Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: UM/dSulATLTE+WF+AiGdsDdf/qCQ8gxui0NHkG3rZzg=
Subject key identifier: C3:FA:8C:DE:63:DD:B3:DF:D7:37:A7:AF:C9:44:8D:0C:CE:48:5C:CB
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 018F87B6D27837D711A6854D0AF2975951D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 042D
Signing time: Fri 17 May 2024 18:00:56 +0000
Manifest this update: Fri 17 May 2024 18:00:56 +0000
Manifest next update: Sat 18 May 2024 18:00:56 +0000
Files and hashes: 1: 2TQu2B1KDUZ7LuniDqd61gYbvB0.roa (hash: n2/n0KHxp8aCzUSC/R3/bUX9g8+zq4rI71O20/2F0qU=)
2: DkppBJei0x7Bpz97LxMziXp5V7I.roa (hash: 2dGUn0Q32mE9/p854AcYCNGQDHrS+oKmMIu0esSvplU=)
3: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: MDVd+3NhgpsDNZp8JZkM6ONCE4QVGFeCyuDXxgjDUcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:d2:78:37:d7:11:a6:85:4d:0a:f2:97:59:51:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: May 17 18:00:56 2024 GMT
Not After : May 18 18:00:56 2024 GMT
Subject: CN=c3fa8cde63ddb3dfd737a7afc9448d0cce485ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:7a:43:a4:e6:66:5d:e5:3c:9a:c5:43:01:
72:3c:35:87:d7:a4:5b:50:1d:4f:28:4a:79:7e:16:
67:4f:1c:89:4e:dd:9c:7d:31:48:1f:18:5c:a1:f5:
66:0f:64:f4:ad:27:dd:70:e9:aa:2e:19:2f:01:9c:
cc:62:72:21:a1:f6:9c:5f:f8:ef:9c:b1:c3:d9:fc:
f4:17:56:bf:b9:75:e2:13:12:41:37:72:4c:e3:a9:
4d:6b:15:97:5e:92:06:f2:b5:77:42:6a:dd:1a:2c:
d8:73:a8:4b:01:d7:84:5b:01:bd:c0:0b:61:2b:dc:
31:12:67:0c:80:3b:af:fc:a2:1a:b4:35:44:22:7a:
39:ca:d3:f2:71:0d:21:c5:42:c6:0f:d7:ac:12:1d:
70:b0:08:04:c0:1a:0c:af:c9:e6:7c:31:cc:30:62:
2a:ae:8f:8d:dd:b2:00:09:fb:6b:ab:a3:cd:56:90:
11:ba:a0:c1:fe:62:e9:88:7f:03:c7:a4:5b:70:06:
df:da:ed:0a:c2:2a:ec:40:91:98:eb:07:4e:e3:44:
ee:15:8e:89:f4:01:a2:ff:8c:f8:74:e4:de:eb:6e:
01:14:43:50:38:2d:ba:b0:12:89:88:c7:5d:74:f9:
19:a0:b9:14:f5:43:87:d9:4d:f3:9c:a6:85:38:ab:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FA:8C:DE:63:DD:B3:DF:D7:37:A7:AF:C9:44:8D:0C:CE:48:5C:CB
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:46:1c:03:07:2a:2c:75:9e:6d:0d:ad:40:6f:df:ee:ef:59:
69:fc:3d:76:08:9c:b1:61:1f:65:5c:66:ed:1d:e3:78:74:3b:
a8:fe:15:ef:73:a6:8c:a8:e7:12:b1:1a:00:4f:cb:ad:f5:a1:
4b:08:a5:c7:78:0c:0e:02:d0:fd:92:47:3c:26:21:9f:e2:46:
e2:a6:92:1e:6a:5f:a7:cf:e9:31:8e:30:3a:2f:18:3a:e7:22:
db:f4:53:8f:46:33:b6:92:87:c6:34:8d:7e:6c:6e:d8:34:2c:
98:46:58:9b:f2:d4:4c:c7:77:53:0c:50:72:0b:bf:1e:63:3f:
59:64:64:11:66:e5:6b:7f:4d:2c:63:90:84:c1:27:64:73:fa:
22:b2:37:05:ea:ba:65:5c:83:7d:3f:d9:36:52:30:a8:ed:c4:
55:fe:45:2b:72:e0:dc:29:43:59:5e:cd:9b:f7:01:68:23:42:
e7:86:1c:cc:1a:8d:37:96:7f:ec:91:6c:d0:f3:14:a2:34:e6:
cc:07:7e:46:24:79:6f:d2:a5:3c:e1:89:e9:87:e0:27:e7:e0:
00:0f:09:61:1b:e5:2a:6b:51:b4:44:13:89:ce:9b:9a:4d:d9:
d9:ca:11:dd:c2:b1:02:78:91:b1:64:cc:ab:1d:32:58:c1:5b:
bc:bd:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:17 2024 by rpki-client on console-fra.rpki-client.org