Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: vOrIljRDWgnc195zPafYwiPpRJk8CruAqn8jcln5WKA=
Subject key identifier: 2C:54:7B:8D:12:14:8D:FF:0F:61:C9:54:0C:E5:DD:C5:F0:C9:DB:12
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 01903AE3736B30B9B39C64A130550C9FDF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 0C09
Signing time: Fri 21 Jun 2024 13:01:43 +0000
Manifest this update: Fri 21 Jun 2024 13:01:43 +0000
Manifest next update: Sat 22 Jun 2024 13:01:43 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: ERQYRhxUvbweF0lNOZz2ZW8UVPewawuIO46LP/zYiyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e3:73:6b:30:b9:b3:9c:64:a1:30:55:0c:9f:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jun 21 13:01:43 2024 GMT
Not After : Jun 22 13:01:43 2024 GMT
Subject: CN=2c547b8d12148dff0f61c9540ce5ddc5f0c9db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:20:43:8d:58:36:c9:8f:3d:4a:09:cf:a4:
c7:6a:04:67:61:7c:87:18:6d:c1:33:a5:de:9a:b0:
5b:5c:5b:7d:2b:10:a4:46:87:d4:a6:b6:c3:20:ee:
05:8e:3c:0a:32:73:01:56:db:47:2c:ab:e4:96:92:
95:c3:df:84:d4:12:94:a0:1e:fe:58:34:d1:8e:2b:
fc:0c:95:c8:0b:d7:14:86:1e:84:c3:fd:99:43:b7:
4b:78:20:f8:f1:96:1a:30:3a:d5:cd:04:93:a3:f0:
58:af:34:78:50:e8:42:38:10:f7:36:41:25:45:70:
d0:74:14:33:eb:86:21:01:46:46:f7:49:f0:67:f7:
61:b2:fb:27:b6:23:27:b7:3f:4b:dc:a1:25:65:07:
0d:90:b0:20:4b:41:b8:9c:d5:e6:57:8c:34:2c:31:
b0:4d:db:68:ef:8c:14:dc:3a:78:69:09:5b:c4:8a:
35:38:ff:9e:8e:6d:9f:2c:35:c9:75:f8:3b:90:a8:
d0:9a:06:39:12:1a:a8:b9:a4:4b:37:c2:34:d4:e9:
8c:51:e4:e0:e5:77:e3:a8:89:75:65:a3:98:cb:d6:
dc:7b:16:63:c0:ea:71:f8:38:2c:13:f8:82:83:f6:
6c:3a:4f:7a:e0:cc:3d:65:14:ae:fb:66:62:d6:12:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:7B:8D:12:14:8D:FF:0F:61:C9:54:0C:E5:DD:C5:F0:C9:DB:12
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:2e:8a:4c:ac:00:9a:05:c6:fe:d0:4b:ca:07:b1:44:48:
37:65:df:31:dd:34:c2:20:67:f4:5f:96:de:2f:0e:58:65:92:
64:63:a5:e2:1e:7f:b9:8a:09:91:0d:29:d6:9d:4a:85:00:59:
2d:db:73:bf:e5:bd:a9:27:37:7c:fe:20:4d:c4:7f:d5:8a:a1:
4c:42:c8:0a:f9:5c:eb:7c:cb:fe:27:77:9d:88:90:6b:ba:a8:
64:84:af:ba:58:e6:c9:86:ce:6c:95:66:ad:7d:d7:57:4b:03:
a3:ea:9e:4d:65:aa:8f:89:18:f7:f8:f2:d2:fc:ac:fe:84:bf:
7b:6a:a9:7b:71:cc:0e:56:b9:83:d1:41:33:50:c9:ab:8d:c0:
80:f6:4d:ae:91:52:6d:06:ed:ed:10:74:34:39:e1:0b:03:70:
27:a4:b8:c2:38:3b:12:fd:5c:6e:41:35:6c:f8:10:89:e8:d5:
dd:a8:e1:f8:e1:32:32:73:6f:e2:1b:3c:01:29:29:bd:35:6c:
9a:cb:51:45:7d:1e:3e:99:4f:f2:03:73:e6:36:1e:e1:24:3b:
f6:fa:6b:4c:97:6b:d6:67:62:06:87:0a:8c:5d:32:de:41:37:
a1:aa:7c:b6:f8:9e:83:d6:5f:07:1a:ca:39:a5:f2:c1:90:ad:
a9:76:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:39:13 2024 by rpki-client on console-fra.rpki-client.org