Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: qbgmP6+bw7kpZimVyFR5owAmBPMJlHEcHf5t0zozxdU=
Subject key identifier: 18:03:04:6F:D0:54:A9:4E:8D:23:C8:43:E1:82:B1:C1:E8:8F:77:16
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 019048D5A59FB6919849696B57A0AF8DB9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 02C2
Signing time: Mon 24 Jun 2024 06:01:19 +0000
Manifest this update: Mon 24 Jun 2024 06:01:19 +0000
Manifest next update: Tue 25 Jun 2024 06:01:19 +0000
Files and hashes: 1: KcYP1NGg-r2e41FID4YKU7WnffM.roa (hash: ivnGXMhmrmEUrR+fQYp2OnC6ZqYVMLcDdqzbAZ4DlOg=)
2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: ndc/4mybPfUce8QoV9mETbsOyYKrPXVXCr1f0PUaziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:d5:a5:9f:b6:91:98:49:69:6b:57:a0:af:8d:b9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Jun 24 06:01:19 2024 GMT
Not After : Jun 25 06:01:19 2024 GMT
Subject: CN=1803046fd054a94e8d23c843e182b1c1e88f7716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:22:c6:3a:0d:d1:09:0e:c2:04:b1:8d:06:
6d:a1:0e:71:f2:40:d0:8d:27:bf:8c:ef:14:0c:a3:
df:8e:01:fb:da:f2:1a:af:88:eb:b9:76:4a:14:c8:
a4:98:30:06:4d:6d:3c:5d:40:24:52:5e:5d:08:8f:
b4:48:0d:9f:dd:a4:ac:35:20:27:e2:07:90:8a:d7:
fc:9d:c1:8a:6a:df:00:2f:be:fa:8e:aa:9a:3d:25:
cc:04:bf:5c:a8:8a:1e:7f:d1:24:7c:e0:d3:f8:31:
2e:93:f8:94:a5:6c:d6:4e:7b:c4:ab:26:76:cc:2c:
4b:4b:8d:74:70:d7:52:16:d4:ad:e1:ff:00:48:74:
b5:56:6e:09:00:38:b3:ab:14:c8:90:5f:d1:f1:f6:
69:bf:79:d3:2a:ad:4c:7e:eb:63:47:aa:45:fe:18:
71:94:3e:5a:2e:4a:a3:f8:89:c7:c0:e2:b8:24:7b:
8f:38:d1:10:9c:2f:10:d6:3c:f5:3c:dc:8c:30:5c:
32:40:29:6e:76:01:32:9e:5c:fe:e4:4d:f3:4a:1d:
1d:5b:62:4e:9f:af:bb:06:9f:66:18:ae:d2:c1:72:
15:18:e4:46:60:26:15:c3:83:93:71:0d:94:f1:2d:
3c:d7:39:f0:b5:ed:fe:16:9e:56:22:97:11:82:58:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:04:6F:D0:54:A9:4E:8D:23:C8:43:E1:82:B1:C1:E8:8F:77:16
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a8:60:70:b7:05:23:68:b2:40:d9:d7:c1:4d:5b:94:36:8c:
f5:01:b9:42:a7:61:50:e1:6e:f3:60:4a:a7:6b:fe:26:b1:a1:
d7:74:c2:65:3e:7c:e5:c2:80:0b:8a:0d:f9:cb:8a:9e:6b:e1:
3d:51:ef:7a:46:19:be:76:69:54:92:28:40:aa:58:03:68:e5:
9b:55:51:fb:c6:3c:80:75:9f:e5:ff:bc:c6:e7:82:6c:19:47:
8b:3b:56:31:57:5c:ca:c8:0b:fd:e8:38:f9:38:34:74:ba:99:
7b:eb:01:d1:6c:09:8d:c5:77:66:b7:27:33:14:e7:66:5f:a6:
91:34:18:7e:47:08:fd:e0:16:8c:85:05:0a:8f:d6:f9:82:8f:
8a:b9:1d:b8:fe:eb:27:6d:5d:86:44:ea:a2:81:a4:b6:80:5e:
0b:2f:a2:52:98:47:04:a5:50:1f:ed:31:85:58:a1:cf:1e:bb:
84:4d:c9:08:a2:01:4a:c0:6e:42:0d:86:a0:b4:9c:67:e3:85:
ea:e6:4d:cf:cd:59:cd:63:4b:c9:85:93:cd:9d:06:82:ba:f3:
ff:76:62:9f:da:d6:2c:9c:f3:30:97:87:24:74:b3:73:a7:2e:
89:78:14:63:89:75:ad:79:0b:14:06:f7:57:43:27:eb:28:87:
fa:cf:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:44:40 2024 by rpki-client on console-fra.rpki-client.org