Manifest
$ rpki-client -vvf rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
File: 7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft (raw, json)
Hash identifier: XYrbJxiDdEWsyxId0EiSVUDO3qKL8+m6K8B9/2Vz6xU=
Subject key identifier: 42:2A:86:1E:B6:97:BD:6B:BA:A7:04:D9:17:6E:9E:5C:E2:49:43:F5
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Certificate issuer: /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial: 27C864CA494FC0F9AFC9F55C25D03BA5DE82A386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
Manifest number: 026C
Signing time: Fri 26 Jul 2024 14:14:43 +0000
Manifest this update: Fri 26 Jul 2024 14:09:43 +0000
Manifest next update: Sat 27 Jul 2024 14:56:43 +0000
Files and hashes: 1: AS7480.asa (hash: u66VbTtGwi8f3Ww7mEFxHDyPuh5CKEuYH2iR/m9bZMU=)
2: AS209557.asa (hash: G4JztwvtApI4XJoDUN8pC9UctK5+XCbDNWxHv0AF5qc=)
3: AS212666.asa (hash: sWLA0PbVZoxyluc8kD/nY4qfHc9Xtk58G3QVlLOo/hg=)
4: 7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl (hash: HeupvjVShSdE+4yBX6zbZBiWp5eXKCM1FIm15pSiJmo=)
5: AS60614.asa (hash: EXDWC1bEGxxr8g+h1hYm1rpMUeKOzfvRb6iH5QnqwWw=)
Validation: OK
Signature path: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jul 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c8:64:ca:49:4f:c0:f9:af:c9:f5:5c:25:d0:3b:a5:de:82:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Validity
Not Before: Jul 26 14:09:43 2024 GMT
Not After : Jul 27 14:56:43 2024 GMT
Subject: CN=422A861EB697BD6BBAA704D9176E9E5CE24943F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:f0:52:db:67:46:93:7a:b9:28:20:f5:8b:
25:0f:20:04:37:6f:53:5d:c5:1a:a7:58:4e:90:e3:
b8:28:82:21:37:2e:44:13:48:b9:c5:04:48:8d:cb:
81:c4:85:64:6a:11:c1:a8:3c:c5:23:f9:d4:43:9c:
93:98:68:d3:a0:dd:aa:fa:65:84:c6:33:ac:68:02:
44:f5:0d:62:d1:c1:0b:81:e8:d0:6d:80:cd:f4:98:
f0:a8:28:7b:88:0e:ad:68:47:1b:04:4e:47:0c:5b:
36:a8:bc:29:58:cb:e8:55:b4:c6:29:f6:b9:ca:6b:
48:cb:e5:b4:b3:bb:80:f4:d9:6d:21:65:2a:d8:a1:
a2:d7:ca:5c:0e:21:a6:ac:46:18:b9:1f:11:68:be:
71:eb:d8:66:a8:eb:6e:fe:ac:ac:17:f8:40:45:95:
a9:05:12:1d:a3:54:59:5c:08:14:2d:1a:b9:5b:f7:
6e:c0:f1:42:f9:88:17:be:1d:36:ca:e2:a1:3b:2c:
4e:21:61:bd:1b:e7:d6:f6:8a:21:bd:80:63:ab:e2:
af:d0:d6:4f:65:98:12:27:c9:2e:e6:28:61:ba:cd:
d2:38:d6:69:fa:86:53:97:51:f3:7e:62:92:fd:22:
14:52:09:51:61:e7:c8:c7:ef:e7:56:5e:01:7f:b4:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:86:1E:B6:97:BD:6B:BA:A7:04:D9:17:6E:9E:5C:E2:49:43:F5
X509v3 Authority Key Identifier:
keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:43:f3:f4:ef:bd:47:9b:fe:90:ae:40:d1:89:a9:f6:5b:3b:
e3:ee:6b:01:ae:e0:1e:cc:2c:c3:1e:6d:bc:8f:df:aa:a0:7f:
ae:34:53:7b:e1:71:b4:81:fb:dd:08:4b:b9:89:4b:c1:29:3a:
97:d6:75:2e:54:a4:28:e5:7b:55:d2:06:65:75:d7:05:8a:79:
af:c7:65:45:9a:d8:a6:15:73:7f:16:ff:e1:ff:23:01:d3:7f:
05:14:e6:fe:5d:93:93:b3:df:61:72:5d:f3:c2:b7:94:2e:62:
0a:6e:57:50:0c:a0:a1:de:a1:ea:fb:04:6b:c6:37:95:15:6c:
cd:8e:15:76:bb:82:fd:e4:66:31:b8:3e:f8:29:31:c4:a6:e6:
68:0e:98:dd:a3:8f:56:68:2a:eb:bf:28:b4:68:43:0a:d5:a5:
6e:c9:ac:04:d3:1c:ad:38:d5:bc:34:6d:fe:ed:cc:04:0d:ab:
47:22:b7:49:a4:e1:b8:e1:84:5f:05:5c:7c:12:2e:2b:7e:b9:
d7:14:e7:81:eb:b2:7a:81:9b:93:06:8d:de:54:3e:cf:8e:96:
84:81:39:36:72:2e:1c:44:ae:d7:da:0e:5a:36:05:b3:23:3d:
13:7c:b1:ea:e9:c8:e1:0f:27:4a:22:20:56:3c:c9:26:a2:84:
57:8b:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 16:52:47 2024 by rpki-client on console-ams.rpki-client.org