Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: D/V9/mNCO1HedLYO40bSOuo+ymyYh8C10Q3njGU29pI=
Subject key identifier: 1A:34:62:EE:E2:17:89:2F:7C:3C:93:A1:0B:73:61:ED:AF:0C:14:EE
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 523B15782C992707B45FD8D886946743B6D35027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 0101
Signing time: Wed 12 Jun 2024 13:02:29 +0000
Manifest this update: Wed 12 Jun 2024 12:57:29 +0000
Manifest next update: Thu 13 Jun 2024 14:11:29 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: pvcfe9m/u8CjmUrB3ac4uA6aNBIQFUB+NZbimyGG/SM=)
2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: Q3QiqxUuMSp7WUu02mA+KyUsM0fons3AJE9l+1oNWeY=)
3: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5/xue1t7Vp0t9BDsTl1B+IiUGePh3wUDZ/Dncr6ArKI=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3b:15:78:2c:99:27:07:b4:5f:d8:d8:86:94:67:43:b6:d3:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Jun 12 12:57:29 2024 GMT
Not After : Jun 13 14:11:29 2024 GMT
Subject: CN=1A3462EEE217892F7C3C93A10B7361EDAF0C14EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:76:a5:d5:22:3e:7d:b7:d6:17:99:25:86:
29:a8:2c:83:72:e7:3c:b7:a3:f2:cc:7b:7c:ff:9e:
33:97:9d:30:1e:f0:6f:35:e2:0e:64:87:7a:06:e9:
f9:7e:83:19:18:32:7d:b4:b9:9c:3c:e4:8d:f3:70:
49:cb:1a:a8:4c:97:18:20:50:0f:62:61:52:c3:6a:
27:c5:92:bc:d2:cc:2c:a1:01:f2:ab:ec:b3:1c:42:
6f:a9:3b:76:9d:77:4d:94:7b:b8:2f:e0:a7:5f:0e:
5f:64:c2:d1:5a:f9:60:66:e1:a2:07:77:a2:f5:ff:
28:21:65:06:b6:7d:b9:f8:54:ad:2c:2a:e0:f1:76:
1f:ca:89:7d:82:37:8b:d7:13:da:61:01:40:ec:28:
a1:64:a2:e4:84:c2:5d:f7:7b:91:7b:20:19:6d:d6:
a5:aa:cc:4e:d0:5f:98:50:e3:1e:5c:da:33:33:8f:
cc:ab:e4:1f:44:76:c3:9d:76:8c:a7:08:0c:0f:bb:
52:6b:1b:5b:fb:69:8f:49:fd:13:39:1a:a1:ec:06:
73:33:15:e6:fd:ff:87:58:3c:80:e6:2f:cf:39:3b:
2e:6b:dc:47:01:7a:0c:39:1e:6e:bb:99:09:31:fe:
be:8e:bd:f2:2b:99:6d:8c:e6:68:fd:ba:36:3e:65:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:62:EE:E2:17:89:2F:7C:3C:93:A1:0B:73:61:ED:AF:0C:14:EE
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:bf:c6:43:4b:0c:64:90:7b:f3:c1:83:f9:76:ed:e2:21:
a2:f9:34:0f:a9:d2:31:51:1d:a5:76:bb:8b:1c:c3:20:10:90:
56:8a:20:fb:52:65:8b:47:f4:ef:dc:75:83:e5:70:23:9a:71:
16:4d:fd:c5:54:b0:7c:eb:68:9a:d6:80:c8:e3:83:5c:30:06:
f6:13:dc:7b:d3:99:d0:74:75:55:aa:d9:d2:f6:f6:fe:a5:f8:
48:00:be:c0:0e:4e:c6:50:23:20:74:2b:24:8f:02:fe:52:f7:
63:4d:f6:c3:28:ec:da:64:21:b2:de:3b:0f:e1:e2:8b:e8:75:
18:2d:fa:e4:dc:c3:64:67:2c:44:ca:ee:21:36:2e:fe:11:da:
59:da:05:9f:26:f5:a0:5c:50:cb:d1:f1:32:e2:0c:d5:aa:63:
b5:76:1a:d1:ef:a1:42:e5:e4:5e:9a:b5:bd:47:64:2d:5f:6f:
0c:52:06:b7:33:b1:40:5b:2e:69:1f:8b:01:1d:b9:59:3b:b7:
a6:cc:ea:f9:9e:d2:4d:1e:0e:04:9c:b8:bb:d7:73:4a:d1:eb:
22:07:89:e4:57:e3:31:bc:4a:3b:b4:0c:5a:d7:2a:12:d4:82:
91:97:1a:da:51:46:6a:0f:bd:78:b7:5f:e9:39:49:76:a1:67:
f2:67:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:11:50 2024 by rpki-client on console-ams.rpki-client.org