:5c:de:d7:7b:a5:84:b9:5a:90:36:f0:74:3c:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:E6:4F:EF:05:C2:B2:67:80:8E:09:AF:A0:A1:1D:85:E6:35:E0
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:e3:36:ab:b6:e7:aa:19:f0:ef:d2:d4:6b:84:71:8e:de:
e9:cc:60:11:a6:bc:4a:b2:c4:0e:a2:c9:40:80:c5:31:05:4f:
7a:b2:c6:c4:84:15:53:2a:93:58:27:33:a3:65:5d:48:97:fd:
57:80:56:be:04:8d:5e:61:24:1a:1d:ba:16:eb:9a:4d:7c:a4:
d3:21:59:59:41:2c:46:b9:7e:3c:9a:3c:aa:f5:e9:7e:d8:19:
d8:ef:2f:c0:f6:66:29:bb:c8:ba:fd:f0:67:73:5c:09:d6:2f:
ee:cc:54:f9:5b:99:7c:16:25:d8:05:ad:23:41:e4:00:91:e5:
4d:dd:7c:c9:20:da:3a:c5:b6:1c:3a:1e:06:7c:da:bc:c4:7d:
26:c0:6d:3c:2e:7c:de:66:6b:f8:54:ef:22:7e:3a:b9:2b:62:
5b:22:01:eb:61:75:ec:27:a3:c4:9b:e0:d6:f9:73:fc:de:73:
14:d5:bb:c5:93:4f:65:4c:85:de:82:e4:d4:8f:7f:8c:9a:d7:
4a:24:25:41:12:47:a1:90:5f:e9:4e:46:d2:54:47:60:c4:45:
ae:bc:8b:47:9f:d3:e8:98:83:a2:21:42:fd:35:a8:44:61:10:
b3:b0:38:28:db:44:74:2e:52:10:6e:d4:4d:67:e3:b3:50:c4:
9c:e1:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:14:42 2024 by rpki-client on console-ams.rpki-client.org