Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
File: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft (raw, json)
Hash identifier: KbXIWrlj/1ezbKR8e4G5571zvaat3PJZjHSKahNqUtU=
Subject key identifier: A2:51:46:72:3C:BB:F5:1D:A5:EE:7B:13:28:B6:2A:B1:3C:9F:86:0D
Authority key identifier: 68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
Certificate issuer: /CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Certificate serial: 01901DEAA9205021B9A0552274F4A524DA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
Manifest number: 11AA
Signing time: Sat 15 Jun 2024 22:00:36 +0000
Manifest this update: Sat 15 Jun 2024 22:00:36 +0000
Manifest next update: Sun 16 Jun 2024 22:00:36 +0000
Files and hashes: 1: aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl (hash: +KmwuF0oTGAfy93PBt86RvzTZCQ89irZrmD/ibmRAis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:a9:20:50:21:b9:a0:55:22:74:f4:a5:24:da:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e1e6ea527dc385a79a3e08827dbf690c91c4c2
Validity
Not Before: Jun 15 22:00:36 2024 GMT
Not After : Jun 16 22:00:36 2024 GMT
Subject: CN=a25146723cbbf51da5ee7b1328b62ab13c9f860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:d8:01:5a:1b:37:e1:71:b6:1d:8c:d1:0c:
d3:66:93:b0:9f:2d:d9:20:64:b2:c8:b1:b7:d8:4f:
19:24:40:1e:28:09:30:31:80:06:bb:46:fb:7c:a2:
bb:e3:ab:9a:e8:bc:67:71:f6:cb:74:72:c3:6c:a3:
5f:e9:6a:11:64:88:06:d1:b8:73:36:29:c6:4e:b8:
e1:14:17:67:dd:14:db:81:b4:6d:c3:ae:48:3c:61:
00:cd:5c:f5:87:8c:1e:d4:95:fc:df:fa:8c:b1:ed:
8d:d1:9c:7d:35:31:a9:7a:e9:a0:b7:e5:f1:06:95:
71:4b:7e:d4:c2:27:41:85:56:b9:32:87:8e:73:a8:
d4:32:35:97:71:9f:70:c0:dd:14:81:62:41:c8:1c:
20:1e:6b:b4:08:20:ef:0a:9b:4b:c9:c6:8c:49:b0:
65:c2:c7:b8:d1:5c:d8:7c:37:2f:7e:9a:5a:a0:c0:
71:de:53:b9:2f:57:c5:c2:39:ba:8c:a5:4c:a4:39:
87:9f:4f:c5:3c:e1:69:d7:a2:f2:80:46:5a:8a:7d:
c1:03:b7:25:24:8a:30:1e:63:ef:5b:98:0d:54:3e:
4f:66:7c:d0:d3:1f:98:d4:2f:79:ad:0d:5c:e2:40:
90:a5:e7:cd:68:e2:01:1f:ab:28:21:3d:f1:87:69:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:46:72:3C:BB:F5:1D:A5:EE:7B:13:28:B6:2A:B1:3C:9F:86:0D
X509v3 Authority Key Identifier:
keyid:68:E1:E6:EA:52:7D:C3:85:A7:9A:3E:08:82:7D:BF:69:0C:91:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9331c9-e164-4d2e-b839-17d097ff89c2/1/aOHm6lJ9w4Wnmj4Ign2_aQyRxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:9a:4e:c2:96:c2:87:5b:48:5d:ab:01:0d:3b:41:14:0c:
92:4e:90:a3:86:0c:9f:2b:80:e4:4f:35:5d:31:96:4a:a9:b5:
14:03:62:09:14:be:4a:10:12:5b:74:e6:1d:fe:b7:51:43:19:
90:1b:b0:e9:0e:33:05:65:c8:53:63:bb:4b:97:f0:d9:1b:3e:
ca:b4:68:66:b2:c4:dc:99:25:b3:68:18:05:85:e1:c9:57:41:
eb:d2:cb:1c:24:08:f2:cd:2d:75:7d:8e:67:30:29:30:81:09:
25:0a:3b:ea:b2:6d:a0:7e:d7:d5:79:e4:4d:1f:47:0c:5f:85:
db:cc:08:dd:9e:7a:ad:db:7a:a3:f8:eb:49:21:4a:fb:c6:86:
90:41:00:06:6e:84:a0:88:00:68:44:de:b9:f4:b0:41:71:c6:
15:82:48:2d:01:f6:3e:d2:11:6b:fa:a3:fa:81:8b:b5:3d:82:
43:13:f1:51:d4:20:a3:db:4c:35:2a:ce:6b:95:7c:dd:c6:9d:
60:18:22:96:c5:19:f6:ee:8c:ca:9b:e9:7b:38:70:00:fd:37:
99:43:78:fb:98:e5:60:0d:89:ae:c4:f7:cb:cf:d5:1b:bd:50:
ec:ed:54:07:2a:59:b8:db:6c:00:a3:ab:66:b1:02:99:36:ad:
d9:6f:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:46 2024 by rpki-client on console-fra.rpki-client.org