Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: x1QbC/lMSmgrZepIpb6rXmO9t7ytpmzimCpOC5onilI=
Subject key identifier: 01:AA:2C:4A:C4:62:3D:95:CF:62:38:67:DC:36:4D:4F:9E:A3:A9:64
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 018F8824605A6F93C12B459E769C5F20E49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 0AF4
Signing time: Fri 17 May 2024 20:00:36 +0000
Manifest this update: Fri 17 May 2024 20:00:36 +0000
Manifest next update: Sat 18 May 2024 20:00:36 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: iebksUSCKl+OgWoepzlrqkpDT+S2Niwk7Cp4M0r4SVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:60:5a:6f:93:c1:2b:45:9e:76:9c:5f:20:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: May 17 20:00:36 2024 GMT
Not After : May 18 20:00:36 2024 GMT
Subject: CN=01aa2c4ac4623d95cf623867dc364d4f9ea3a964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:82:50:5e:d4:44:9f:b7:56:7c:12:e0:fe:
82:dc:00:1f:68:e4:92:72:f6:1e:8c:43:a4:ed:d4:
8d:92:46:92:4e:7e:42:5e:2b:47:55:50:34:ad:90:
06:f9:b0:da:ae:04:34:09:8e:7e:26:48:73:d3:f1:
c1:27:00:71:99:e2:d4:af:b9:2e:7b:a6:d2:87:7b:
af:87:07:c6:02:6e:28:c8:4a:17:08:58:5b:ef:e7:
b8:ae:f0:08:11:a4:8c:5a:ec:c7:ab:86:bc:8c:35:
70:3e:1b:69:b4:a6:9e:ca:7e:37:63:bc:92:1b:0e:
7b:24:e8:86:65:87:3f:9f:d8:11:3b:09:66:2d:2d:
bc:5b:b4:d1:ff:12:3f:6c:e1:1c:99:36:b0:a2:bc:
b6:6e:28:f9:48:bb:27:0a:79:f0:ab:ec:45:46:b2:
f0:31:67:50:b4:dc:a1:d4:52:c5:45:34:d0:f7:f9:
0d:5f:eb:fe:16:68:77:9e:80:bf:08:3c:ea:e5:3a:
12:25:b3:80:19:b2:3e:ea:e8:d5:2d:f0:26:aa:08:
40:82:8d:ab:68:0f:cb:dd:fc:30:9f:00:ad:0b:f7:
62:02:7e:65:58:96:42:c9:7d:e2:70:2a:2f:79:87:
12:cc:05:01:77:21:a1:46:4c:1c:5d:29:f5:8a:98:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:2C:4A:C4:62:3D:95:CF:62:38:67:DC:36:4D:4F:9E:A3:A9:64
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:7d:da:ca:04:92:e5:18:8e:37:fc:01:ee:91:5c:ba:45:d3:
4e:fa:d7:bf:b8:2a:f5:88:d2:57:e5:f2:7c:85:84:89:07:5c:
04:18:0d:9d:54:41:5a:be:0f:d1:83:ed:3f:47:b8:a1:ed:a7:
a2:2c:00:e7:3b:16:ec:88:3e:93:2c:91:d8:29:61:e5:3a:ae:
04:8c:55:28:d5:d7:c4:be:32:71:7d:6c:38:0d:a4:30:db:ce:
a8:40:52:df:43:0e:09:30:a7:37:dc:fc:50:cf:eb:b5:09:af:
8b:ff:ea:8c:41:9e:48:17:14:c5:21:1e:81:7b:57:a1:3b:b8:
e1:1a:9b:9f:2d:be:dd:e2:ff:8f:95:b6:7f:93:dc:00:9e:ce:
71:fe:93:84:99:aa:a1:70:3e:78:4e:84:d7:54:64:33:42:b5:
d3:a5:b6:56:19:a0:b9:47:ad:b8:a1:fb:09:a9:2d:00:36:9f:
51:63:da:30:ef:ab:f8:d9:85:b0:d6:c7:fb:48:c9:6b:62:76:
59:3c:78:66:6c:8d:21:cb:ee:6b:4b:5f:dd:ef:9e:8f:c0:9f:
4c:93:f0:30:c4:b5:02:6e:2a:5c:1c:9f:56:7b:e4:91:b1:c2:
e3:cd:0e:7c:0e:cd:62:ae:63:f7:2c:c0:87:2c:3c:af:1a:6c:
6f:c6:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:00 2024 by rpki-client on console-ams.rpki-client.org