Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: qxUkCzgEta/T23//ZPjJfIjp/wrUQo3K+5e0pcnAmw8=
Subject key identifier: 7A:65:81:33:A3:A9:EF:47:6E:45:3D:9D:70:37:12:CE:8D:9B:B6:0D
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 018F91CC4C3F688150EC21BC2260A1777A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 10A1
Signing time: Sun 19 May 2024 17:00:36 +0000
Manifest this update: Sun 19 May 2024 17:00:36 +0000
Manifest next update: Mon 20 May 2024 17:00:36 +0000
Files and hashes: 1: HxB2_2dsQyKkerkE4sft7VhD-TM.roa (hash: KVBLKn6RG5mRmMYKaLrZPLRmstSOIchmxxgoZxnbBmU=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: GJEEn9OFIUWKdInEaWRgB746Fe7HtMFOQ5QUbGYkIjQ=)
3: pZDyA-M1Q9Rv6mx6OesCzECkR8g.roa (hash: IJKGV72HYbBHgAfAfKCK7Swb/nQoWH+Byxnb/OU1gzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:91:cc:4c:3f:68:81:50:ec:21:bc:22:60:a1:77:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: May 19 17:00:36 2024 GMT
Not After : May 20 17:00:36 2024 GMT
Subject: CN=7a658133a3a9ef476e453d9d703712ce8d9bb60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:8c:1e:00:af:78:0c:a2:00:b1:ca:ae:7f:
b0:dd:ae:01:c4:6d:73:4a:10:98:85:13:c6:78:4d:
f1:51:53:93:31:97:19:1e:49:9b:e4:3a:aa:75:58:
e0:91:d1:d2:84:ba:98:44:12:a6:34:70:49:ff:b8:
65:a1:7e:79:84:b7:1f:0e:cf:eb:83:9f:5f:65:4a:
7e:8b:54:fb:1c:af:f7:92:6f:b5:c7:25:c6:cc:f4:
5d:ee:fa:b8:e0:bc:b5:b1:bd:cd:19:98:49:59:3b:
c2:58:88:28:d9:79:95:8e:b6:15:f9:5f:f3:c0:e1:
53:95:93:42:14:63:51:1f:a9:7e:65:db:1a:23:1c:
e9:f1:65:a5:df:e2:99:31:d4:ac:8c:d9:a3:02:6f:
10:f7:90:d6:45:d2:2c:29:ef:94:ac:ec:12:d8:e9:
2c:1b:1f:46:ba:fa:ad:2c:27:5a:8b:dc:18:9f:7b:
29:bc:11:6d:4e:dc:33:95:a3:56:0d:53:37:f6:75:
12:e7:5d:0d:b9:0a:44:9f:0c:35:5e:59:78:fd:d2:
d2:e3:34:e0:70:cb:d5:33:5e:a0:fb:ea:42:dd:04:
3c:58:ee:b9:b9:7b:31:a8:53:00:ae:90:4e:47:70:
fd:51:1f:ff:ab:9f:f1:a7:75:90:60:ed:d0:e8:db:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:81:33:A3:A9:EF:47:6E:45:3D:9D:70:37:12:CE:8D:9B:B6:0D
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e7:65:b2:67:22:35:15:34:d2:ee:5b:86:03:7e:66:49:a1:
04:fa:2b:7d:98:9e:ef:8d:ad:fc:8a:25:87:c3:b7:b3:2e:c5:
ec:9c:1f:9e:47:3f:ea:cd:26:ca:14:2c:e0:24:9a:d1:a2:87:
90:8b:66:2a:ad:61:91:03:6b:c9:ee:f2:bc:3e:d6:3b:7a:1b:
a0:50:92:ff:ea:3b:5b:39:fe:16:35:ac:2a:4b:10:d7:b2:a7:
71:0a:07:eb:30:98:2a:e6:76:ef:b7:ca:dd:0e:cc:aa:54:67:
9e:3d:c1:5b:95:4f:cf:d9:b2:b3:30:92:a9:d4:72:b6:2d:49:
9b:cd:e5:28:1a:9c:8e:25:0a:fe:04:72:92:c6:c8:be:3c:e1:
4c:9e:18:d2:6e:be:f7:a3:63:62:b9:97:bf:52:8c:4c:e6:51:
9c:ca:26:eb:b7:e6:17:ef:39:8a:03:07:0f:4a:a9:28:de:5a:
b5:63:8c:2a:97:05:a8:27:79:bf:a8:05:5e:9d:52:d1:1c:4b:
a0:7c:7d:2e:ee:5f:52:eb:d7:dd:ce:38:ee:33:29:a0:c5:0c:
16:be:ff:bd:c8:72:12:88:1d:78:08:1d:68:96:d0:42:d9:3d:
8a:d9:ee:20:4e:96:12:5e:17:96:2c:c8:e3:16:e6:4a:0c:67:
c2:e8:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:58:39 2024 by rpki-client on console-fra.rpki-client.org