Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: BE//GdcTvvq34EEvwpgyEg+QT0PLvrvYi8wEXkTJo/8=
Subject key identifier: DE:8E:F1:17:CF:84:A5:BA:6A:C9:E5:A0:75:AD:F9:59:08:78:77:9D
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 018F19ED68185237FE52C9F924F38D4E7663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 0DD8
Signing time: Fri 26 Apr 2024 10:22:20 +0000
Manifest this update: Fri 26 Apr 2024 10:22:20 +0000
Manifest next update: Sat 27 Apr 2024 10:22:20 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: 2smHIEUTJmvLU6Pz135Sf2mwZd2ZJoc+oHG28RrcHpw=)
2: Orchxvc0MEXRAEUfzb2-AYQNJlo.roa (hash: 5zb4XYCUHXbva4EKPaxkl1pzSV5odSRzKsryQa3HZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:ed:68:18:52:37:fe:52:c9:f9:24:f3:8d:4e:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Apr 26 10:22:20 2024 GMT
Not After : Apr 27 10:22:20 2024 GMT
Subject: CN=de8ef117cf84a5ba6ac9e5a075adf9590878779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:12:0c:6e:d3:86:72:28:92:75:70:4d:2a:
4a:7e:bb:62:97:bf:ac:6e:1c:db:53:a3:9b:ee:0b:
a9:db:07:3d:48:e5:fe:30:a9:eb:f7:da:27:20:c4:
ab:e4:d6:53:f8:0d:2b:0f:47:3b:12:1e:60:70:8b:
e4:11:cd:9d:33:4f:ca:30:e1:fa:a9:57:2e:81:de:
51:26:63:c2:3a:90:4c:cf:ac:6e:80:4e:e1:3e:84:
30:7b:5a:60:91:fc:c7:70:a0:07:98:5d:00:a9:e5:
4b:bf:36:ea:02:93:5e:99:ea:b6:df:7d:51:07:81:
cd:6c:3c:0e:42:df:75:7a:67:eb:1a:ff:50:23:db:
88:ea:c5:55:c9:8d:bf:81:b4:1c:9e:70:2a:a1:82:
a4:56:2b:1f:66:b5:12:ef:fc:3d:e2:82:db:d5:33:
84:cc:6d:f6:f3:42:f0:09:10:80:5f:aa:20:0d:5a:
75:38:9f:73:4f:5b:e2:92:50:41:ef:cb:9c:ea:f1:
0f:38:03:7a:47:97:43:e8:5c:bf:bf:a5:60:fd:24:
99:b1:54:7c:23:8a:08:64:0a:28:9e:56:6c:f9:a5:
14:32:2d:e3:c0:82:d7:dd:b4:32:4c:83:f8:e9:f1:
24:c6:d4:a8:a0:51:8c:25:c6:f4:11:d2:f4:84:6e:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:F1:17:CF:84:A5:BA:6A:C9:E5:A0:75:AD:F9:59:08:78:77:9D
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:b7:12:26:0a:fa:17:d0:0a:b9:34:54:69:8a:45:e4:7b:
06:8f:44:39:b9:aa:39:a0:fc:27:45:8e:4f:e8:86:6f:c9:44:
1f:d2:c8:f1:e1:d1:ae:22:f7:50:17:d6:60:6d:17:dc:42:d9:
78:11:b5:d1:d9:86:d1:8d:2a:14:68:de:7c:49:9e:21:13:84:
b4:5b:39:0f:ac:ad:5c:1a:06:f4:8d:1a:46:59:4b:b2:fc:e5:
67:41:fb:07:a1:3b:99:36:34:81:5a:b8:8d:69:f4:a9:8b:eb:
2b:1e:95:a8:3e:d5:4b:77:6b:aa:df:5f:51:95:45:c5:c6:39:
f8:48:52:ad:85:29:7b:7e:9d:ae:46:a4:fc:c2:7a:30:81:3a:
c3:da:b7:80:ba:b6:ba:fc:df:a9:4b:8b:40:37:e1:c7:53:05:
97:e3:21:fb:e7:19:41:b5:ff:77:d7:c5:e2:2d:53:92:f4:9a:
57:84:17:14:97:3e:23:74:23:99:ba:25:85:b0:af:70:91:08:
65:9d:9d:93:70:47:2c:26:2b:08:02:38:9a:c9:8b:5b:92:1a:
8c:ba:48:1d:21:79:9c:bd:c7:68:e5:21:0d:6a:45:97:a4:35:
b0:ab:c1:bd:97:72:f8:f4:29:0f:54:58:0d:fb:a9:03:21:8a:
cc:9c:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:24:58 2024 by rpki-client on console-ams.rpki-client.org