Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: ewrAeJgxU+hhiE38w9b8PnnbnbPVXyCKry4PsZN5ntc=
Subject key identifier: 99:15:61:B9:A0:86:03:E1:C3:E1:A5:0A:0A:00:1E:6F:3B:35:B1:D9
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 018F59952EA457F4BE8B853A3148FACEA915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 04B4
Signing time: Wed 08 May 2024 19:01:39 +0000
Manifest this update: Wed 08 May 2024 19:01:39 +0000
Manifest next update: Thu 09 May 2024 19:01:39 +0000
Files and hashes: 1: CCcqkF1Sdfcm7VcAN4Yhcrth0zg.roa (hash: 4npCwAiaBERfZADIT2iUlOb348ckfj0B7lXGGzoyxgA=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: pUpqL3r6YITAYqodHiLAyeHKDBMYmKW05EYFbVc2NNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:95:2e:a4:57:f4:be:8b:85:3a:31:48:fa:ce:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: May 8 19:01:39 2024 GMT
Not After : May 9 19:01:39 2024 GMT
Subject: CN=991561b9a08603e1c3e1a50a0a001e6f3b35b1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:fd:31:ae:67:9e:3c:6a:37:66:f0:49:92:
f5:26:ad:39:b7:84:86:61:19:1d:e5:74:52:41:02:
27:9e:36:a0:9a:44:ba:e7:23:a3:82:68:10:b5:42:
61:11:70:40:d0:e5:dc:9f:64:c1:cb:e4:55:e8:87:
ff:b0:3f:59:c6:0d:9f:8c:f7:9c:cb:0e:9d:b6:8a:
6c:f3:45:04:bb:ad:5d:1e:b9:16:86:f6:20:65:d2:
0c:67:07:39:68:03:e1:10:b0:b1:99:96:b1:82:fd:
d5:ba:45:eb:11:98:0d:86:15:cf:a9:b2:d4:99:33:
6c:17:79:ef:9d:37:6d:45:77:99:21:3b:25:ee:bd:
a6:f7:cf:a8:e1:09:6d:29:aa:02:99:fe:8d:24:cb:
e1:65:5b:32:69:db:e3:c0:b1:60:6e:6e:d9:3e:0e:
70:e0:fa:1b:88:a3:c1:c0:1e:92:da:3e:55:49:03:
40:67:2a:3b:bd:95:aa:d5:53:28:00:a6:bf:b2:87:
3e:7d:4f:7d:14:3f:10:6d:cc:d1:58:e1:19:b7:7b:
1b:13:12:35:1e:b9:f3:b6:50:6a:44:ee:ea:0d:dd:
5a:25:b9:be:b9:18:0b:86:9c:0c:50:65:9b:2e:84:
db:27:42:61:62:ad:1c:da:61:16:fa:c7:5e:dd:02:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:61:B9:A0:86:03:E1:C3:E1:A5:0A:0A:00:1E:6F:3B:35:B1:D9
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:32:89:98:36:c9:76:b7:dc:0d:45:f0:e3:56:dd:50:6c:
ba:b8:d1:28:c7:5a:44:da:25:b1:be:66:da:f4:94:12:2b:e8:
83:33:f1:9e:1b:cf:dd:09:3d:75:9b:c3:e4:3a:fb:cf:35:be:
fe:33:29:b9:c1:18:9f:6f:74:c1:1e:fa:66:c6:54:7a:ec:4c:
e5:e4:ec:c0:67:e7:7b:b8:31:61:c3:03:55:73:b5:cc:34:c4:
46:05:04:b8:79:72:77:ae:b0:7a:2b:56:d6:c6:e4:08:1c:ea:
31:78:4a:9d:3b:ff:cc:7e:87:64:45:af:e2:d4:75:38:62:fa:
15:8a:39:56:44:e1:4e:c2:ae:cf:4a:28:42:36:7d:4c:83:1f:
e7:19:c7:98:90:29:66:8d:dc:c6:e4:7f:4e:7b:98:9e:fc:4d:
ee:16:ce:a8:9a:54:4d:45:45:43:42:29:68:22:58:8a:f0:3d:
2e:7c:7d:66:f6:90:c2:ff:e9:1b:1c:36:9b:9e:de:18:26:b2:
31:04:97:a5:89:5f:61:b7:fa:8f:43:a8:fa:b1:42:3b:65:81:
67:65:ca:3e:4d:72:81:a2:1b:18:69:a9:47:c5:65:d6:55:59:
9c:80:67:08:d9:61:c5:c3:08:76:3c:78:ce:51:cd:23:b1:30:
41:74:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:11:36 2024 by rpki-client on console-fra.rpki-client.org