Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: LvRnARpIA3KaRBqLZrwT382utN7CWQ5dE9eIf+zAr7s=
Subject key identifier: D0:EA:82:F4:18:61:E7:F4:E7:C0:82:7E:F3:1A:4E:7D:9F:AA:82:2E
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 018F362D48C3C8ED109681127099B2635C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 114F
Signing time: Wed 01 May 2024 22:01:28 +0000
Manifest this update: Wed 01 May 2024 22:01:28 +0000
Manifest next update: Thu 02 May 2024 22:01:28 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: Uh1AZxsERRbsQMU6lj7++4GM6fXasj2ZCiqYyMTk++c=)
2: UPOSqSZP-jXijJtBDvLlqsoaF54.roa (hash: EZH/KhvZol1jGlejQB3ga10+eCKY8xwE3iHctH5zuRc=)
3: fBIKhGuDs2L4EbfNdPCgcHXUXww.roa (hash: E1Lg4+WA7U1e0033zKsPtjQLujuHu6WKSG7Jgjhfuk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2d:48:c3:c8:ed:10:96:81:12:70:99:b2:63:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: May 1 22:01:28 2024 GMT
Not After : May 2 22:01:28 2024 GMT
Subject: CN=d0ea82f41861e7f4e7c0827ef31a4e7d9faa822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:36:fd:aa:88:7c:2c:ff:5e:f5:96:17:03:
d6:5c:43:64:7e:1d:77:7a:b2:61:65:a0:ca:25:00:
4d:1c:61:ba:76:e9:41:cd:49:aa:18:c2:2e:90:1e:
6a:36:18:d1:05:d8:38:08:c3:d6:2c:a5:e2:04:56:
f6:56:39:18:20:3f:a4:12:54:cc:a0:20:ba:c2:06:
41:a9:90:b2:29:0d:5f:d5:c7:f7:35:ad:4d:4a:09:
66:ad:40:62:89:52:45:60:a7:70:5e:72:e6:19:fd:
94:d2:be:3a:19:e4:af:ef:79:9c:14:75:36:2b:f0:
1d:cd:7a:7f:d9:6f:4f:11:1d:b8:aa:12:b4:d3:a8:
67:34:09:aa:e7:cb:a2:ce:84:27:4a:6a:26:98:8a:
a1:0f:13:8b:52:d3:bc:35:12:09:3a:c3:da:bd:9b:
32:f3:6e:da:59:c4:8c:4c:38:6c:e9:34:63:66:78:
72:2b:1d:03:cf:0e:ec:66:ff:a4:6f:31:45:35:8c:
ac:7f:9d:27:20:35:d7:a5:28:34:58:45:09:07:55:
8b:32:d9:c2:de:43:58:a2:ae:ff:12:80:83:1c:a3:
a4:59:d2:d5:a0:4d:1f:66:4f:32:2b:89:3c:7a:bc:
e1:c7:7d:8b:be:06:c8:46:f8:35:3d:9e:ee:98:10:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:82:F4:18:61:E7:F4:E7:C0:82:7E:F3:1A:4E:7D:9F:AA:82:2E
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:d6:47:c7:a9:c1:6e:5f:96:32:78:da:8d:1b:21:b2:52:
16:77:30:9a:95:b8:c4:c1:d0:e1:a1:ff:80:8d:d1:3a:f2:08:
e1:18:0b:97:e2:e0:f1:95:4a:cd:3d:be:0b:62:05:5c:89:f1:
c7:3a:b5:0e:40:08:1d:58:fb:46:9b:ec:22:37:34:ee:93:96:
7b:9a:d6:f7:d5:cb:0c:32:0a:f3:d1:75:8f:7e:c7:ce:0e:72:
7f:66:a5:23:51:be:51:7d:46:83:3e:92:e8:32:30:12:7b:92:
0d:01:0c:fe:df:44:d4:df:c3:34:ce:17:38:6f:01:00:e9:6b:
04:36:5a:8b:54:2c:df:29:29:27:ba:13:d5:aa:dd:9f:1c:f7:
0f:c3:14:f0:93:83:ef:5d:a4:d6:79:6a:e0:2a:72:8f:ec:32:
91:d3:d5:dd:2b:4f:a0:0d:7e:77:8a:d6:fe:62:80:06:fa:14:
83:cb:b7:ac:50:be:2c:3b:ac:6b:79:61:53:58:86:54:c3:60:
c8:d8:88:3c:2d:37:6c:a6:6c:01:f5:fe:cc:38:7d:cb:d6:56:
95:e2:40:8c:84:30:63:29:2c:2a:c2:47:ea:e1:6b:ea:02:87:
c3:5d:bc:b3:5a:8c:67:d0:e5:b3:8d:35:bf:5d:38:7a:d4:02:
ca:28:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:07:02 2024 by rpki-client on console-ams.rpki-client.org