Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: Svgn/xW6WiLqDCTx5bS76OhxU1LWJuwjjLQI35RLHHA=
Subject key identifier: 23:D5:12:78:58:3F:4E:47:3F:84:6F:86:8D:64:64:76:18:16:7D:95
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 01901D0EEF0E01BB30A1CAD353F7CFCD8B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0701
Signing time: Sat 15 Jun 2024 18:00:36 +0000
Manifest this update: Sat 15 Jun 2024 18:00:36 +0000
Manifest next update: Sun 16 Jun 2024 18:00:36 +0000
Files and hashes: 1: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: zsaxOh94uaNxdFRAZ4ev12zTdi2saYyRIK4tkCN4Saw=)
2: MJYeW4r5N_SerXfKtv7zvd9Gook.roa (hash: 1EfC1ZIRkLvuTWnjOuAjkdwWb+SZf8SrVQ9/U/01qXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0e:ef:0e:01:bb:30:a1:ca:d3:53:f7:cf:cd:8b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Jun 15 18:00:36 2024 GMT
Not After : Jun 16 18:00:36 2024 GMT
Subject: CN=23d51278583f4e473f846f868d64647618167d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:23:1a:33:d5:d4:31:e3:6c:df:ed:e8:14:
90:00:7c:06:65:61:f1:88:09:b9:95:8b:25:fc:c3:
d6:7e:29:cd:39:67:5e:99:a5:8e:a6:cd:f6:17:ba:
01:c9:37:f9:7e:13:a4:d5:2f:97:d5:86:e1:0a:75:
31:4f:1d:c6:0a:3e:bc:ed:92:76:7b:28:e1:a6:81:
3f:12:8d:62:cc:ca:c8:9e:7a:70:dd:72:2c:8f:eb:
27:42:a7:21:ac:5f:82:9d:fa:ea:f4:9a:bd:13:63:
6d:5c:35:7d:7b:44:9c:e9:a3:fa:aa:85:7b:68:ab:
43:32:c8:d3:77:87:fe:86:78:87:d3:85:b3:e1:f2:
0f:62:eb:34:c0:43:1c:d0:4d:b0:ae:89:4d:e4:88:
46:43:68:d2:c8:ff:37:e2:bc:c4:0c:c9:8d:be:58:
66:c1:99:d1:f8:93:fe:c5:d5:7f:ad:6b:08:7d:47:
1f:9e:55:cf:f3:e4:17:ec:35:ab:0a:dd:60:ac:7f:
66:7c:eb:a2:9f:fd:72:23:ae:c3:16:94:58:8c:92:
11:9e:d6:6c:49:87:64:5a:09:f5:b0:01:d8:44:a8:
26:b8:e0:b9:fb:9e:09:b2:b7:f4:84:7a:47:e0:68:
b9:d3:d7:17:93:c8:11:f2:ef:54:e5:b9:fd:60:27:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:12:78:58:3F:4E:47:3F:84:6F:86:8D:64:64:76:18:16:7D:95
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ac:86:74:c2:0d:c1:f4:39:c3:38:64:3f:49:36:c1:6c:84:
a1:de:b1:d0:df:c2:d0:6f:92:e9:59:32:91:41:49:80:b7:03:
e3:75:62:ce:d8:e7:00:37:a7:8c:ca:1d:66:0a:17:ea:df:04:
55:bf:d7:65:66:f8:95:f6:7c:7b:86:12:07:98:f4:0b:f5:e8:
c0:40:5d:1d:91:03:36:92:fd:32:92:91:04:a1:e2:2e:ab:85:
a4:e7:00:5d:10:ec:ab:af:e3:91:3f:f1:fd:0a:f3:f0:e5:95:
65:84:4f:33:cb:7a:1c:07:12:01:30:84:43:dd:37:87:cf:87:
0a:47:d2:49:4c:27:d7:a3:23:4f:5c:f2:30:31:88:95:a4:77:
b3:39:42:59:cd:40:87:a5:de:98:8e:bc:3c:e1:fc:d8:17:df:
c9:bf:22:c9:e5:8a:26:f9:b3:60:be:08:83:5e:c1:61:4b:3d:
91:e5:e7:37:cf:d0:c4:09:35:7e:3f:ba:a4:9f:11:e5:72:0c:
35:19:5c:1f:98:62:5a:d7:48:33:6d:ba:1d:7d:9e:6a:35:d4:
04:bc:a2:25:0c:0e:16:41:c7:77:b5:b2:49:55:35:b2:ae:2b:
57:d3:55:2b:90:d4:19:65:8f:e7:2e:53:32:e8:b1:d9:02:7a:
30:c4:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:41:21 2024 by rpki-client on console-fra.rpki-client.org