Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier: vt2+XqlXhU8BNtPn08KBxsSxY1zAMAIcH6liaTS4oUE=
Subject key identifier: 19:4B:D7:C7:2F:0B:D0:28:FB:BA:A0:84:DF:2C:FD:7B:2E:8D:BD:EE
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial: 018F87ED4C9D3D648F4BB317B49F00EE4A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number: 0AA6
Signing time: Fri 17 May 2024 19:00:26 +0000
Manifest this update: Fri 17 May 2024 19:00:26 +0000
Manifest next update: Sat 18 May 2024 19:00:26 +0000
Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: wqaOvgCJsKcKKmnF5jScXRVUYfa9DqnOgSnhVCNNnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:4c:9d:3d:64:8f:4b:b3:17:b4:9f:00:ee:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Validity
Not Before: May 17 19:00:26 2024 GMT
Not After : May 18 19:00:26 2024 GMT
Subject: CN=194bd7c72f0bd028fbbaa084df2cfd7b2e8dbdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:fb:af:3d:52:d5:8a:1b:72:ea:a2:ee:38:
80:9c:1e:35:b4:ce:3c:23:89:a6:aa:e4:2e:32:0a:
36:93:02:27:0d:bc:0e:75:a6:74:6c:0a:e7:7d:15:
6c:24:87:4a:12:00:4a:9e:f8:c7:37:e6:03:96:7f:
9c:24:e8:18:ed:24:6f:4d:8c:af:4b:d4:7c:70:fd:
09:74:30:7f:17:6d:7a:9d:85:ea:6e:91:f7:66:8f:
8a:87:7f:da:9b:ca:0e:a6:ed:81:74:3d:c7:72:9e:
cf:dd:84:1c:7c:7e:bc:93:5a:5e:29:61:fd:d6:33:
b9:3a:53:79:02:1b:14:f3:cd:20:0b:78:5d:f8:1d:
14:3b:52:de:40:74:2d:6a:4f:74:57:14:7b:60:6e:
1e:21:8c:27:75:82:1d:d0:90:6a:5b:c4:c0:1b:5b:
ca:79:92:23:b9:b7:28:d7:52:d7:0f:19:87:75:61:
b3:94:24:b7:fa:3b:7b:14:82:fb:7b:2d:da:9d:25:
7e:56:e8:1d:51:fd:52:f0:82:ea:92:6d:e8:61:e2:
a3:e9:e7:0f:06:7d:be:62:3b:af:c5:a9:d3:e3:36:
6b:79:8b:bb:6f:37:ec:e9:58:a9:b8:59:5e:59:fd:
87:a2:5d:69:48:71:f9:5f:fc:ad:3f:e7:21:27:8a:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:D7:C7:2F:0B:D0:28:FB:BA:A0:84:DF:2C:FD:7B:2E:8D:BD:EE
X509v3 Authority Key Identifier:
keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:06:33:be:d7:0f:91:b4:9e:d0:2b:f9:2c:37:23:28:a2:
72:7b:42:37:e3:0a:e5:84:12:77:b0:ba:d0:5e:c5:59:e7:19:
b1:69:90:c4:a8:c4:6a:dc:7f:48:c6:e9:52:56:1b:e7:07:90:
3c:d2:9a:97:07:59:49:61:69:72:b5:90:99:40:f9:d0:0e:89:
3d:8f:6e:10:63:35:62:3e:12:80:80:a0:7a:25:48:d8:0e:6a:
03:6c:a3:3f:9f:2a:ad:96:9c:a5:88:a6:a6:d2:5d:d1:0d:fe:
23:0c:fe:31:80:3e:6f:a6:ab:17:aa:73:5f:a4:35:7d:e0:a1:
d0:86:7a:66:52:64:50:6c:d1:83:1f:6e:69:ab:fb:09:e7:43:
7f:f6:80:8c:7a:8d:34:c4:82:72:7e:69:e8:c0:76:3f:23:72:
3b:fd:d9:1a:5a:68:5d:26:8c:b1:e8:5e:dd:2c:70:b9:b2:08:
14:87:3b:61:15:9f:e1:98:39:bd:ad:50:22:20:de:64:f4:b6:
f5:09:7b:02:f9:ec:d9:be:0e:fd:16:65:84:99:22:77:f9:56:
62:53:63:0d:79:5f:94:26:6e:d7:77:e6:a5:1a:77:b7:5a:0b:
6d:7c:14:27:8f:2c:c8:aa:62:43:e1:e3:9d:eb:27:91:5c:34:
77:e2:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:08 2024 by rpki-client on console-ams.rpki-client.org