Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
File: AyZBcSxiGTI3x0InUVMrg5tA4H0.mft (raw, json)
Hash identifier: pTBymzMIbbGssPbSOfLYUWuydO42LIAM53kYE+i0kmc=
Subject key identifier: 0B:EC:1A:0B:89:D8:C0:2C:81:0B:24:44:65:9F:F7:1F:DF:12:AE:DA
Authority key identifier: 03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
Certificate issuer: /CN=032641712c62193237c7422751532b839b40e07d
Certificate serial: 01901E589E5E37B0A40405446D428D790877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
Manifest number: 08FE
Signing time: Sun 16 Jun 2024 00:00:42 +0000
Manifest this update: Sun 16 Jun 2024 00:00:42 +0000
Manifest next update: Mon 17 Jun 2024 00:00:42 +0000
Files and hashes: 1: AyZBcSxiGTI3x0InUVMrg5tA4H0.crl (hash: hshjZTNw7iP43zfT4QtpS6yYCJj5KqrIYJ53cZwJ/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:9e:5e:37:b0:a4:04:05:44:6d:42:8d:79:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032641712c62193237c7422751532b839b40e07d
Validity
Not Before: Jun 16 00:00:42 2024 GMT
Not After : Jun 17 00:00:42 2024 GMT
Subject: CN=0bec1a0b89d8c02c810b2444659ff71fdf12aeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:e1:4a:84:b7:80:45:e0:fb:85:d4:be:2a:
cc:1c:2e:57:5d:5d:2f:dd:42:6d:b1:8c:f2:c0:3e:
13:55:1c:5b:37:aa:44:1f:fd:91:a0:09:eb:55:64:
11:d1:57:81:b0:7f:00:22:e1:18:3a:38:bb:e1:3b:
13:32:da:b0:81:86:cf:0e:bc:43:3e:a1:d6:90:1c:
d0:1e:e2:76:84:3c:03:38:3d:f0:c1:95:28:01:fa:
30:a0:34:bb:cf:5e:b7:f2:84:12:3b:d8:b1:3a:2c:
58:3e:f6:8d:33:e4:b0:f6:f8:04:ef:38:7a:6e:11:
45:3b:1e:40:99:76:10:f6:d3:7d:52:5f:51:75:b7:
a4:77:ec:61:05:e8:31:87:cf:38:13:28:e8:c5:ac:
0f:d3:7a:0b:15:e4:c6:58:48:9c:3d:20:29:2e:b7:
2f:3b:5d:94:53:72:b3:bd:20:3c:d2:aa:e3:3e:1c:
2d:d9:4a:36:03:06:db:d9:b5:e9:eb:0e:3a:8e:ac:
7c:e9:87:9a:b2:d1:f1:51:ba:4a:20:48:c4:2b:47:
6d:1a:f7:de:08:4e:40:d0:4c:34:3e:eb:9e:f4:c8:
8e:1f:10:f5:c8:8d:ee:fb:41:e9:6b:77:d6:d7:df:
b8:8a:98:1a:f2:1a:41:1f:85:9e:be:26:22:bd:0c:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:1A:0B:89:D8:C0:2C:81:0B:24:44:65:9F:F7:1F:DF:12:AE:DA
X509v3 Authority Key Identifier:
keyid:03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:0f:3e:ac:94:2c:63:2f:c6:e2:4a:5f:fb:26:51:38:71:
ab:c1:8d:50:3a:93:a1:0b:1d:b2:5d:47:72:88:26:c1:20:70:
9a:32:85:5d:bd:17:a6:76:03:cc:68:39:1e:f5:d5:8b:a7:1b:
6d:af:49:7b:c7:60:5b:b0:ed:fc:28:a1:7a:cc:4c:d8:0d:d4:
39:d7:23:be:b2:bc:d0:c4:8a:04:18:61:4b:b5:4f:b4:c2:98:
35:3a:62:a4:e9:fd:23:2c:20:5a:64:d3:79:2b:89:11:b5:f3:
ab:ce:2b:f5:c9:20:90:66:a5:91:f0:fa:d2:18:3a:32:1f:d1:
48:99:17:ed:18:e7:91:4a:93:f6:c3:ba:7e:16:28:9c:87:9d:
53:f6:99:03:04:fb:e7:3a:f5:72:c1:73:46:40:cf:c8:07:c2:
a5:af:54:28:6e:42:c5:73:ef:e4:03:a0:39:76:53:77:e5:8c:
47:ae:f6:7f:46:1f:d7:fa:42:3b:46:a8:c5:e4:60:55:65:88:
fd:7a:d2:98:f6:0f:83:ec:40:71:4d:d7:06:cc:c8:de:cf:9a:
7b:d1:e6:ff:cb:df:f9:07:b3:f8:78:8e:4b:ed:37:33:32:94:
ba:ba:f1:97:c2:91:ad:0a:cd:60:d9:32:e5:ff:5b:0d:02:c0:
a9:7b:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:04:56 2024 by rpki-client on console-fra.rpki-client.org