Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: 53gaNV3JLKbBwChKTrGGa56CEGn4HsXagsMBkGPrtwE=
Subject key identifier: 96:4C:03:2A:74:A4:3A:F1:57:05:DF:19:92:4C:40:36:D2:B2:73:E8
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 019040AFBB904BCF9FBD65143D6DDA8D98B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0179
Signing time: Sat 22 Jun 2024 16:02:56 +0000
Manifest this update: Sat 22 Jun 2024 16:02:56 +0000
Manifest next update: Sun 23 Jun 2024 16:02:56 +0000
Files and hashes: 1: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: GkOfhx/hXoEDiamPigXWeNy5H+j8wIozMZwr7KpX6QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:af:bb:90:4b:cf:9f:bd:65:14:3d:6d:da:8d:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jun 22 16:02:56 2024 GMT
Not After : Jun 23 16:02:56 2024 GMT
Subject: CN=964c032a74a43af15705df19924c4036d2b273e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:97:eb:90:33:dc:e3:4f:ab:9c:99:4b:cb:
0f:85:40:54:03:2b:92:4e:6f:c5:96:de:e4:c0:0d:
7f:a8:7f:0d:7f:26:c9:f8:be:51:9f:9a:77:28:7c:
15:8d:ff:52:11:a5:d4:a9:98:a4:9d:e2:4c:ac:78:
75:ed:fe:64:26:fe:45:bf:21:12:8e:f9:42:b0:15:
ad:8f:be:b1:b3:6c:8d:82:fa:94:81:6d:bf:e4:c8:
ec:02:23:68:16:b3:aa:d9:ee:81:f3:28:b0:ee:dc:
34:ec:f9:b0:02:c6:e6:5e:5d:41:8c:25:0c:1f:26:
bf:37:10:ca:2b:62:81:1a:f9:b2:f0:2d:29:9f:55:
1b:0a:3e:51:3b:b2:f4:90:b2:db:47:f0:73:cc:fd:
68:27:e0:94:27:95:78:61:73:8e:85:f1:4d:11:28:
63:20:f1:a8:ad:53:e1:f8:d7:a5:c3:de:d3:5e:92:
63:d2:1c:6e:ef:35:5a:a5:38:31:33:5b:f8:08:da:
58:5e:7a:04:eb:15:14:0e:e6:ea:cd:e9:28:99:37:
d1:4d:b3:c8:c2:2f:06:07:fd:2f:d6:1c:c3:2b:03:
a0:50:ae:a5:0b:a7:13:e9:75:40:60:bd:8a:c2:59:
91:29:67:bc:a3:4c:4a:60:aa:bb:1e:5b:ad:62:88:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:03:2A:74:A4:3A:F1:57:05:DF:19:92:4C:40:36:D2:B2:73:E8
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:66:e9:95:fd:76:8a:48:ad:87:86:04:5e:ca:48:b4:cc:
7c:bf:04:6f:51:6b:e7:e4:cf:47:39:7d:d5:65:4f:6e:dc:b6:
21:a2:a4:15:ad:46:c4:96:40:81:0e:f7:0a:6c:9d:b7:33:e1:
62:b2:56:f4:d9:ad:79:43:68:9e:7e:5a:67:1a:a3:4b:8f:3d:
6b:a4:7d:e1:75:5b:7b:61:21:d6:c1:81:1b:4c:20:d1:60:1f:
9f:e1:d7:20:42:f2:ba:49:1a:85:5e:02:a0:db:85:b1:b2:ec:
c6:dc:2f:4c:1e:8b:8c:fa:ee:2e:aa:b2:30:8b:44:f9:c0:04:
36:2a:bc:b5:7e:9b:db:bb:77:f8:bd:c8:b2:a7:17:9c:27:71:
f5:58:f3:22:e2:ed:05:64:90:2a:ae:68:92:7c:12:82:63:1b:
46:6b:34:69:86:6d:3c:7a:c1:5a:35:52:7e:30:61:ce:ee:2d:
5f:6e:b6:79:f0:24:08:7f:53:41:66:c2:c2:8a:58:14:15:13:
82:d0:17:dd:aa:c3:f4:dd:ce:ab:51:5d:53:31:61:97:93:f5:
7d:76:f5:c2:c1:27:4f:a8:bb:51:d4:9e:7e:23:e7:da:73:60:
b2:f6:1c:bb:c0:1e:a8:45:d0:77:f8:28:a1:88:fb:9b:d5:c6:
1a:ef:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:41:21 2024 by rpki-client on console-ams.rpki-client.org