Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
File: cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft (raw, json)
Hash identifier: Vi9RiQ1UlDuwiWWcviok7FwFu3g/9z/wazuhcs1FRtI=
Subject key identifier: 0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 0A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
Manifest number: 06C6
Signing time: Sat 23 Nov 2024 15:55:02 +0000
Manifest this update: Sat 23 Nov 2024 15:55:02 +0000
Manifest next update: Sat 23 Nov 2024 21:55:02 +0000
Files and hashes: 1: cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl (hash: fyfdXfcDxLpEqJLhmVkhJIrzw/senIS0Q9F9+YIJ2ao=)
2: u6tVYwV5mUnX93d2F07a3hRJwlw.roa (hash: mhlEGbrcZ0Unsp9Cwg/87EXcpiEy/mImzuKgZd5+Q5I=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Nov 23 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0DF9B711DFD65FAE0E658F0E7D80A78211D6887D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:6f:4c:58:c5:cd:80:10:af:93:7d:43:52:
d4:fe:64:de:5b:0e:4a:92:21:8d:51:38:c6:4c:75:
64:71:08:5a:0a:17:85:d1:f4:1a:f9:2c:e1:86:9b:
76:6c:53:d8:bf:88:a2:e0:5c:8b:5d:9b:64:18:b6:
91:1a:f9:9a:5c:97:09:34:4b:30:e4:61:7f:67:e1:
e0:ea:25:26:80:ff:25:86:b8:be:68:89:4a:f0:b1:
5f:3b:91:56:39:c3:3c:51:c4:21:2b:d3:37:65:b4:
84:45:45:6b:ad:45:75:e8:cb:a1:78:48:d6:0c:ad:
ec:b5:08:d1:fc:3f:56:8b:ac:da:4e:73:e2:ae:cf:
86:e9:97:18:b0:aa:fb:59:3a:40:3f:d0:b2:7b:07:
16:81:22:0d:7f:e5:6d:c2:0e:bc:ef:b4:fa:21:e1:
f2:cf:f1:90:34:82:80:49:e7:2d:1c:d7:c7:ae:84:
c2:8c:2d:18:27:f0:88:31:c3:10:f6:88:e8:30:75:
ba:e6:80:f5:38:90:e2:4e:cc:df:ce:3b:f8:a6:0e:
8b:96:96:3f:af:e1:d5:11:4d:e4:e2:09:c2:f2:77:
af:9b:25:6f:63:88:cf:cb:5a:3f:e4:3c:cc:a5:d1:
0f:66:ee:8e:49:2d:78:4c:90:93:1d:e8:70:42:d1:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:B7:11:DF:D6:5F:AE:0E:65:8F:0E:7D:80:A7:82:11:D6:88:7D
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9b:7a:2e:cc:de:ca:f3:39:3c:99:52:58:1f:75:ee:e1:a1:
33:2c:5e:f8:10:91:67:48:37:10:55:7e:6e:00:08:dd:89:b0:
2b:e4:8c:d4:06:9a:6b:84:2a:f1:62:9b:a2:5f:d0:29:04:cc:
5c:7c:ee:da:d0:3c:c3:19:c1:ee:8d:90:ad:78:6e:73:42:53:
2c:f9:f8:ec:b7:7e:eb:46:80:4d:0f:ef:c3:ab:89:97:42:04:
27:81:04:58:de:2a:a1:6a:81:c0:7c:6a:73:f3:82:b9:2b:53:
72:73:f0:4a:a7:dd:ae:7a:cf:05:0b:35:98:76:7e:f9:7e:41:
99:06:54:43:3b:80:c4:a9:84:20:25:ce:21:61:6b:a4:e3:36:
39:4d:8b:3b:5e:02:4a:c3:eb:18:2f:c1:a4:56:27:18:76:9d:
5a:97:e7:80:f6:34:1c:c6:f6:aa:61:1d:a4:2f:3a:9d:23:8d:
c1:d0:73:9e:e6:20:21:54:fd:08:45:0e:c6:17:8c:70:4d:bc:
78:7c:60:a0:70:ef:0b:5f:02:f7:d0:f7:b4:7b:50:21:b7:8b:
6b:79:a1:1f:b1:63:be:e7:51:3d:c0:3d:dc:ee:d7:ed:f7:70:
e2:26:81:71:eb:3c:14:a3:fa:db:12:0f:af:7c:c4:5e:a7:98:
87:72:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:31 2024 by rpki-client on console-ams.rpki-client.org