Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: PmdwYl51+Y0zGMJ9Tz9Hc9PnJ0BgcQpgIx+1rmfDSWU=
Subject key identifier: 38:D3:B0:D5:CC:97:AE:87:76:A2:8B:A3:31:F0:16:E5:E7:F0:20:56
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 018F6E31266FA2DE5C68524B80128B7B2430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0606
Signing time: Sun 12 May 2024 19:04:25 +0000
Manifest this update: Sun 12 May 2024 19:04:25 +0000
Manifest next update: Mon 13 May 2024 19:04:25 +0000
Files and hashes: 1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: H7R3USQd7+KX8nKDDJgn3vBvru8KvhzZ+exPkfKUQ1g=)
2: pLxraMGdusqRgDUPmIqQpTjC5rg.roa (hash: oQP9uooU1SmBPrFPPbMEGdSjQ4ZgaWwwD2HyEpBZRok=)
3: rDQAIL2I66VyyKAsV_XGkUpmyY0.roa (hash: vAfoOn31LmsqMHN9AUqFBwdv1mG9CFwKLxlyrjkFFqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:31:26:6f:a2:de:5c:68:52:4b:80:12:8b:7b:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 12 19:04:25 2024 GMT
Not After : May 13 19:04:25 2024 GMT
Subject: CN=38d3b0d5cc97ae8776a28ba331f016e5e7f02056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:06:5b:b1:27:1f:68:3b:cb:0b:38:6a:5d:
fe:3d:f3:eb:bf:47:6f:24:5f:01:d3:d7:74:7e:60:
0f:c5:1f:4d:20:b7:ae:8c:fb:c4:22:a8:b1:ff:73:
2d:04:b9:81:c6:eb:b2:c9:80:73:b4:b4:36:58:e3:
85:56:91:bc:df:33:68:bc:4c:93:aa:6a:79:9d:bf:
62:3a:6b:5c:ef:88:25:59:b7:bd:80:f5:bb:b7:d0:
ff:8c:e4:53:3e:4d:4f:d2:01:50:f7:7b:19:f4:c5:
b1:e5:e9:44:38:da:06:b5:62:46:f1:25:7b:02:46:
f8:ac:b1:54:7b:48:5a:12:2d:90:18:cd:9f:9b:5f:
6b:ba:59:c9:53:f3:1e:20:57:16:79:0e:dd:d5:de:
fe:d8:9e:7d:b0:51:72:2b:22:42:28:f8:d6:8a:a7:
c7:ea:78:b7:9f:57:dd:36:3a:00:ab:7c:d2:b1:71:
ec:8c:a4:b8:35:5c:6f:6b:5c:d3:2e:00:48:5f:9f:
a6:b6:69:88:19:52:dc:a2:4c:ac:39:c1:05:5f:9d:
34:75:b6:fc:cd:52:3b:e6:8a:bd:5c:e3:48:42:55:
b3:af:58:fe:ba:7f:95:65:c3:79:58:ff:91:82:43:
99:4a:48:9a:32:5d:18:a8:d4:f8:e8:2d:19:07:14:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:B0:D5:CC:97:AE:87:76:A2:8B:A3:31:F0:16:E5:E7:F0:20:56
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:fe:87:bb:4e:d1:9a:0c:5c:dd:49:f5:e8:7b:71:d7:1b:
43:39:29:cf:91:e7:b7:29:a6:46:59:83:c5:a1:b4:fc:e4:83:
02:a2:d7:c1:f6:64:b9:15:64:59:9a:87:30:0e:30:01:23:de:
a8:22:d8:75:82:e3:d8:30:a6:5a:88:05:63:ce:be:50:50:ef:
c3:71:c6:15:e7:21:b1:1b:73:9b:b3:cf:38:20:d6:a3:aa:0a:
5b:04:29:6a:85:e9:32:19:39:e8:45:23:19:04:3f:db:8a:1c:
c3:e0:ee:22:94:7e:23:37:6d:36:42:96:99:b5:fd:2a:3b:dd:
1a:05:01:5c:ff:4a:1b:9e:b5:b1:99:bc:a8:66:82:9c:44:dd:
32:55:b9:93:7d:8c:42:16:ee:43:83:7e:39:36:5a:8b:cc:2c:
3a:c0:58:45:e4:60:0e:93:f2:0f:d4:29:62:b5:8f:74:9d:4f:
b5:29:d7:be:35:0b:a3:95:1b:18:72:1a:0b:4f:49:a6:4e:90:
74:78:d5:78:20:d2:7c:fa:4c:f2:f6:33:35:36:ee:0d:c1:47:
22:06:99:47:46:a8:ae:2e:da:d6:f3:9c:2e:03:c4:d3:37:73:
dd:9b:57:43:46:51:41:6d:a6:a1:22:79:04:55:9c:16:df:4d:
b4:e3:d2:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9uMSZvot5caFJLgBKLeyQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjQwNTEyMTkwNDI1WhcNMjQwNTEzMTkwNDI1WjAzMTEwLwYDVQQD
EygzOGQzYjBkNWNjOTdhZTg3NzZhMjhiYTMzMWYwMTZlNWU3ZjAyMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2kGW7EnH2g7yws4al3+PfPrv0dv
JF8B09d0fmAPxR9NILeujPvEIqix/3MtBLmBxuuyyYBztLQ2WOOFVpG83zNovEyT
qmp5nb9iOmtc74glWbe9gPW7t9D/jORTPk1P0gFQ93sZ9MWx5elEONoGtWJG8SV7
Akb4rLFUe0haEi2QGM2fm19rulnJU/MeIFcWeQ7d1d7+2J59sFFyKyJCKPjWiqfH
6ni3n1fdNjoAq3zSsXHsjKS4NVxva1zTLgBIX5+mtmmIGVLcokysOcEFX500dbb8
zVI75oq9XONIQlWzr1j+un+VZcN5WP+RgkOZSkiaMl0YqNT46C0ZBxTXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjTsNXMl66HdqKLozHwFuXn8CBWMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvn+h7tO
0ZoMXN1J9eh7cdcbQzkpz5HntymmRlmDxaG0/OSDAqLXwfZkuRVkWZqHMA4wASPe
qCLYdYLj2DCmWogFY86+UFDvw3HGFechsRtzm7PPOCDWo6oKWwQpaoXpMhk56EUj
GQQ/24ocw+DuIpR+IzdtNkKWmbX9KjvdGgUBXP9KG561sZm8qGaCnETdMlW5k32M
QhbuQ4N+OTZai8wsOsBYReRgDpPyD9QpYrWPdJ1PtSnXvjULo5UbGHIaC09Jpk6Q
dHjVeCDSfPpM8vYzNTbuDcFHIgaZR0aori7a1vOcLgPE0zdz3ZtXQ0ZRQW2moSJ5
BFWcFt9NtOPSYA==
-----END CERTIFICATE-----
Generated at Sun May 12 21:19:18 2024 by rpki-client on console-ams.rpki-client.org