Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
File: ERj-69BkeThUQfbPGUVyd0r0JB8.mft (raw, json)
Hash identifier: EA1pz9DUXbuX8ZazBjv8JFjMKsy+JYBnBOFpDQd2yjw=
Subject key identifier: 7E:77:C5:3A:43:29:9B:67:A2:A6:9E:CF:F4:FC:2C:5F:2F:90:75:D8
Authority key identifier: 11:18:FE:EB:D0:64:79:38:54:41:F6:CF:19:45:72:77:4A:F4:24:1F
Certificate issuer: /CN=1118feebd06479385441f6cf194572774af4241f
Certificate serial: 018F3A0B802D37239413C7CB6C235471A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
Manifest number: 0C90
Signing time: Thu 02 May 2024 16:03:03 +0000
Manifest this update: Thu 02 May 2024 16:03:03 +0000
Manifest next update: Fri 03 May 2024 16:03:03 +0000
Files and hashes: 1: ERj-69BkeThUQfbPGUVyd0r0JB8.crl (hash: EsOBPCah69C3Gq8dq47Yqzw+/XaHuGXBja8p7HVCqlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:0b:80:2d:37:23:94:13:c7:cb:6c:23:54:71:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1118feebd06479385441f6cf194572774af4241f
Validity
Not Before: May 2 16:03:03 2024 GMT
Not After : May 3 16:03:03 2024 GMT
Subject: CN=7e77c53a43299b67a2a69ecff4fc2c5f2f9075d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:a4:ca:ac:a8:06:de:e8:26:4c:3c:f6:4c:
48:52:d1:d7:3e:22:1e:1d:28:5f:2f:e1:14:84:46:
aa:c4:80:77:e9:e1:42:60:64:9d:3e:1d:0f:4a:a1:
9a:43:85:61:c1:67:c3:ea:da:80:37:05:49:35:b6:
97:07:c8:fc:ec:17:ea:b2:ae:e5:2f:dc:ba:31:e5:
75:6a:f4:29:1a:9f:ab:b6:9d:10:14:1c:d0:f3:c6:
10:c0:2a:88:0d:41:0d:38:6a:2e:f7:cb:42:39:19:
f1:db:31:6e:5f:d8:5a:e6:d5:6a:44:77:6f:35:8a:
0f:a5:fa:66:63:c3:97:f7:b7:8a:d3:bb:d2:c1:f3:
45:2e:dc:0b:0b:5d:01:2a:7e:ee:02:cc:7d:8a:23:
4d:a5:88:b6:e9:18:5c:d2:8f:fe:e9:a2:69:c5:cc:
bd:d1:ae:b7:75:db:94:32:ac:18:c7:e8:66:78:f7:
fd:43:ca:02:af:4c:93:50:69:0e:cb:c5:c5:ee:46:
db:ed:44:05:75:e9:dd:26:ba:1b:22:11:a7:34:18:
dc:84:49:9f:f8:f6:26:08:2e:2d:3b:da:b4:3c:8e:
dc:0a:13:45:46:d2:d1:d5:22:8b:83:13:96:91:7c:
fd:0c:81:4c:71:47:80:46:a0:db:55:35:09:8a:4f:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:C5:3A:43:29:9B:67:A2:A6:9E:CF:F4:FC:2C:5F:2F:90:75:D8
X509v3 Authority Key Identifier:
keyid:11:18:FE:EB:D0:64:79:38:54:41:F6:CF:19:45:72:77:4A:F4:24:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:11:05:66:b7:3c:26:b5:67:7f:5f:5f:60:40:b1:70:0b:ca:
bc:12:26:f3:e7:db:6c:c5:b2:b5:41:7c:79:10:4c:dd:ec:bb:
07:f0:ca:22:e6:79:c3:35:47:1f:af:a4:38:6e:f9:63:28:a5:
a5:bf:4c:6d:d1:4a:7e:32:68:c4:aa:2b:44:26:6e:0f:db:41:
0a:07:de:8b:c6:eb:f4:17:be:cb:73:7c:f0:ab:ae:d7:16:26:
90:ad:25:a0:c7:34:7c:32:1b:2d:59:c3:51:49:85:4f:0f:c8:
2e:01:88:8f:1b:6e:93:62:7d:6a:81:af:67:77:0b:88:e7:60:
36:81:7e:6e:7f:7a:a7:f6:1d:86:f8:3f:f9:dc:7f:0f:18:e4:
df:0b:03:11:2d:0b:fd:f5:06:3a:b1:50:1b:b0:76:f9:f9:ea:
c2:00:95:10:b7:f2:37:fe:7b:89:18:4f:71:3f:52:d6:78:d2:
71:86:b7:d6:80:bb:93:1f:f3:25:a1:d1:ad:47:29:74:f3:68:
dc:95:ed:d5:5e:18:29:e9:99:50:e7:65:89:04:f6:78:64:78:
eb:4e:65:fb:8d:97:aa:ef:52:21:48:53:1c:25:59:b7:43:69:
a5:13:e8:79:75:e1:25:e6:0f:c0:75:e5:7c:28:9f:4f:0f:a8:
fc:bb:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:11:42 2024 by rpki-client on console-ams.rpki-client.org