Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: kRaQ429ycTpSAvScSrtIs+AazL3WOOHVSww381JsgsU=
Subject key identifier: A2:9D:41:2D:1B:14:55:13:94:5A:BB:4E:B4:64:77:0F:B4:3A:47:2D
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 018F7BB345E2BFB34C5B9A7CE61673A6635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 04B5
Signing time: Wed 15 May 2024 10:01:37 +0000
Manifest this update: Wed 15 May 2024 10:01:37 +0000
Manifest next update: Thu 16 May 2024 10:01:37 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: Dp0webeOZxtb1boOnlVWmEp/mNMpxBQ32hE4cKXWSTQ=)
2: K-BOLRLXc3oanZNjqjbC-_eHxcA.roa (hash: lzDvAtQgJsi8f1NIK0t0NHYJNBa+Jio6zPqCt+rkgTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:b3:45:e2:bf:b3:4c:5b:9a:7c:e6:16:73:a6:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: May 15 10:01:37 2024 GMT
Not After : May 16 10:01:37 2024 GMT
Subject: CN=a29d412d1b145513945abb4eb464770fb43a472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:96:54:9c:df:79:49:55:3b:6c:6b:33:53:
7c:cb:6b:0a:ab:e9:d0:75:7f:1e:c8:4f:dc:d2:09:
f4:1f:1d:73:ac:6c:5b:e5:3f:7d:f5:24:1e:50:50:
a1:dd:4d:59:5c:49:5c:0e:b5:c8:54:3f:6f:c8:6b:
6a:6a:06:af:73:fd:57:18:4c:de:02:80:81:51:88:
42:bb:2b:fd:65:2a:66:6d:79:20:75:6f:ca:d2:bc:
6b:af:9e:b0:b8:bc:ed:e8:ad:fa:b4:d5:4c:51:c8:
55:86:09:29:61:6a:c7:04:aa:e0:36:01:f9:52:97:
da:9f:28:a3:93:c3:ac:87:cf:7b:8c:88:d5:ab:69:
f6:1c:b2:9a:17:41:af:7e:03:de:2f:45:5b:8a:1e:
9c:07:9d:25:9c:4c:f5:f5:36:67:6e:32:d7:3c:6f:
53:c7:b5:4f:a7:4d:f5:d1:8b:1a:49:bb:b9:86:3c:
fa:fc:5a:32:60:25:f3:48:89:8a:19:54:b3:f4:3e:
81:b1:38:fa:f2:7e:c4:c8:cf:e6:29:ca:ec:d6:e7:
96:d5:54:23:a0:17:e8:ee:47:de:70:67:22:79:ba:
73:2b:cd:c0:f8:8e:6c:17:17:72:b1:ec:df:04:48:
c0:c3:3f:2a:e4:6d:50:57:4f:8b:e6:e5:0f:58:0c:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9D:41:2D:1B:14:55:13:94:5A:BB:4E:B4:64:77:0F:B4:3A:47:2D
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:66:4c:6c:32:f0:7d:e2:66:33:eb:69:63:b6:dc:8a:5c:bd:
58:4d:f2:50:19:3b:82:71:04:9f:0c:95:52:57:40:ba:9b:da:
aa:8a:84:3a:a3:6b:b2:ca:df:97:f3:d1:87:62:9d:15:47:c8:
18:a7:f8:2a:44:90:98:8c:49:70:a6:24:29:8c:07:2c:63:34:
28:55:be:40:68:2a:b5:a0:6e:da:67:fe:57:56:d7:ad:be:ce:
b6:76:b7:63:13:26:c5:a8:07:85:27:2f:92:64:15:d5:2f:e7:
48:b5:31:6f:8a:0b:ec:41:c9:94:06:bb:d0:46:b5:f3:45:a4:
4c:f2:5e:c1:69:d0:35:1c:26:e3:16:b3:be:32:4e:2b:b5:56:
2b:79:e0:34:2a:c3:36:b3:96:b5:c5:e8:0e:4f:f9:f1:af:4b:
f9:c7:34:97:95:04:dd:60:a7:1a:3b:c9:df:d8:59:e7:14:52:
6d:ed:32:46:38:4e:c9:c3:a2:69:68:59:86:a3:b8:3c:dc:88:
85:ad:4c:c8:5c:b3:d7:4f:e4:28:cb:e3:56:82:2c:c0:4e:44:
82:0b:1e:da:22:72:7f:a1:14:fd:00:04:9b:c5:14:7f:92:61:
3f:22:06:fa:3e:14:8e:9a:13:6a:36:c0:00:a9:33:96:2e:6e:
ea:fd:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:32:18 2024 by rpki-client on console-ams.rpki-client.org