Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
File: VGgc0JnIW-caIjUMsT8EglwB-PA.mft (raw, json)
Hash identifier: ErNM2naqrub/FXKG+p/RbZ9A+/kvtZ0amK4vWNrnmcQ=
Subject key identifier: 87:B3:16:0B:5A:0B:9F:25:63:72:3E:A3:52:91:CD:B8:64:12:4D:32
Authority key identifier: 54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
Certificate issuer: /CN=54681cd099c85be71a22350cb13f04825c01f8f0
Certificate serial: 01901DEB74289B16027A5C2FF1E125512227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
Manifest number: 081E
Signing time: Sat 15 Jun 2024 22:01:28 +0000
Manifest this update: Sat 15 Jun 2024 22:01:28 +0000
Manifest next update: Sun 16 Jun 2024 22:01:28 +0000
Files and hashes: 1: VGgc0JnIW-caIjUMsT8EglwB-PA.crl (hash: SK3cU7xPGS3FcNc5UPGmQ09sixSSKrYlWFSeKCEtcvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:74:28:9b:16:02:7a:5c:2f:f1:e1:25:51:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54681cd099c85be71a22350cb13f04825c01f8f0
Validity
Not Before: Jun 15 22:01:28 2024 GMT
Not After : Jun 16 22:01:28 2024 GMT
Subject: CN=87b3160b5a0b9f2563723ea35291cdb864124d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:f3:25:13:a1:a0:69:b0:53:fa:6a:70:24:
a4:71:a9:3d:37:a5:71:94:8f:e1:78:7e:54:b7:ab:
5f:e0:e4:70:e2:92:e8:1b:1c:bc:99:46:cb:85:df:
56:d5:03:f5:0e:e4:67:a2:e3:48:e1:40:2f:1e:15:
8f:6f:d7:db:d1:61:37:49:da:ac:16:21:8b:20:84:
65:6c:6b:5f:c3:e2:30:af:3f:e7:e3:25:c7:f8:6c:
6a:be:f7:08:a8:fa:f1:cb:b6:ef:e5:67:0f:be:a5:
da:2b:fc:b4:6c:6e:87:3c:ca:84:fc:f8:90:11:18:
6a:b5:92:68:82:ba:83:6b:06:0b:1a:16:78:b4:02:
ae:06:61:86:a4:24:96:bf:f8:e3:0f:d0:21:0c:48:
14:63:9e:27:c1:22:ee:56:b7:7a:f8:e1:78:9a:f7:
55:9e:30:73:a0:ba:7e:82:1c:2a:8a:e9:48:a1:d9:
9a:fd:e0:41:3f:5c:78:06:32:cc:75:c2:6f:b2:9d:
88:ac:45:ae:65:d8:79:a4:3d:a7:cc:75:b8:16:f1:
3a:14:06:50:8c:67:88:63:5f:92:5b:91:9a:fc:0f:
d8:14:78:8d:0a:1f:18:54:45:f8:7c:82:9b:d7:59:
da:86:5b:a5:52:6c:03:ce:90:f8:4e:85:9b:82:5b:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B3:16:0B:5A:0B:9F:25:63:72:3E:A3:52:91:CD:B8:64:12:4D:32
X509v3 Authority Key Identifier:
keyid:54:68:1C:D0:99:C8:5B:E7:1A:22:35:0C:B1:3F:04:82:5C:01:F8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGgc0JnIW-caIjUMsT8EglwB-PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/085013-dd3d-4ca7-ba79-c88283f8f117/1/VGgc0JnIW-caIjUMsT8EglwB-PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:e6:dc:88:3c:06:2f:a0:c4:7b:73:42:7f:e3:58:e6:fb:
a5:97:92:47:88:47:84:49:55:c4:48:19:20:d0:a4:82:86:19:
cd:e3:3a:70:21:b7:1c:1f:65:39:cc:a1:44:4b:d4:1c:de:8e:
13:25:c2:f3:a1:36:09:59:12:b9:e1:5d:51:37:97:e1:0b:e4:
60:7d:9d:02:7d:1a:68:6f:36:1b:3e:9c:b1:54:77:20:c1:30:
3d:42:bd:53:ca:fa:89:b7:fb:a4:29:5c:d2:f7:12:05:d2:1c:
bd:b7:d8:89:2e:1d:36:ae:95:c3:3c:ca:6d:14:e2:d9:ea:de:
e4:89:4d:92:f6:73:26:47:08:97:51:ad:0c:9d:7d:9d:98:1b:
98:cc:f3:79:73:76:ed:92:50:a9:8c:75:4d:8f:ba:5f:42:ff:
ad:14:fe:31:b8:35:0d:f7:9c:68:a0:7f:f1:90:de:dc:75:c2:
bb:51:8a:db:36:21:56:95:73:a7:d6:2b:10:d9:f8:a8:df:36:
96:93:02:78:e9:bc:21:6d:d7:71:0e:c5:a4:34:90:31:3a:f5:
f1:55:11:39:60:9b:98:95:bd:4b:53:7a:df:af:91:22:77:4c:
59:0d:cf:0d:65:07:2c:a4:c9:7f:06:25:80:23:af:a0:04:3d:
75:a0:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:49:01 2024 by rpki-client on console-ams.rpki-client.org