Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: ulHXUxhECYa2u9V1UlaVGTjNARogRKZAGI9AU6O1ju8=
Subject key identifier: 79:89:50:AA:F1:84:05:54:AB:9E:23:83:6A:54:66:49:03:1A:22:14
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 1A475E5C877754D8BAC40070ACB943B40B9BDE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 3F
Signing time: Fri 20 Sep 2024 01:06:10 +0000
Manifest this update: Fri 20 Sep 2024 01:01:10 +0000
Manifest next update: Sat 21 Sep 2024 03:06:10 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: +UMfMESYqeyPmrCJ/kx3ipw2ka2u4pT/pesfSg9Ka2Y=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:47:5e:5c:87:77:54:d8:ba:c4:00:70:ac:b9:43:b4:0b:9b:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 20 01:01:10 2024 GMT
Not After : Sep 21 03:06:10 2024 GMT
Subject: CN=798950AAF1840554AB9E23836A546649031A2214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:7e:df:21:2b:d1:cb:5c:3f:8e:70:03:cd:
6e:e1:2c:1d:85:2c:3f:f9:a8:a5:0e:6b:90:15:a0:
44:9a:0c:47:70:01:6a:30:d4:7f:69:a5:2f:4e:c8:
46:31:f2:e4:d2:5b:ae:74:5e:4a:10:f2:1b:27:3c:
7e:b9:bf:f1:c8:c9:1e:8e:66:10:3b:c5:85:4c:b9:
42:b0:ae:41:67:13:dc:cb:67:96:37:e7:2e:7d:bc:
97:4b:73:c9:8a:1b:f5:96:9e:38:84:99:39:6c:5d:
f3:91:d8:0c:af:df:85:f9:a0:44:cc:d2:eb:2d:6e:
7d:60:1d:d4:2a:d0:3b:9a:27:1f:74:c9:54:8b:14:
9c:a9:23:c3:f9:1e:dc:c9:79:9a:0d:2e:b4:1b:9e:
19:d7:f2:4a:72:c5:ed:0d:c3:4a:64:dc:d2:3b:77:
6e:26:84:b9:2f:9d:6b:03:0f:cb:30:84:1d:96:7d:
c1:f4:76:8d:bf:80:7d:9c:ea:51:08:ce:9b:af:52:
9f:73:a5:ce:d4:ff:77:59:e4:9b:0d:8c:0b:e1:ac:
03:8d:35:78:37:f1:bb:20:cc:bb:26:a7:05:ea:5c:
e0:d1:99:c1:37:4d:47:10:7b:4f:b7:c8:4d:29:dd:
73:df:e4:c3:cd:9c:79:6d:7d:27:32:35:42:0d:c3:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:50:AA:F1:84:05:54:AB:9E:23:83:6A:54:66:49:03:1A:22:14
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9d:9c:a4:cf:04:d7:d7:14:5e:27:a8:0e:a6:b0:97:4d:d0:
1e:52:77:75:d4:0a:3b:d5:02:08:c9:bd:04:ba:55:d3:46:eb:
71:56:a0:40:ba:32:7b:90:4a:21:1c:d2:1f:43:e7:f7:f7:f9:
6c:49:1b:6d:64:b8:3e:c2:e8:35:09:88:8b:70:b2:26:2d:56:
e2:8b:21:34:8a:7d:87:c4:51:c1:1f:a0:e3:04:e6:c8:56:d0:
d1:6e:5c:42:73:94:95:0a:9f:6e:8c:c1:c4:f9:7f:24:31:7d:
72:73:f5:73:e6:97:7f:21:c4:4f:2c:b1:10:16:85:4b:46:ef:
00:47:d2:f0:99:3f:40:88:71:85:93:79:40:23:34:69:fd:c9:
7f:e2:21:fe:e3:d3:6b:bd:58:ae:ad:35:a0:e3:ec:3f:9d:55:
da:7e:66:f1:91:a0:47:64:73:bb:0e:be:50:c3:8b:3c:d0:af:
63:49:c2:ae:67:bb:58:7f:b1:f5:76:7b:ce:f9:1e:c8:94:ae:
c4:b9:e6:46:a1:b3:a2:93:66:9c:95:bd:16:6a:cf:89:59:f7:
82:67:cb:79:ce:c4:ee:02:ba:d5:c3:0c:c7:14:42:1d:88:6c:
fc:81:e0:00:f7:00:fd:ba:b3:1a:5e:97:cb:7e:68:f3:42:e5:
f8:2e:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:37:29 2024 by rpki-client on console-ams.rpki-client.org