Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: QNKfhtdDhn4SHFOe5iHKXfuIUjF1Qc3DXKPt3fl59Fw=
Subject key identifier: 48:8D:F1:AB:09:FC:12:C3:19:BB:D8:C6:14:DE:19:4C:9D:79:89:B0
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 019043E5BDEED461C975B375E614AB6EB75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 07:00:48 +0000
Manifest this update: Sun 23 Jun 2024 07:00:48 +0000
Manifest next update: Mon 24 Jun 2024 07:00:48 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: XTTpTs04s8ltP3TUeZGAHU7OxzWSf9BpUVMriP8dAK0=)
2: IwruxxNaDDS3Xg_wz0J5vQEkpOc.roa (hash: KcIC9Pd6OlK8OLZcB7bqjdJZNzn52XAZlc9msdOsOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:e5:bd:ee:d4:61:c9:75:b3:75:e6:14:ab:6e:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jun 23 07:00:48 2024 GMT
Not After : Jun 24 07:00:48 2024 GMT
Subject: CN=488df1ab09fc12c319bbd8c614de194c9d7989b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:ef:73:9b:92:b4:52:66:32:18:ff:c4:ed:
06:7f:c0:1f:26:6e:ec:1c:bf:64:9c:b9:5f:c2:cd:
aa:9f:08:25:d2:a5:80:07:0f:f5:8e:b7:54:48:8b:
c6:95:aa:d6:d8:68:39:2e:5a:cc:06:45:68:5e:c1:
68:59:2b:df:85:ca:5b:44:69:2b:08:1f:3f:92:d9:
14:42:4f:98:05:6e:e5:e7:aa:b4:0a:7b:1e:8b:11:
77:b5:45:20:ef:64:15:33:29:1e:ec:cb:3b:fa:b7:
df:d8:60:8a:fd:38:e8:72:ab:22:81:c1:0d:bc:ca:
ae:b4:34:22:5f:e2:22:d3:df:76:9c:58:de:44:61:
14:ae:7f:03:79:6c:29:d3:90:90:74:2e:1b:1e:1b:
3d:6a:a7:63:14:ba:3c:67:1c:6a:2b:3a:1c:78:f6:
34:6a:ef:63:2e:56:ee:3d:60:d8:e9:cb:a3:47:b3:
90:1e:f5:19:65:a8:74:eb:30:e2:8c:a6:2c:ad:5f:
d8:6f:17:49:49:e9:57:c5:87:2e:ba:59:46:42:d3:
a4:19:9c:9b:5d:97:7a:84:3f:59:d9:e0:e1:7b:45:
56:9e:53:79:67:b0:f6:95:fb:92:b0:6d:8f:77:2c:
cd:6b:9e:e3:39:82:eb:90:91:a3:37:1c:b8:5e:ee:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:F1:AB:09:FC:12:C3:19:BB:D8:C6:14:DE:19:4C:9D:79:89:B0
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ef:f4:f8:3a:b2:d4:0b:e7:89:4d:4f:6f:81:63:f3:23:2d:
27:e3:71:c3:35:21:7b:d8:98:30:b6:5d:30:dd:89:8d:8d:6f:
90:27:af:ef:38:d3:de:49:6d:58:ea:33:45:8d:7a:23:25:c8:
b5:b9:a2:7d:46:e1:1f:ed:d0:41:75:1f:77:55:a6:93:fe:9c:
1f:2d:6b:11:19:df:af:da:b1:3a:7c:82:d2:be:4f:72:86:31:
29:05:97:47:21:31:64:aa:89:25:f8:fe:7b:f1:f6:74:66:f6:
6d:db:08:b3:18:94:e4:3a:ee:af:ae:69:98:88:9c:05:87:60:
0b:5a:af:af:84:15:0c:11:0b:d2:1a:fa:c6:d7:29:f1:29:ab:
06:40:d6:06:6e:c5:4f:f6:94:34:16:c7:e6:13:f5:d2:6a:91:
05:0c:eb:4b:5d:6e:7a:81:c0:04:02:15:28:21:87:b4:fe:ba:
95:0c:2c:aa:c6:fb:f4:e7:8f:7b:27:62:1e:06:fc:2a:70:69:
63:1d:22:78:28:51:13:b9:d9:01:19:05:fe:b8:eb:14:b9:e9:
37:3e:e1:9d:93:8d:9c:95:ac:60:63:2b:31:27:cd:b2:4f:df:
dd:09:32:f5:6f:3e:12:6c:91:ac:dd:e3:75:24:0d:91:79:71:
8f:fa:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:26:58 2024 by rpki-client on console-fra.rpki-client.org