Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: mX7QOBzwWsZ7m5pa5mdzYtCbOEReVma9XcILswwUO5g=
Subject key identifier: 96:48:C6:04:FA:EE:0A:CF:A3:E9:D4:81:7E:31:D5:E4:17:54:73:21
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 01904453ABE6614F34C00317AC5DDD2CBB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 9B
Signing time: Sun 23 Jun 2024 09:00:52 +0000
Manifest this update: Sun 23 Jun 2024 09:00:52 +0000
Manifest next update: Mon 24 Jun 2024 09:00:52 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: YgjgSfdwX8j6nWXDRinwHRARPR+REYbzLeP3LaVaz88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:53:ab:e6:61:4f:34:c0:03:17:ac:5d:dd:2c:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Jun 23 09:00:52 2024 GMT
Not After : Jun 24 09:00:52 2024 GMT
Subject: CN=9648c604faee0acfa3e9d4817e31d5e417547321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:42:ae:32:17:26:e8:62:7c:64:f9:37:19:
7e:0f:be:ac:33:5f:d0:02:8b:8b:d7:56:f6:a6:f9:
5b:60:a6:e7:bc:2e:7a:c8:45:7c:4c:19:7f:ea:de:
18:7b:12:44:63:2a:e0:26:62:fc:5e:01:20:6c:4c:
cb:2e:d4:56:85:9d:30:c7:65:bb:b4:c5:ce:7f:b2:
6d:21:9d:36:b7:f6:6c:10:f3:6a:6a:ce:bf:24:4b:
f7:da:28:b5:90:2a:bb:d7:48:60:53:70:22:b5:d0:
6c:3d:4a:83:9c:ed:ca:df:c0:66:ee:07:86:85:bc:
91:1d:78:75:6b:22:88:b0:82:0b:58:98:94:a8:ea:
c6:5c:3d:7e:48:fb:ee:ab:c1:94:90:d7:a5:38:1e:
15:3b:25:42:fd:5c:ab:74:26:a5:50:77:0c:95:b0:
72:5d:8e:94:cf:da:f2:f8:2f:03:34:5a:93:68:0a:
03:3f:ca:bf:20:39:7e:0e:8c:4b:4a:20:1b:98:f6:
ee:f7:51:7a:b3:2a:3d:78:cd:1a:d7:95:07:fa:d9:
90:a3:6c:2b:45:71:64:23:3f:25:e8:71:9a:aa:51:
16:00:61:85:cb:79:f6:1a:f0:4e:49:a6:69:0d:eb:
e6:5b:14:8b:c0:05:10:d0:73:f4:6b:d5:df:a5:51:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:C6:04:FA:EE:0A:CF:A3:E9:D4:81:7E:31:D5:E4:17:54:73:21
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d0:d4:b9:3f:27:7f:74:3c:95:78:70:a3:75:f6:18:3e:1b:
c4:97:16:f3:a4:21:a0:09:98:ee:0b:d5:34:ef:3f:15:83:9f:
5f:39:60:8e:a9:46:6e:8c:b7:e1:4c:35:57:0d:5b:7f:2c:7f:
c3:ab:5b:b6:77:90:92:67:9a:07:9d:0f:a0:b2:10:30:09:53:
87:7d:fb:af:67:89:12:c1:2f:7a:2f:3d:52:d8:1e:cf:f0:8a:
57:c6:05:e0:9f:ae:2c:5a:ca:0e:d8:a8:bd:61:c6:52:02:42:
31:39:50:10:f1:15:b0:d8:34:2a:21:31:d2:4a:4d:4a:e8:ea:
11:f2:20:36:d7:eb:f7:4d:4e:ad:e0:76:dd:9d:35:df:2b:c5:
e7:b1:da:f0:2e:85:9d:8e:e7:25:44:39:e9:5f:97:8e:93:de:
9e:bc:5c:ca:32:4c:e8:25:ea:70:a5:52:12:34:0f:a8:b2:00:
cd:83:f8:65:f1:31:db:84:e8:42:ca:a2:47:5f:df:e3:69:76:
1b:52:47:a8:5b:a0:a0:2f:e2:32:5b:80:db:9c:fd:9e:06:2e:
55:c3:e5:79:aa:b9:0c:52:e9:b3:a7:4d:e5:85:3d:9e:65:59:
04:c1:af:08:fa:13:d5:50:fd:72:c9:5e:00:b7:60:68:a2:e6:
5f:56:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:01:40 2024 by rpki-client on console-ams.rpki-client.org