Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: Y/pJcweEoYEWQ8x9v3lYAh5GS6Xop+F9U34YkJfPTuc=
Subject key identifier: AA:4D:3D:7A:8B:38:C3:08:3F:A6:99:25:01:C5:4C:DE:9E:57:0A:A8
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 018F874A762329C411311C74D663B20F1492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 04BE
Signing time: Fri 17 May 2024 16:02:35 +0000
Manifest this update: Fri 17 May 2024 16:02:35 +0000
Manifest next update: Sat 18 May 2024 16:02:35 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: puFLQkZlfBPJlUf14dchb9pqEgFEnZ1r0yEiIT9O0C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:76:23:29:c4:11:31:1c:74:d6:63:b2:0f:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: May 17 16:02:35 2024 GMT
Not After : May 18 16:02:35 2024 GMT
Subject: CN=aa4d3d7a8b38c3083fa6992501c54cde9e570aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:18:03:8a:7b:db:e0:f7:c0:90:25:9c:4e:
2a:b5:e9:d4:ff:fb:72:5c:c6:dc:6f:39:9c:92:6e:
eb:0f:31:76:22:b3:d9:c8:35:22:0c:b5:00:a6:c4:
28:0c:70:d1:f8:03:3c:ef:80:6c:47:60:cb:e7:93:
da:3e:78:09:73:e8:fc:e2:ef:83:48:aa:a1:69:07:
0b:37:9c:09:37:b8:a5:69:29:1f:ec:f9:0e:62:42:
27:51:56:f0:75:8f:22:a8:f1:96:22:de:5b:dd:db:
b3:65:7c:27:ee:6a:a5:91:6f:f9:02:07:a4:4f:0a:
fc:0d:2d:d6:19:62:b7:55:d1:23:2d:88:2f:b6:c0:
af:a9:dc:a1:74:4c:43:12:0d:fc:a0:7d:cc:0b:71:
70:79:54:27:e9:3b:ad:80:cf:35:f7:73:d2:52:f2:
03:f5:62:2a:9e:c6:16:fa:b8:eb:d3:a4:0a:92:cf:
0d:4b:0f:96:bb:13:6d:0f:84:8b:d4:a1:ec:de:79:
8a:37:3e:57:df:b9:22:2e:c6:b9:69:37:cc:37:a4:
6f:e1:2e:7a:51:29:0e:4d:86:f4:81:1c:b4:a3:2e:
91:9f:ba:f2:20:dd:04:39:50:44:32:7c:3f:44:43:
8d:e4:a2:16:02:e6:52:8b:8a:f1:2a:80:58:b2:40:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:3D:7A:8B:38:C3:08:3F:A6:99:25:01:C5:4C:DE:9E:57:0A:A8
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:6d:8d:93:c5:21:03:c8:3f:e5:c3:69:30:a5:8b:8e:3e:
2a:12:13:db:05:54:92:c7:31:c7:11:5d:c7:96:01:e2:12:e9:
21:f5:a3:69:12:bb:30:04:bc:21:4c:aa:41:b6:be:7b:23:81:
9d:c4:ae:e3:83:f5:00:ea:7d:cf:91:48:71:68:ad:19:40:60:
ad:d5:4b:8a:7c:7d:9e:bd:be:03:40:bb:07:ec:f8:23:23:98:
3d:aa:df:08:a2:4f:84:d2:5c:fe:52:27:05:1b:9c:10:57:bf:
a6:96:ff:f0:a1:2e:90:52:05:30:5a:7f:54:f9:33:e1:a0:78:
97:f8:9f:00:12:f4:83:91:d7:66:c1:cd:3b:8b:22:67:01:39:
0a:c2:46:6a:40:06:3f:8f:27:b1:6c:2e:69:2f:b9:0b:21:fd:
81:81:a8:ae:09:ff:19:85:cb:48:2d:da:6e:c9:93:64:e2:8f:
a7:42:9b:12:d6:9e:f4:d5:e0:e6:94:c2:d0:2d:e4:1b:a1:0c:
0b:71:4d:44:d5:de:be:86:51:c0:49:b5:12:29:26:a9:5d:15:
55:2d:21:f8:48:7e:17:4b:87:e9:ed:08:76:61:26:0d:ef:d6:
27:2f:cd:3b:3f:7d:7f:ea:b1:24:a5:9c:c6:6e:ac:ae:cb:09:
4f:22:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:22 2024 by rpki-client on console-fra.rpki-client.org