Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: qSE/LIcTGsfX8vcoaMSO0qqZt5jfTBL5nxocGZN/tXg=
Subject key identifier: 80:7A:95:3A:B1:D9:6F:0A:8F:DF:E8:B4:67:E2:1F:4C:D8:AD:AF:6A
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 01901DEBE60E746CA141E69EAEC9AF81F504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 11C0
Signing time: Sat 15 Jun 2024 22:01:57 +0000
Manifest this update: Sat 15 Jun 2024 22:01:57 +0000
Manifest next update: Sun 16 Jun 2024 22:01:57 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: mtJl6tQTY3x1VrQHGIlSGV5obfdSJgi2DKmw+bpmRUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:e6:0e:74:6c:a1:41:e6:9e:ae:c9:af:81:f5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Jun 15 22:01:57 2024 GMT
Not After : Jun 16 22:01:57 2024 GMT
Subject: CN=807a953ab1d96f0a8fdfe8b467e21f4cd8adaf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:49:ac:88:12:a0:f1:bb:05:82:2b:fe:df:
d4:7c:29:11:da:dc:58:ab:02:f6:90:2c:51:ce:e0:
bb:07:bf:46:5a:b0:4d:8d:97:f3:6e:a3:19:c8:a4:
7d:c7:15:0b:c4:82:c3:a4:bf:53:f6:86:40:21:e4:
a4:a8:ca:33:0b:7f:d0:ca:7b:9e:c0:6f:0a:86:6b:
08:1b:df:45:1a:90:55:be:93:02:29:eb:3b:d2:ee:
34:98:88:47:4a:3a:29:d4:4f:50:dd:f9:85:b8:f4:
31:bb:fb:15:ef:cc:2f:8f:37:f9:23:cc:ea:15:c7:
9e:8c:89:2c:e3:ff:d5:a8:8f:10:50:39:89:e6:73:
63:6b:cd:9a:5c:06:31:0b:c6:87:ed:b9:7f:88:a7:
0d:01:83:07:d8:bf:91:58:e5:7c:8a:85:1f:23:f1:
aa:ce:8d:26:57:e9:f1:51:0f:5f:d1:5c:03:b8:03:
87:92:43:f4:d7:20:4f:33:c3:f3:0e:66:91:8e:38:
55:f3:13:27:85:e2:1e:39:15:f3:cc:f1:32:01:60:
40:b8:f6:e7:71:7f:7a:a7:c5:28:d2:9b:41:25:27:
a3:ef:20:ee:89:32:3a:9b:26:e0:f8:03:a7:d4:9b:
8c:b0:82:64:6d:57:2c:e3:22:40:e3:c6:68:f6:57:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:95:3A:B1:D9:6F:0A:8F:DF:E8:B4:67:E2:1F:4C:D8:AD:AF:6A
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7c:5f:17:4c:29:de:8d:4f:a2:8f:b8:19:76:de:78:a8:de:
48:60:51:41:db:89:2a:df:1b:4a:50:61:57:2a:3a:8a:e4:0f:
f5:16:00:25:c7:17:69:fd:58:93:ee:76:67:8a:3d:a3:65:cd:
85:0a:40:f3:9d:ce:e7:3d:9f:fa:e8:64:40:2d:dc:2f:5c:a8:
81:6c:32:e4:46:b9:a1:e6:cd:85:eb:56:5d:68:8a:ef:c0:97:
90:48:8e:78:01:2f:6f:03:fb:fb:8d:fd:e5:94:22:b7:78:d5:
f7:80:35:a7:fe:48:87:2e:5b:f7:a9:28:0d:1d:0d:a6:9c:75:
0b:38:3b:95:15:85:e6:6f:6a:e1:7c:ef:74:3e:da:4b:b2:ce:
fc:55:7f:a1:80:54:8c:81:e3:69:11:d7:e1:c1:f8:43:e6:32:
03:31:ef:9a:a0:5e:72:a7:dd:93:f8:a9:7e:ef:85:40:fd:f0:
28:e8:3a:52:d9:be:6c:de:35:d4:31:4d:62:12:21:eb:26:35:
89:39:06:21:87:42:7b:dc:8c:31:30:43:ed:c2:7a:0d:d0:11:
e6:7c:32:96:f8:56:32:3c:0a:cb:28:75:87:60:cc:ab:fa:a6:
8e:00:c2:cb:36:8e:ce:7e:c6:be:61:8b:ba:bc:d4:58:77:61:
6f:be:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:43 2024 by rpki-client on console-ams.rpki-client.org