Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: udSz/pTZ0RA0jF9xAHDcqSMRrt8VwsxVT40BH67amzE=
Subject key identifier: B1:8A:D6:89:95:32:B1:84:0E:42:FF:A8:8E:96:75:9E:43:2C:68:01
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 018F87491F2DD4B825C8B46DCFBFC68A128E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0820
Signing time: Fri 17 May 2024 16:01:07 +0000
Manifest this update: Fri 17 May 2024 16:01:07 +0000
Manifest next update: Sat 18 May 2024 16:01:07 +0000
Files and hashes: 1: 8rr5MVRPucM3C2YQxyB74DT4h90.roa (hash: SZa+MtG0FFtflm4B8rl9dZwQz3MH8IIY6pNzvy3i7Rc=)
2: JrnJrnx2M5Znft4D4VlSV8-xgtA.roa (hash: xLuNP1cXsSsGRrlaYcWl1ogQhnBjRd/jnaPmrBep/jg=)
3: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: POlngJQmpDQpVYDsWaHjRoMFQDvV1MP7ycJuIiDW2q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:1f:2d:d4:b8:25:c8:b4:6d:cf:bf:c6:8a:12:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: May 17 16:01:07 2024 GMT
Not After : May 18 16:01:07 2024 GMT
Subject: CN=b18ad6899532b1840e42ffa88e96759e432c6801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:2c:43:cf:b9:c5:cf:27:27:70:f9:2f:a4:
e5:1a:d4:47:45:47:1c:f7:93:47:f8:d4:f3:9a:aa:
51:80:b0:8f:23:04:e9:d3:77:b0:d1:d0:01:0b:1f:
17:56:0a:1d:04:f8:31:ab:07:bd:e8:43:4b:06:d9:
bf:7f:01:2e:0c:ba:bd:e1:3e:c2:6f:47:da:a4:29:
f9:ba:ae:a8:4e:f6:54:d1:1f:4c:16:b4:23:11:10:
e8:95:5c:26:86:f9:2a:53:b3:2e:a7:d1:62:00:7b:
ee:40:c7:56:02:f8:97:b4:41:4d:0f:5b:20:0f:b6:
a3:19:5a:72:31:e5:3e:30:9d:f6:83:9d:bb:39:8c:
9e:a2:fb:d6:7a:72:11:a2:21:bf:b0:69:33:1e:53:
cd:d7:40:8d:cb:96:5f:06:f7:28:57:4f:0a:cd:2f:
fa:3f:53:9e:cd:b7:db:b1:22:40:a5:cb:32:ee:18:
0c:b8:d1:b8:0e:87:df:25:d6:17:a0:cf:bf:1a:d9:
9e:a8:43:d8:6b:f0:62:43:75:7e:da:73:74:96:b3:
7b:17:37:3c:1e:23:88:18:90:cb:fe:57:6e:31:3c:
58:80:13:a8:17:e8:7f:7e:2c:e0:cc:38:e3:0f:af:
16:bc:33:4b:e9:0b:71:7c:8b:6a:5f:e1:33:b7:a0:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:D6:89:95:32:B1:84:0E:42:FF:A8:8E:96:75:9E:43:2C:68:01
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b9:78:b7:cd:69:11:61:76:67:c9:1e:47:09:e7:1b:63:29:
e8:42:45:1c:c2:d0:66:f2:af:a5:78:83:01:31:61:05:5f:c4:
b1:2c:a8:53:1b:c1:0e:70:2d:d0:49:31:03:5c:a0:be:9e:87:
56:08:a9:68:ed:36:3b:e7:34:58:de:09:24:6b:57:3a:c7:4d:
85:4f:f0:c2:ce:8d:66:de:6e:57:66:96:24:3b:8f:af:39:76:
13:ec:9a:a2:02:42:40:9d:f7:63:9b:f7:70:20:f1:ae:7d:36:
d4:0a:f6:ff:fb:9e:aa:94:55:71:e3:76:da:3f:a4:8d:da:ae:
c4:61:7c:76:b2:45:53:b9:46:34:8e:15:b0:f7:46:bb:98:dc:
0d:04:27:e6:e6:4c:48:76:25:33:fd:4e:77:b1:19:8a:b2:4b:
44:9e:27:31:ba:e3:f9:d4:53:77:9b:c3:35:8d:0e:f3:d2:39:
38:c8:88:9f:64:15:89:7a:6a:18:f1:42:53:77:bf:cb:9e:35:
ed:ad:f7:fb:a8:a7:c9:9b:b4:d2:d1:dc:d1:88:e0:fc:e8:a7:
ae:4c:c9:43:0a:0f:c3:44:8c:f9:4f:e1:4b:29:46:41:31:e2:
0b:ca:36:fb:ca:67:73:06:15:8f:5d:d0:ca:0d:df:5c:51:f2:
40:6d:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:24 2024 by rpki-client on console-fra.rpki-client.org