Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: FVhksf7Oz8Cp/1tUUA9Gyaf9JA9ZQ9mhQijfSfm8d20=
Subject key identifier: 54:4A:68:22:4A:91:37:57:0F:BC:14:13:F0:2A:C1:57:8B:2F:93:5D
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 018FB3B4AF1EE922A0F6A45A400B831AFE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0AB5
Signing time: Sun 26 May 2024 07:01:53 +0000
Manifest this update: Sun 26 May 2024 07:01:53 +0000
Manifest next update: Mon 27 May 2024 07:01:53 +0000
Files and hashes: 1: 3gGTvD3kpiSLpcaa45pSwbMGVtY.roa (hash: 53IV3WRRtIko03rUb0qG9+kV4wu4bu7GsrM6x3bsXmk=)
2: HH2YmgmUKmvRJn8uUzAWMu-smWE.roa (hash: N5TwDjnrDjf5OgMO3RILNT04PtD5nx+LXYmunFICwRQ=)
3: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: /0XYi9VE4t4+mf/+bERPyvxwe5vAQzYuaZ8+ngzGvkw=)
4: hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa (hash: pVHCldhU3zg4Ogzn6onlOTM3SFC90nX67fU8YKk8BIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b4:af:1e:e9:22:a0:f6:a4:5a:40:0b:83:1a:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: May 26 07:01:53 2024 GMT
Not After : May 27 07:01:53 2024 GMT
Subject: CN=544a68224a9137570fbc1413f02ac1578b2f935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:dc:7e:84:17:2b:f1:cd:3d:a7:c7:94:d3:
4b:c4:89:5b:bf:ba:5c:bd:c8:36:46:52:7e:2b:27:
26:63:2b:47:bc:ef:64:3f:89:fb:52:3e:c0:51:7a:
74:1e:b3:aa:84:60:06:1d:28:14:eb:8d:b4:17:a2:
3c:07:90:59:d0:d0:72:6d:6b:99:98:90:5a:3a:63:
97:c4:f9:27:20:60:ea:40:24:a2:ae:ea:7f:8e:07:
76:ed:66:31:52:d1:33:66:3b:c3:a9:37:52:97:5b:
06:66:26:e4:ef:b2:b8:74:9b:d8:b7:21:03:39:9c:
d5:20:76:ee:b3:30:c4:76:03:3d:df:b0:c3:7b:cc:
0d:cf:73:7d:6c:f5:8a:6d:da:e5:22:b8:2a:50:d9:
77:43:f5:5c:b9:29:1e:53:9b:5b:8e:3e:32:7b:8d:
09:1b:20:b6:0e:82:a5:ae:0c:5d:0a:ae:bf:78:76:
3a:1b:7f:53:16:05:3d:e5:aa:81:ef:90:f5:a3:af:
60:0f:f0:b6:1d:4d:68:42:ae:6f:0a:1e:4a:f0:c4:
8f:ae:41:56:61:7d:5f:ff:a7:d5:28:73:da:5f:85:
dd:2e:92:34:45:50:2b:ee:d2:df:1d:34:eb:a3:27:
e8:14:c4:86:77:03:79:53:fd:d6:67:ba:ad:18:21:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4A:68:22:4A:91:37:57:0F:BC:14:13:F0:2A:C1:57:8B:2F:93:5D
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:1a:9a:2a:cd:df:d0:6e:75:83:5a:91:55:9e:3e:d3:26:
4b:fb:85:91:ff:bd:28:9e:7c:b9:2e:a4:68:a4:0b:4a:5e:0e:
36:f8:fd:e6:0c:7d:b4:f6:19:73:f4:a0:d5:8d:e1:be:94:58:
e7:a5:a3:37:35:63:14:c6:ef:6b:f2:b5:cb:a1:53:fe:29:2d:
ab:d9:1b:06:98:9f:94:9a:b5:e3:47:88:56:a9:ad:b0:da:81:
42:ee:b0:6e:68:81:7f:7c:2f:86:ff:ed:25:81:4e:45:20:0f:
e1:43:dd:a3:ef:2d:a7:0e:aa:ca:26:73:62:ed:90:de:61:27:
74:b0:c8:6c:d3:e3:40:4f:0b:a6:69:02:79:89:ac:66:10:9b:
10:33:a7:4d:76:82:76:73:d9:34:57:20:99:d8:9a:b1:ee:9d:
b1:e9:06:34:cc:b5:58:42:12:82:2e:2f:5b:2f:cd:78:13:b7:
85:2b:33:ed:4b:3f:a3:99:bf:3e:66:49:78:83:bf:b9:9d:66:
70:5f:19:29:96:e7:a5:fb:a0:5a:af:fc:9c:a8:83:a1:4c:28:
bd:e3:28:86:c2:bb:3f:2a:65:7f:51:50:e5:42:3c:25:b3:a4:
a6:30:67:8c:f0:76:c5:9c:51:64:fe:6e:ae:74:d9:49:0e:99:
23:a1:63:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ztK8e6SKg9qRaQAuDGv4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjQwNTI2MDcwMTUzWhcNMjQwNTI3MDcwMTUzWjAzMTEwLwYDVQQD
Eyg1NDRhNjgyMjRhOTEzNzU3MGZiYzE0MTNmMDJhYzE1NzhiMmY5MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEjcfoQXK/HNPafHlNNLxIlbv7pc
vcg2RlJ+KycmYytHvO9kP4n7Uj7AUXp0HrOqhGAGHSgU6420F6I8B5BZ0NBybWuZ
mJBaOmOXxPknIGDqQCSirup/jgd27WYxUtEzZjvDqTdSl1sGZibk77K4dJvYtyED
OZzVIHbuszDEdgM937DDe8wNz3N9bPWKbdrlIrgqUNl3Q/VcuSkeU5tbjj4ye40J
GyC2DoKlrgxdCq6/eHY6G39TFgU95aqB75D1o69gD/C2HU1oQq5vCh5K8MSPrkFW
YX1f/6fVKHPaX4XdLpI0RVAr7tLfHTTroyfoFMSGdwN5U/3WZ7qtGCHTAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRKaCJKkTdXD7wUE/AqwVeLL5NdMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRcamirN
39BudYNakVWePtMmS/uFkf+9KJ58uS6kaKQLSl4ONvj95gx9tPYZc/Sg1Y3hvpRY
56WjNzVjFMbva/K1y6FT/iktq9kbBpiflJq140eIVqmtsNqBQu6wbmiBf3wvhv/t
JYFORSAP4UPdo+8tpw6qyiZzYu2Q3mEndLDIbNPjQE8LpmkCeYmsZhCbEDOnTXaC
dnPZNFcgmdiase6dsekGNMy1WEISgi4vWy/NeBO3hSsz7Us/o5m/PmZJeIO/uZ1m
cF8ZKZbnpfugWq/8nKiDoUwoveMohsK7Pyplf1FQ5UI8JbOkpjBnjPB2xZxRZP5u
rnTZSQ6ZI6FjJg==
-----END CERTIFICATE-----
Generated at Sun May 26 09:05:16 2024 by rpki-client on console-fra.rpki-client.org