Manifest
$ rpki-client -vvf rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
File: CB2B40C722F645663A261D605D1C78BD1B720065.mft (raw, json)
Hash identifier: e8h8QcNvmngxFCist3C9APdgFB7clzUi0+yv1Mkwa0k=
Subject key identifier: 3F:56:1C:98:E5:F7:0B:D1:DF:BD:D0:D5:BD:3A:E5:EA:03:11:19:3F
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 47681115321B3D5E5FFD5E59A953E04935E898E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
Manifest number: 020B
Signing time: Thu 25 Apr 2024 06:49:33 +0000
Manifest this update: Thu 25 Apr 2024 06:44:33 +0000
Manifest next update: Fri 26 Apr 2024 10:25:33 +0000
Files and hashes: 1: AS216412.asa (hash: ACa7NyAf1l4D0t8Z2KQyW9FuAl6bw5PsRp8ihAO3+u8=)
2: AS200579.asa (hash: SRotFymdlkdpPZ6ZoiHYv4L0UU656AwbzLUvY56Zxmw=)
3: AS203868.asa (hash: WlqJf4meki48t+IMvg6TijGxtbvRwhL4qQ5e+ApQ8zw=)
4: AS199514.asa (hash: z/iu5ZLu9SXKGBji4vZxPRtWFiHSeseJmOwWXknQw+M=)
5: CB2B40C722F645663A261D605D1C78BD1B720065.crl (hash: CxtE/S/FBxNxv83jh4Bm7b5P4woPzgaj/3BQeZ8mb3o=)
Validation: OK
Signature path: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:68:11:15:32:1b:3d:5e:5f:fd:5e:59:a9:53:e0:49:35:e8:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Apr 25 06:44:33 2024 GMT
Not After : Apr 26 10:25:33 2024 GMT
Subject: CN=3F561C98E5F70BD1DFBDD0D5BD3AE5EA0311193F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:f3:e3:ea:63:02:a9:b3:0c:ce:f9:c5:76:
24:28:c6:43:13:29:30:77:e9:2b:da:f4:63:42:2a:
c6:59:2d:4a:93:c0:75:0b:c5:c1:5a:80:22:49:3e:
e6:e7:1e:74:cd:f6:f3:52:e6:28:99:ad:5c:14:da:
e8:ec:fe:d0:43:6e:08:54:f6:1e:f8:d4:1e:d3:3f:
2b:28:4d:a1:42:de:1d:a8:2a:c9:73:a8:f2:fc:aa:
2c:76:7d:8c:4c:af:6c:c1:d5:8b:fe:d9:27:c4:a3:
f9:35:46:1d:39:d2:ee:16:be:80:a9:a1:2d:7b:a6:
e9:7a:87:66:91:33:08:3b:8f:c2:45:5f:1e:03:30:
c5:9f:dd:9a:58:4e:0a:3e:f7:95:51:78:93:9a:66:
e9:4b:39:d7:b1:36:bd:68:ab:a6:60:dc:e1:a0:00:
59:3b:eb:dd:53:1a:17:57:11:a0:4e:cb:1e:cc:e8:
96:ef:24:2f:f3:80:4b:62:1d:ba:02:58:37:99:d1:
74:26:bb:f7:d3:9a:68:6a:fb:5a:d2:19:79:25:0a:
86:c8:e6:d0:15:52:2f:13:80:7d:33:22:03:ff:05:
f5:d2:d8:f5:9d:e7:6e:73:50:e4:fc:dc:be:49:2f:
6f:75:b2:60:6d:f9:28:c1:51:ef:2f:c6:4b:e1:75:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:56:1C:98:E5:F7:0B:D1:DF:BD:D0:D5:BD:3A:E5:EA:03:11:19:3F
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:48:16:09:ef:99:f0:f5:12:2f:c5:8f:61:e5:8a:5e:d8:
c9:89:ab:40:00:0d:48:79:2f:c5:1b:46:8e:94:ab:17:87:eb:
78:ca:4b:78:c6:0e:c6:2a:25:14:6c:69:58:17:0e:da:b7:cd:
46:7d:32:58:a8:c5:d4:82:fd:37:36:60:9c:88:c4:2b:51:11:
9a:a2:f5:5c:ca:c6:17:28:15:9e:02:7b:e9:33:5b:20:68:90:
94:e2:51:29:64:ce:90:32:33:3b:c6:86:a4:27:13:0e:46:57:
a5:35:67:bd:d9:a6:fc:18:3d:39:c1:0c:2e:dc:af:73:f6:4e:
c9:80:a7:db:71:2a:aa:e2:1e:45:b4:57:68:3a:8c:4f:d2:ad:
98:a7:ae:86:d6:8f:dd:73:77:36:94:c7:34:a6:73:f3:b8:cf:
fd:3b:e6:f7:45:c4:20:c1:63:3f:34:aa:98:99:07:9b:aa:c2:
7e:2c:43:52:27:5c:c4:dc:46:f6:9c:f0:0b:6a:b5:50:8b:23:
f3:4a:ec:65:c2:a6:84:f3:bd:44:3b:3e:be:f9:ad:84:18:45:
ae:8f:27:0e:3e:17:de:df:2c:ac:07:4c:81:31:11:d6:4a:86:
a6:7c:a3:20:4f:74:3b:81:9f:87:3e:67:9a:8c:85:7b:71:ce:
87:c5:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:19:14 2024 by rpki-client on console-fra.rpki-client.org