Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: IrTrB5ZqWChknRJdJKVH2hXJb2R18qSh0FBUgLR9bjM=
Subject key identifier: B7:EB:DE:67:EF:49:9C:2A:71:1C:11:77:A7:6E:76:6A:3E:11:48:1A
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 018F86DA5F2B4D73FAC4701FE4DD31FA6E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 0C73
Signing time: Fri 17 May 2024 14:00:09 +0000
Manifest this update: Fri 17 May 2024 14:00:09 +0000
Manifest next update: Sat 18 May 2024 14:00:09 +0000
Files and hashes: 1: PfvhxT16KdMwlDTCa1FhF-HG-8c.roa (hash: vKefazhZUXdy9iNmk6u+xj5/eN3X5X+EqfToUvktua4=)
2: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: SEl1qupbrMRMWg0YPWhBvdx2RexHMnJI6C+h8IDJoXM=)
3: XROUUcz98-m_oqCcPBVLVbKHC4I.roa (hash: BOsDPJwhbD3pPEyoqhEt5qMepLI5AqG1L8iQMAnKtEI=)
4: XgSZU6VZwzBRsTWDLOG8lIgO7Hc.roa (hash: sK46/h9BRWiNruUAVODrMLH4mPL84C3pSNJSXun38sE=)
5: _PWiYgXV1g1SWwe7TXKGTM7c_AI.roa (hash: TYgz1MiCReZg9n+6wAhx9smvgWxez/GWbMDSRyXTlL4=)
6: eJrO2j5Cuvtoak_6mvsdb7c_Jgc.roa (hash: JlYdHxpc0NRCdm1GwY/RXvh/xf8oEyPTg6wk1J1xXjc=)
7: exMRT48XZgqYoUE4Xdkgw069dnw.roa (hash: NOCYQirbexj7msPUMb0IlsLvdjm3hnf9HuTqTA8jicU=)
8: hG3xwf2GuBbkYgPpKYSdWwUWIVU.roa (hash: Sdl2upw1co0sVHZNefFxVrMv7ZC+YW/FAugfVIYI7ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:5f:2b:4d:73:fa:c4:70:1f:e4:dd:31:fa:6e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: May 17 14:00:09 2024 GMT
Not After : May 18 14:00:09 2024 GMT
Subject: CN=b7ebde67ef499c2a711c1177a76e766a3e11481a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:66:3b:32:93:4a:d8:27:a5:a1:82:89:6a:
98:cf:83:c9:f0:0f:0c:b7:5f:f4:19:e2:2f:34:6c:
f8:ca:0e:0d:00:d2:ca:5f:5f:4c:e6:69:0b:4c:9b:
9d:f1:e2:88:76:44:b5:9a:56:d9:03:77:84:0a:db:
0e:bd:6d:d0:3f:cc:43:71:08:6a:92:11:c2:0c:e0:
27:c5:79:bb:23:b6:26:5f:0d:03:12:48:0a:b3:06:
df:ff:ea:90:66:fb:17:7a:e6:4d:0d:e9:55:68:40:
f4:47:20:43:28:35:ce:8c:36:c7:6e:e3:a2:81:2b:
1f:7f:7f:24:4e:eb:08:bb:3b:2b:cf:a2:43:d8:4f:
a3:19:c0:6d:f5:e2:0a:f7:52:e5:20:9d:e9:e1:cb:
9d:f1:95:0e:98:90:6f:d9:32:93:d9:2e:4c:b6:c2:
84:77:73:71:34:eb:f0:84:c7:cc:f2:ba:66:a4:b5:
10:3e:82:11:62:10:ee:89:fc:30:0f:bc:07:92:54:
d3:1d:06:23:8a:5c:5a:3a:c2:d9:8b:cf:1a:b5:11:
3d:b6:50:db:5e:c5:80:d6:fe:7e:13:b6:04:7d:3f:
6f:bc:6b:2e:51:d5:93:11:13:08:7f:ca:2a:d7:26:
c6:27:88:47:50:bf:56:87:7d:28:03:99:67:18:8d:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:DE:67:EF:49:9C:2A:71:1C:11:77:A7:6E:76:6A:3E:11:48:1A
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:25:eb:e9:0c:c7:42:09:c3:9a:4a:34:b5:9c:66:c6:49:
c9:b8:c8:d3:45:5b:ad:5d:07:9f:ba:41:08:e6:e3:7a:00:02:
21:a7:b2:22:2f:4b:c6:cd:e2:c3:07:c3:78:e3:a6:6b:c9:8b:
4e:89:80:9b:22:55:9d:f5:db:0e:8a:d7:4f:ad:40:be:73:c0:
bc:52:f7:e7:eb:22:d2:e8:0a:95:3d:18:61:f8:39:19:f1:14:
70:17:33:26:a1:2a:45:da:4b:78:aa:94:13:3f:89:ec:3d:2c:
55:c5:eb:61:0b:4e:99:be:25:fb:7c:78:b7:f9:a7:35:a8:91:
4d:57:bd:28:f9:58:73:97:15:60:7c:71:bd:f0:21:bc:b6:e6:
52:25:d1:5f:bf:72:71:5b:f4:8e:ee:15:f6:25:83:19:f6:70:
9f:0b:12:f3:bb:db:17:94:17:46:51:ad:77:a1:48:59:f1:5a:
0d:e3:21:96:0e:bc:12:40:03:c4:91:24:b6:9c:12:57:08:e2:
1e:3b:8c:54:f2:3b:e1:a3:9f:9f:e8:f1:8a:70:a7:69:e6:22:
26:65:85:96:ae:8a:07:2a:98:5f:ea:0d:42:3f:d6:9d:1a:42:
a2:e5:9f:9d:38:f9:fd:2b:01:d5:92:33:d9:0f:d5:21:6e:50:
5e:4a:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:39 2024 by rpki-client on console-fra.rpki-client.org