Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: EoEz/QwGqtEu4iLnPbVN1+sGcKhE27Frmrpohmwv4l8=
Subject key identifier: 50:1D:BB:BC:E4:1A:1F:01:8A:17:6A:5B:42:BB:17:C1:61:DE:B7:B4
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 01901D4606F944BFF0FDA3DA9299919FAC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 11C1
Signing time: Sat 15 Jun 2024 19:00:46 +0000
Manifest this update: Sat 15 Jun 2024 19:00:46 +0000
Manifest next update: Sun 16 Jun 2024 19:00:46 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: eFosRAg1iOQKktRaYzg2nUa49xbsoYXuxWw1XMma3Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:06:f9:44:bf:f0:fd:a3:da:92:99:91:9f:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Jun 15 19:00:46 2024 GMT
Not After : Jun 16 19:00:46 2024 GMT
Subject: CN=501dbbbce41a1f018a176a5b42bb17c161deb7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:8e:85:3d:a4:62:b1:b1:37:a0:09:c9:08:
5e:7d:0c:b4:b5:ff:bc:b7:22:fa:8a:cf:c8:7b:c8:
ca:6f:23:3c:80:db:62:9f:2d:39:36:cd:28:e3:73:
a7:24:01:3d:77:58:3d:c0:f0:db:96:ce:13:ed:ae:
11:c6:e7:f2:0f:c8:18:ee:96:7c:07:53:01:a5:67:
a3:64:93:ff:65:91:2a:f2:79:fc:85:68:f2:a6:88:
25:df:aa:90:0b:14:a8:4a:39:89:24:71:32:ea:76:
24:d9:5b:a4:f9:22:e8:55:3b:13:c7:0a:0c:bf:a9:
e7:4c:e1:d6:72:c1:89:1b:cf:98:8f:db:7d:c0:a2:
24:f8:23:d6:30:e3:af:50:ae:f1:79:6b:56:dc:51:
c3:fb:4b:94:e3:c4:17:fd:36:c0:1f:81:74:04:13:
2d:13:ca:a4:84:9d:85:aa:1e:cd:46:8e:6b:48:fe:
d3:26:d6:d4:2f:9c:96:4a:8a:ef:41:d1:ae:ab:74:
eb:64:a3:9c:ae:b9:ec:28:36:54:a5:5e:1a:ed:db:
2e:b4:04:ea:58:2a:85:9f:17:71:88:6a:a3:81:55:
0d:83:53:86:1f:dd:77:3e:f6:e2:28:7e:9b:dd:b7:
57:be:5d:1d:61:ec:4b:2c:0d:c1:84:99:49:ea:1d:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:BB:BC:E4:1A:1F:01:8A:17:6A:5B:42:BB:17:C1:61:DE:B7:B4
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:05:90:8a:17:10:b9:39:44:51:c4:fd:52:ca:cf:d5:9a:48:
fe:d2:63:8d:fc:2c:0c:30:65:0e:ee:f1:41:ad:93:ec:2e:e1:
16:1c:fd:2c:ea:84:96:9c:7d:8c:88:f2:6b:b2:bb:a9:d3:93:
58:21:70:92:70:4c:d0:fd:93:df:e6:5d:66:74:9a:a1:4c:1d:
be:74:5a:c2:f1:1c:6e:23:19:24:31:46:5f:24:2e:a4:5d:bd:
61:bb:c9:33:be:70:5a:dc:5d:6f:bd:91:0a:0c:fe:24:b6:79:
48:26:de:fd:59:58:03:1b:2a:91:ac:bb:ad:b6:3a:6c:02:f9:
c4:d8:c3:f6:f3:bd:70:47:2b:ba:97:8c:70:96:f8:cc:32:ca:
8c:08:b4:88:8e:75:09:7a:58:a7:3a:2d:84:d0:c5:cf:a1:be:
ef:02:4e:d3:4e:84:76:8f:dd:c8:39:1e:a5:04:c0:f5:4d:e5:
dc:55:ff:28:ad:ea:eb:92:a6:1f:bf:52:b5:a9:64:26:9d:6b:
c4:2e:58:f5:bc:92:e6:0d:e3:8f:4e:09:34:2b:8f:68:2c:5f:
86:fd:52:b2:fe:b6:38:d7:c7:de:86:0f:09:af:a2:66:9a:7c:
8e:60:d5:b1:f4:ac:52:6c:db:a2:9d:27:da:f3:18:14:07:c3:
78:a8:f4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRgb5RL/w/aPakpmRn6xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzFjODM2MjBlZWIzNTEzMTI1N2I1YmZhZmFhYjM5MzQ1
MmM4OTEwHhcNMjQwNjE1MTkwMDQ2WhcNMjQwNjE2MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg1MDFkYmJiY2U0MWExZjAxOGExNzZhNWI0MmJiMTdjMTYxZGViN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq6OhT2kYrGxN6AJyQhefQy0tf+8
tyL6is/Ie8jKbyM8gNtiny05Ns0o43OnJAE9d1g9wPDbls4T7a4RxufyD8gY7pZ8
B1MBpWejZJP/ZZEq8nn8hWjypogl36qQCxSoSjmJJHEy6nYk2Vuk+SLoVTsTxwoM
v6nnTOHWcsGJG8+Yj9t9wKIk+CPWMOOvUK7xeWtW3FHD+0uU48QX/TbAH4F0BBMt
E8qkhJ2Fqh7NRo5rSP7TJtbUL5yWSorvQdGuq3TrZKOcrrnsKDZUpV4a7dsutATq
WCqFnxdxiGqjgVUNg1OGH913PvbiKH6b3bdXvl0dYexLLA3BhJlJ6h0GQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAdu7zkGh8BihdqW0K7F8Fh3re0MB8GA1UdIwQY
MBaAFIsxyDYg7rNRMSV7W/r6qzk0UsiRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mNzRkMzgtOTY1ZC00YTI5LWFkOGEt
Zjg0Njc0ZDQ2MzAzLzEvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mNzRkMzgtOTY1ZC00YTI5LWFkOGEtZjg0Njc0ZDQ2MzAz
LzEvaXpISU5pRHVzMUV4Slh0Yi12cXJPVFJTeUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQWQihcQ
uTlEUcT9UsrP1ZpI/tJjjfwsDDBlDu7xQa2T7C7hFhz9LOqElpx9jIjya7K7qdOT
WCFwknBM0P2T3+ZdZnSaoUwdvnRawvEcbiMZJDFGXyQupF29YbvJM75wWtxdb72R
Cgz+JLZ5SCbe/VlYAxsqkay7rbY6bAL5xNjD9vO9cEcrupeMcJb4zDLKjAi0iI51
CXpYpzothNDFz6G+7wJO006Edo/dyDkepQTA9U3l3FX/KK3q65KmH79StalkJp1r
xC5Y9byS5g3jj04JNCuPaCxfhv1Ssv62ONfH3oYPCa+iZpp8jmDVsfSsUmzbop0n
2vMYFAfDeKj0Xg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:05:25 2024 by rpki-client on console-fra.rpki-client.org