Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: z/LISoHr7GOzPjIgqWiksLAGgGvSqsptSPzAxwgxvtg=
Subject key identifier: AF:52:4B:24:75:6A:9A:F2:6B:FD:8F:F5:4A:3F:37:59:65:EB:2D:6F
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 0190448B147A06DB6EB88F79C940CD8D3DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0285
Signing time: Sun 23 Jun 2024 10:01:23 +0000
Manifest this update: Sun 23 Jun 2024 10:01:23 +0000
Manifest next update: Mon 24 Jun 2024 10:01:23 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: faFcoORSLDQh/kIAtn6aI5N6xFzm1EKgdIFex4Ksm0U=)
2: OMRieelGoAMNDKEzNai9e1QjoOw.roa (hash: OVbxjOHDC+4kTdPtXBxVuTrBUTNrfRGhiyjR/6/iEuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:14:7a:06:db:6e:b8:8f:79:c9:40:cd:8d:3d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jun 23 10:01:23 2024 GMT
Not After : Jun 24 10:01:23 2024 GMT
Subject: CN=af524b24756a9af26bfd8ff54a3f375965eb2d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:38:c8:0b:c9:cc:c8:63:cc:7c:b6:b9:e2:80:
8f:2d:00:42:e9:3b:42:85:ba:7d:93:d5:8f:86:33:
7b:3b:71:84:69:73:28:0d:f0:f0:14:16:c0:c0:4e:
be:0a:40:74:f0:ba:f3:7a:28:55:48:2b:bc:2d:8d:
31:4d:0b:d0:84:42:41:f0:76:48:31:aa:df:56:41:
01:12:13:38:28:88:56:79:0c:8f:23:78:23:ad:9f:
12:0e:37:77:45:0f:32:17:e3:aa:ed:a4:51:d4:9e:
23:98:98:2c:e7:3c:be:64:e9:1c:52:4e:6b:ff:b4:
d1:87:77:7b:66:43:c3:79:99:7e:34:69:da:0c:c5:
ac:a7:31:36:a4:6e:80:c3:e1:87:4a:3a:0c:0e:d1:
ed:38:b8:45:5a:3e:21:f7:5c:ac:c6:a7:4e:52:42:
64:b3:fc:ac:51:c1:bb:07:bd:a5:3f:3a:25:0d:c7:
36:c3:28:37:7f:7d:68:59:82:91:70:fc:30:5f:f4:
dc:8f:89:ce:8d:cc:f9:f4:45:0a:83:80:0e:88:d9:
3d:f5:59:91:79:0a:68:c6:2f:b6:49:97:d5:a7:af:
74:55:15:8d:9a:29:90:cb:f7:f0:5b:f7:1b:3b:16:
45:b8:9e:a1:44:f5:4c:d0:c4:da:7c:9d:e6:8e:b9:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:4B:24:75:6A:9A:F2:6B:FD:8F:F5:4A:3F:37:59:65:EB:2D:6F
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:51:d7:d1:1f:cb:f7:1f:d1:e8:70:06:28:53:fb:3b:52:a6:
a6:85:b6:a3:4e:2e:e6:fd:85:44:d2:de:48:53:92:41:53:4c:
79:1c:9a:95:9e:1a:c0:49:c0:a3:52:43:65:73:c4:01:d8:48:
ac:ed:45:78:74:4f:33:42:82:8c:d1:88:9b:43:e7:38:b8:89:
6d:c3:5d:81:87:41:c6:58:87:23:b8:94:75:13:29:84:ed:e8:
51:04:6e:72:0e:b6:7f:c3:bd:e2:e4:c6:28:92:a5:cc:64:85:
b0:fc:c1:65:80:56:ef:da:5e:fb:0d:13:8c:f4:e1:2e:21:89:
b7:61:c5:86:79:44:0c:93:6f:f5:1b:dd:f1:20:8c:9b:a7:f9:
a4:e6:3e:41:7e:7d:72:27:7e:e1:03:94:43:7b:4d:26:35:c1:
b1:7f:a6:f8:f2:35:71:75:89:9a:99:2f:7c:45:f2:3c:22:00:
e2:83:98:6b:f9:98:4d:2c:99:4e:ec:f1:76:85:d2:a1:ae:02:
fa:e0:04:a6:41:eb:38:51:a6:98:4a:ba:9f:02:2d:17:a2:d9:
8d:7f:3e:3d:81:f4:2b:f8:58:10:4e:ea:69:3c:7e:14:3d:9a:
7e:20:56:9d:7b:fb:71:74:8b:7e:3e:ec:05:3a:29:82:06:72:
b1:2b:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:19 2024 by rpki-client on console-fra.rpki-client.org