Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File: nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier: jGHhlqRRuC2F7MaiouWQ4Ei1nq9zJdVQFbKCG7CRtfE=
Subject key identifier: 8A:13:A0:40:3B:66:4B:5D:C0:0D:F1:F6:B3:99:59:84:23:7A:A6:F4
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 01901BFDD0BDB19649FCA96C87A5A7D91D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number: 11CD
Signing time: Sat 15 Jun 2024 13:02:17 +0000
Manifest this update: Sat 15 Jun 2024 13:02:17 +0000
Manifest next update: Sun 16 Jun 2024 13:02:17 +0000
Files and hashes: 1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: /tDq4HovyXvM2+ItT6wQpsAUIVPn3W33RpDkC2YaEfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fd:d0:bd:b1:96:49:fc:a9:6c:87:a5:a7:d9:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Jun 15 13:02:17 2024 GMT
Not After : Jun 16 13:02:17 2024 GMT
Subject: CN=8a13a0403b664b5dc00df1f6b3995984237aa6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:74:56:07:25:19:e6:05:6e:57:e4:2e:4f:
42:34:ca:ff:2e:67:cf:11:18:e2:32:c6:96:b3:5e:
f3:f4:8c:f2:79:e6:44:38:ec:b0:ed:37:bd:af:e1:
55:89:0f:d9:a9:e6:ed:7f:1e:95:04:a3:5e:df:f6:
64:45:8c:d4:43:ba:d5:9e:b9:c0:2f:ff:f9:76:ce:
36:33:88:d4:84:e6:db:93:c4:51:38:b8:32:ab:2d:
a5:23:a8:ce:0d:0d:d6:f1:29:5b:30:c3:c3:cd:b8:
91:d9:5f:27:df:57:8a:76:19:4b:e8:bc:27:f1:51:
2c:32:43:1e:35:e2:7f:65:2c:80:2d:6b:c6:03:33:
0e:30:c7:fc:57:6f:be:b1:3b:56:0d:85:16:ee:7f:
7d:e1:a0:11:7d:cc:69:8d:ea:55:56:53:1a:e3:61:
d6:a1:93:1a:78:db:9a:72:c8:b7:83:8e:7d:aa:74:
9d:89:11:ae:7d:d4:d2:20:88:75:d0:07:fe:41:80:
7c:18:ca:ee:f3:49:90:ae:61:a7:14:d9:0e:00:0f:
ce:18:be:64:8b:ce:b8:45:09:33:f0:74:57:d9:46:
2f:57:31:24:dc:43:b6:1a:7d:5f:3d:c9:e2:cb:a4:
6a:fa:c0:bf:1f:3f:ec:58:34:a6:65:de:b9:31:0d:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:A0:40:3B:66:4B:5D:C0:0D:F1:F6:B3:99:59:84:23:7A:A6:F4
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d2:a4:ec:ae:a4:92:cf:9c:2f:e8:bc:5d:35:fe:a3:17:17:
a4:f7:f4:94:7c:cb:5e:f1:28:1f:1b:a3:5f:78:3b:67:bf:45:
6c:8c:58:35:4b:28:86:77:5a:80:fc:90:92:51:7c:80:50:3f:
09:96:5d:e7:87:b7:96:07:e9:f4:6c:d3:93:cd:0c:cb:0e:84:
f6:5c:1d:e5:d1:52:7f:0b:fc:94:91:72:10:25:0f:5d:32:1f:
7e:35:f4:02:15:e0:e1:5b:62:79:12:e4:df:48:7d:53:f6:ec:
b6:3d:53:48:fa:45:7f:23:9b:e6:a7:30:69:a1:1c:80:67:c7:
4e:c3:02:5a:51:49:6b:f2:2d:07:4c:02:73:41:32:78:d8:4c:
c0:df:d9:e1:cd:17:01:4b:91:2e:60:6e:fa:f2:11:ec:9b:3d:
1b:ae:e8:f3:e5:ad:b1:0f:82:f7:2d:09:a0:55:02:08:77:fc:
c7:9e:99:09:90:7a:00:02:07:6e:40:22:62:26:38:01:2b:61:
e5:11:c2:3c:ef:99:e1:8d:9b:e0:b4:d9:db:64:dd:84:7a:31:
58:dc:34:2c:76:13:69:f9:3f:ea:c0:5c:8a:61:93:2d:35:58:
29:68:52:44:dd:f6:1c:88:95:f3:bc:4d:9b:41:db:cd:c7:2a:
fc:5d:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:38:21 2024 by rpki-client on console-fra.rpki-client.org