Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: QZDXvyfHlhSvw0+n3YT1MMQcHlGllOqur3eRmA1/3xc=
Subject key identifier: 02:82:49:6A:D0:E1:2E:CB:42:1B:83:C7:50:F3:28:D7:81:ED:41:91
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 018FC3280B49D0D36B326274ABA4D80B6032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1192
Signing time: Wed 29 May 2024 07:02:12 +0000
Manifest this update: Wed 29 May 2024 07:02:12 +0000
Manifest next update: Thu 30 May 2024 07:02:12 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: 7tl04CTOssIaUkckXNf5G86aqU9Za2TBYXOwFoSY1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:28:0b:49:d0:d3:6b:32:62:74:ab:a4:d8:0b:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: May 29 07:02:12 2024 GMT
Not After : May 30 07:02:12 2024 GMT
Subject: CN=0282496ad0e12ecb421b83c750f328d781ed4191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:40:34:6f:96:9b:22:32:5b:c3:5f:fc:9d:
0b:52:f2:41:90:72:5b:67:b2:9e:b0:c2:2a:52:99:
8f:d9:1f:8b:e2:2c:de:da:5b:29:c4:40:0a:3f:bb:
cb:d6:ea:55:c3:13:22:5f:7b:80:d2:2c:55:2a:27:
a9:22:b6:31:ce:0b:88:ec:61:13:dc:35:f7:1e:99:
04:e7:73:b8:18:c6:0f:01:86:e5:98:45:97:0d:eb:
05:f0:6a:59:5a:01:e1:fc:60:74:e8:f2:d7:9c:f6:
38:bd:5a:77:47:2c:68:81:a7:f9:90:50:0c:aa:a9:
cf:66:40:c1:96:89:ed:e0:40:6e:e6:ce:51:4d:4f:
f4:4d:7f:3b:d9:59:0a:9d:5c:23:ad:56:d5:9d:47:
b2:5c:be:86:a5:e8:2b:0f:79:a5:6e:92:78:49:e0:
42:3b:f0:87:3e:7b:65:9c:06:35:bc:48:b5:94:ef:
c7:b3:d2:13:82:78:b5:d9:a6:13:ae:17:9c:fc:10:
9d:d7:a2:76:5b:b0:7d:53:3d:87:40:2b:a3:e2:05:
96:9a:67:94:f9:d9:13:40:5a:26:7f:50:e7:2a:cc:
7e:0b:3b:21:6f:59:c5:c5:5d:23:61:d1:53:24:b5:
c3:ab:f1:d6:dc:4c:af:dd:ce:06:d6:4e:18:4d:cd:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:49:6A:D0:E1:2E:CB:42:1B:83:C7:50:F3:28:D7:81:ED:41:91
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:2c:f8:28:ac:fd:94:66:25:a6:cc:5d:66:0a:f3:c6:33:
34:98:c3:93:32:22:23:8d:25:66:0a:b2:82:34:79:12:8c:09:
d5:aa:2e:f5:fc:ca:c2:31:34:fe:d7:f9:57:68:27:81:a6:dc:
64:9d:a4:c5:7c:9d:bd:af:59:c7:25:fa:b2:97:7b:d1:78:70:
b5:15:85:bb:97:8e:77:2c:e3:b1:50:5e:98:e5:3e:0e:d1:98:
08:a6:48:a6:89:5c:81:9a:2a:13:5a:85:44:92:c2:45:8f:64:
93:b1:9a:ff:42:3b:90:e1:13:f2:31:89:f9:d3:fb:53:04:ec:
bd:62:74:6a:14:59:95:7c:8e:8c:c0:58:91:18:bb:2a:45:77:
42:67:90:61:39:2d:25:26:a8:69:3a:21:44:eb:48:f8:63:44:
29:79:92:ed:00:06:78:00:39:6a:01:15:06:ff:bf:8b:60:ae:
8c:d4:a6:3c:82:ae:aa:3f:15:32:b4:2f:15:8c:4e:0c:80:2e:
8d:da:81:b1:5b:c5:52:15:c8:9d:29:88:17:a1:e0:83:e7:15:
8d:0b:37:15:1b:a0:d0:7b:c5:8a:df:82:95:06:5f:cd:b1:d3:
b7:de:4c:13:2f:d0:be:30:01:6e:8b:e4:fe:40:45:ee:e5:c9:
46:70:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:23:40 2024 by rpki-client on console-fra.rpki-client.org