Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: L+3fV8LDiOJYXXwTR6OObOwbXVDFheskREh0MRDuVWA=
Subject key identifier: FC:31:6C:10:08:59:D8:4B:6B:59:00:CA:3B:04:15:14:DD:F8:83:2A
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 01901CA1303E1CF87276CC3C8A0029B31ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1034
Signing time: Sat 15 Jun 2024 16:00:43 +0000
Manifest this update: Sat 15 Jun 2024 16:00:43 +0000
Manifest next update: Sun 16 Jun 2024 16:00:43 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: eLxpQtrW7TK4cAvWz5TFmc1lX0As92bgl6yvhqM/t9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a1:30:3e:1c:f8:72:76:cc:3c:8a:00:29:b3:1e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Jun 15 16:00:43 2024 GMT
Not After : Jun 16 16:00:43 2024 GMT
Subject: CN=fc316c100859d84b6b5900ca3b041514ddf8832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:17:23:a7:a7:26:cf:20:86:1b:9f:65:2e:
91:cf:b8:c0:2b:95:07:b9:b0:a1:b4:d6:ba:41:eb:
ae:4b:09:32:ff:7e:99:4c:8d:3d:a7:c9:44:0e:a4:
a6:01:e1:84:02:66:4f:fe:4d:31:a0:63:f2:7b:86:
66:68:20:86:93:01:74:73:b0:46:ba:fc:9d:c3:3b:
66:a1:71:d3:e0:e1:bc:a3:bd:be:a4:0e:40:7e:b3:
33:0f:1e:74:4b:68:b0:bf:6c:18:e9:a2:73:4a:e9:
f4:e8:4d:16:6c:26:86:e2:54:6c:6b:58:43:3b:64:
f6:48:af:07:1e:20:7a:07:4b:80:3f:a0:3c:14:09:
13:c9:8f:6d:9f:04:7c:7f:de:02:1d:fa:e2:a0:b5:
77:a6:e6:29:e8:d3:0b:b7:62:3d:f4:17:96:70:69:
9c:44:8f:d9:43:bc:eb:d4:64:2d:7d:0a:13:04:bc:
b8:e0:37:c7:60:50:64:33:01:ca:8f:92:12:7e:43:
06:fb:fc:b6:57:00:89:8b:20:05:93:9c:ba:0e:18:
98:9c:2e:6c:16:a7:db:8e:38:6b:c7:81:69:4f:fd:
83:ee:e0:47:e4:64:93:b6:6f:e4:5a:f7:17:15:7c:
a2:aa:52:df:e8:bd:a0:2e:22:7e:e9:40:46:92:d0:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:6C:10:08:59:D8:4B:6B:59:00:CA:3B:04:15:14:DD:F8:83:2A
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:ba:91:83:e6:aa:ff:37:41:01:ac:88:2a:5c:15:d1:d7:
02:ad:08:48:2b:cf:3d:0f:4f:12:be:d4:e2:97:05:02:68:d2:
2c:1f:ab:43:c2:33:eb:2c:9d:13:e1:44:10:93:d2:92:d8:cd:
62:30:85:64:e4:a6:d2:f1:7c:35:b6:03:b9:60:65:cc:28:e2:
5c:ce:be:ce:11:10:d5:04:e4:b5:cd:92:53:ec:b0:76:df:0a:
14:26:91:56:4c:3d:b4:6f:9c:0c:90:7a:0a:0b:f7:43:87:99:
a1:4b:e8:b2:63:fa:c0:b9:82:8c:d0:16:af:3f:b1:58:e0:15:
9e:9a:ef:19:98:e8:dd:52:fa:31:a1:fa:a3:13:14:19:5e:61:
7a:b5:e1:e4:b4:87:b1:b1:ca:e0:33:93:76:9d:98:81:96:b7:
20:71:fa:2d:74:dc:fd:d1:c3:1f:4f:3c:ce:10:2a:f3:c8:51:
f8:9e:f8:45:4d:c6:5c:02:da:74:2c:38:24:9e:02:0a:86:f0:
00:31:5f:da:3a:63:d2:43:58:1c:54:ab:b4:5c:3a:b8:7b:fc:
44:7e:c0:56:2a:c5:cc:5e:6b:3a:68:e9:30:c8:f4:22:76:5d:
b1:e8:ba:23:a9:71:90:99:15:97:30:62:fd:fd:43:e9:aa:72:
7d:5a:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:07:18 2024 by rpki-client on console-fra.rpki-client.org