Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: K1WP39iFjF+to3ylwdKOJVGjjkT9V/J9M3ZqYd/FJi0=
Subject key identifier: 8F:72:95:92:D3:5D:BD:1A:B3:66:10:B9:B8:61:91:5C:54:F6:A9:F7
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 018F8937624D8CB4D2E330DACCBAAB1BE38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 0202
Signing time: Sat 18 May 2024 01:00:59 +0000
Manifest this update: Sat 18 May 2024 01:00:59 +0000
Manifest next update: Sun 19 May 2024 01:00:59 +0000
Files and hashes: 1: bC34NCYlyC-CgAyx7v2zqSwFQi0.roa (hash: MMEen5GIeLhwKFBEmHGiAmNDtY13yGr5YBkTlnerdQA=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: AHo3XtmCPrEKnODDNxVspleZNTOEmqBr3DRmyCLIovU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:62:4d:8c:b4:d2:e3:30:da:cc:ba:ab:1b:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: May 18 01:00:59 2024 GMT
Not After : May 19 01:00:59 2024 GMT
Subject: CN=8f729592d35dbd1ab36610b9b861915c54f6a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:ad:e6:c7:b2:00:8c:ba:e6:21:97:40:b7:
aa:e7:89:cd:c6:06:6e:16:69:aa:f0:16:09:33:52:
f3:94:9f:2a:5b:84:a6:26:ba:49:44:ae:7f:8b:44:
06:a7:4c:a7:2b:d1:f3:a6:07:56:c6:05:cc:1b:8a:
e3:d1:b3:58:fa:77:3d:94:bc:1f:bd:0c:de:9c:45:
68:a8:89:9f:a2:2f:d3:91:1c:31:ad:92:ce:9f:74:
eb:4d:7f:53:64:2e:cd:94:f4:0a:ba:17:a5:b6:98:
2e:c0:9a:d8:a7:07:b5:03:c4:82:41:59:10:58:5d:
4b:ff:df:da:24:98:54:38:75:a8:02:0c:00:18:c8:
f3:8e:3f:54:60:14:90:5b:ee:7e:ce:63:a6:cb:f2:
91:88:4b:9f:a0:af:1b:b6:43:b1:e4:10:c1:70:7f:
08:e4:6f:38:82:57:98:69:89:42:a1:54:40:a2:0d:
7d:6e:ba:b8:07:ae:24:25:95:f0:65:72:42:94:86:
1a:2e:ec:7d:54:bc:3f:ba:b9:d7:0a:8a:20:9d:52:
ef:c3:b7:16:52:71:15:84:78:16:e8:b7:fc:39:43:
0f:0d:3b:bb:23:c7:c7:f6:26:a3:95:c9:2b:7e:d0:
9b:3d:9e:92:4c:88:df:e0:85:a2:8a:c9:b6:1a:87:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:95:92:D3:5D:BD:1A:B3:66:10:B9:B8:61:91:5C:54:F6:A9:F7
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:ff:2b:9e:83:82:16:f6:49:3c:36:31:cb:3c:1f:9c:00:
80:58:8f:58:48:04:db:80:ab:4e:73:4d:f2:6a:b8:80:7e:9f:
98:29:4e:58:cd:ac:c3:6f:87:61:ca:b3:d7:6b:c0:cd:70:0a:
b8:a5:81:fd:69:02:fd:3e:1a:14:9d:a5:03:93:a7:b6:3a:3e:
11:12:c3:3b:f3:10:38:e0:e9:21:02:19:ea:d9:72:1e:19:7d:
19:78:e4:4a:b1:e7:71:5f:05:a4:95:08:c9:b1:6f:f4:0b:71:
04:48:21:ef:7c:9e:02:0b:e8:c2:b9:82:42:52:b0:16:d0:c8:
c3:69:cb:59:0d:39:2c:7b:fc:ae:12:ea:0c:93:b6:a0:dc:ea:
f7:cf:74:9f:5d:64:89:63:99:89:36:e8:7e:b1:f9:74:a6:e8:
e9:19:0a:4b:93:2d:81:ad:28:30:d3:84:87:fb:58:d4:c2:7d:
bf:bd:cf:3c:9d:2a:5f:c4:a9:02:45:77:e3:27:7d:3c:1d:67:
8b:24:3c:f0:3c:34:52:7f:38:bd:31:1c:c0:94:b6:15:cd:75:
b5:5a:c0:66:61:97:74:f6:9b:5f:1c:88:dd:e0:66:cd:2a:7b:
b5:c3:3f:0e:d2:cc:af:d7:9e:e9:dc:cd:38:cf:56:89:ab:80:
89:24:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:06:14 2024 by rpki-client on console-ams.rpki-client.org