Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: gZjufDNGHAPDC83vvVj6Wu9WZck94rzaqXWzw/mowHg=
Subject key identifier: 90:5E:E7:24:8B:96:BF:5A:5C:92:6D:5A:FA:1B:DF:25:D3:13:EB:6F
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 01903AE438D387280EDE00D090FFD0103FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 11D5
Signing time: Fri 21 Jun 2024 13:02:33 +0000
Manifest this update: Fri 21 Jun 2024 13:02:33 +0000
Manifest next update: Sat 22 Jun 2024 13:02:33 +0000
Files and hashes: 1: 1-C13rJoh_2AG3349xoorPIufciI.roa (hash: jYnBANgVl9Odqh9yLErT/DVhNquN6U8W1KyVQOLPgcU=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: 8mSGt/S0ZYOmkSkWgdjRiELLd2DxCbvwtligY3ZhIN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e4:38:d3:87:28:0e:de:00:d0:90:ff:d0:10:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Jun 21 13:02:33 2024 GMT
Not After : Jun 22 13:02:33 2024 GMT
Subject: CN=905ee7248b96bf5a5c926d5afa1bdf25d313eb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:f8:7e:53:0c:8a:c3:b2:f2:11:68:c3:c3:
32:68:a8:f3:cb:a2:25:54:ea:f7:c6:6a:da:43:08:
12:b3:3d:5b:30:7a:24:66:8d:c9:97:bd:d4:2d:81:
c7:36:f9:0b:fa:90:9a:05:8a:c1:f6:fd:e1:a4:78:
a4:f9:62:7d:30:eb:d7:f8:af:79:c0:df:f9:23:f5:
d0:57:90:9a:59:dc:50:17:0d:fe:38:c3:d9:35:d6:
ee:07:1f:17:f8:12:c2:51:62:e4:34:4f:7f:7b:c9:
09:46:48:a7:7f:60:9e:f5:70:dc:0e:ae:96:15:b7:
d1:38:a0:36:7c:6c:59:8f:7e:6c:d7:06:26:01:7a:
25:79:c3:23:a5:36:fc:24:44:3a:a0:72:ea:18:18:
2c:fc:12:bb:1c:ad:4c:0d:03:75:ad:18:25:19:91:
77:0d:6d:04:b2:6f:2d:48:4e:55:3c:59:46:cd:a9:
43:39:87:45:e5:a6:c9:8d:57:35:01:3b:f6:4d:10:
41:ce:cc:13:09:2e:e0:9e:d5:52:95:4d:87:35:ce:
6b:9d:7a:8c:e8:06:86:37:38:a5:ec:ca:4b:c3:60:
03:f0:b8:c2:7b:96:3d:32:d8:6e:25:b7:83:69:00:
54:5c:a6:f3:51:ce:5e:71:be:9e:ce:95:90:6f:dd:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:E7:24:8B:96:BF:5A:5C:92:6D:5A:FA:1B:DF:25:D3:13:EB:6F
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:87:d6:12:ac:40:ab:fd:e3:77:e6:7d:87:a0:17:8f:59:ac:
cb:4d:f1:e6:cc:5a:ac:2c:59:fc:4c:a4:54:a9:a6:37:14:67:
a3:0c:48:44:a9:27:5c:d3:23:3e:92:f9:2b:16:fe:d9:0f:4b:
79:66:12:26:d7:66:8d:ed:77:62:d2:b5:de:84:06:5e:f1:ea:
d1:19:9f:f6:ad:f3:47:5c:58:71:bb:5b:f4:11:15:41:f9:54:
a9:16:81:50:4b:e3:e0:fb:18:16:99:06:03:f1:5c:80:63:f8:
1f:61:3d:c9:c2:f9:2e:42:82:20:37:3e:bf:7f:46:1f:d3:63:
c9:10:b7:14:d0:b6:e1:3e:46:f5:64:9c:ae:4c:95:51:22:1e:
28:ef:92:ec:fd:24:0f:0a:6b:13:4e:59:d1:de:f1:e8:b9:36:
0b:75:eb:04:55:de:96:7d:5c:89:5b:57:ab:25:22:2e:d5:1a:
71:4e:a5:b0:ea:7a:2c:99:ce:f8:9e:5d:3c:50:1c:36:94:90:
3e:64:0a:77:4d:6a:1c:f1:c7:fb:10:20:c6:5c:61:1b:9b:09:
74:9a:2d:79:6a:93:a0:8d:00:5b:c5:fe:1e:95:04:c5:5b:8a:
b9:ef:04:73:4f:6e:f5:b4:c2:e1:94:b0:2e:57:1c:7f:a8:1b:
69:f7:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:45:12 2024 by rpki-client on console-fra.rpki-client.org