Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: YMV92W8pKHMjlv8eJp+eoZwKftFx7TvzI6eGiyGPX/Q=
Subject key identifier: A1:16:BF:5A:29:FC:9F:3B:54:3A:E0:EA:B8:D9:DC:B1:7F:9A:0F:A7
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 018F8936EE5EDE2C73EFF0AC7786D90FD367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 024B
Signing time: Sat 18 May 2024 01:00:29 +0000
Manifest this update: Sat 18 May 2024 01:00:29 +0000
Manifest next update: Sun 19 May 2024 01:00:29 +0000
Files and hashes: 1: 19VFNSGwkOjoKkhMp6c31_3s4m4.roa (hash: 9iv2IryXVGVTamSMuPhqofLOFbWiSzxW087/Hl7gzhI=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: 6uVhU9pXv4ozscGHV3ouAa0K1ft0+8cxJaqRb/IcDLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:36:ee:5e:de:2c:73:ef:f0:ac:77:86:d9:0f:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: May 18 01:00:29 2024 GMT
Not After : May 19 01:00:29 2024 GMT
Subject: CN=a116bf5a29fc9f3b543ae0eab8d9dcb17f9a0fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:1d:cf:56:f7:a9:fa:c7:b1:80:76:fd:5f:
09:22:91:b8:e0:3c:a5:55:80:37:ab:61:20:3d:96:
93:26:56:af:4a:2f:e6:f0:47:7c:8f:0d:dd:14:12:
80:97:5e:c4:8c:49:99:58:06:2d:48:19:c1:72:0d:
ce:ab:13:5f:9d:01:14:78:c3:d3:c9:37:e2:5a:87:
74:55:25:34:70:18:39:32:81:13:31:94:12:37:03:
f9:7f:56:45:bb:2a:d0:c2:b8:bd:23:22:83:e9:d8:
cc:2f:83:47:d9:23:4d:be:07:fb:e6:fc:f4:a2:7d:
bd:d9:b2:7e:db:8b:d5:f8:c2:3a:b3:9c:8b:2a:1f:
60:fa:c2:0a:51:8a:b6:8e:24:70:06:74:81:b6:54:
00:62:7d:8c:7e:51:8f:22:cd:b7:62:46:ed:b3:02:
23:17:8a:7b:e1:c6:c8:a2:9d:2f:cd:5e:13:35:87:
b7:7f:63:b2:21:1f:20:a3:1f:c1:d3:8c:0a:7b:4e:
78:0a:d8:50:b5:71:6b:d6:91:ef:d9:2b:1d:2b:53:
44:63:cb:a4:c9:02:a2:23:2e:80:a8:25:46:e6:ce:
c1:cb:80:44:89:f2:cf:b4:9e:61:7d:b0:7d:b7:f3:
cb:48:34:3f:2a:2e:6d:6a:4b:70:66:9e:6e:51:65:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:BF:5A:29:FC:9F:3B:54:3A:E0:EA:B8:D9:DC:B1:7F:9A:0F:A7
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:45:dd:61:44:1f:b7:f7:7c:ef:f8:13:3b:bc:b7:cc:c8:
f7:85:63:78:fd:d8:60:16:43:94:72:b7:22:83:b2:4c:47:69:
7e:c2:17:0b:a2:86:64:5e:ab:b0:ce:3e:00:bd:73:64:9a:ab:
ed:4e:5e:5d:ee:1a:da:85:b8:f8:28:95:f6:ca:91:58:f0:ef:
86:16:75:9b:e6:e1:db:6f:ad:53:f0:5e:43:ff:79:5b:fe:ec:
dd:be:46:11:a5:4b:ae:26:40:75:0d:40:dc:dd:e1:8b:d5:19:
c4:86:5b:56:49:a3:9c:b8:30:ea:69:0a:dd:7e:26:af:f0:04:
19:83:7c:50:7e:26:3c:c9:9e:47:67:3f:8a:7e:1f:c3:f9:00:
b1:66:db:87:b5:35:d5:c0:b6:cf:57:b4:d1:0b:c3:46:68:8f:
f6:de:24:07:64:53:fb:f3:d2:7e:48:8e:3a:10:54:20:48:ae:
fc:d5:03:5e:41:3a:e4:95:0d:c3:3c:9a:ff:9b:00:0b:6d:df:
1d:ed:a6:f8:d5:b6:da:23:a5:ac:1a:1e:f8:be:9a:30:e5:04:
9f:65:61:9d:4d:21:4a:34:24:0e:39:99:9c:c4:0e:ca:a0:eb:
ae:c5:27:99:db:c2:b0:a5:a6:52:ca:34:22:f7:7c:42:0f:4e:
5b:84:c2:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNu5e3ixz7/Csd4bZD9NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjcxMjcwYjY5Y2VjNTA0NjA2YjEyNmM0Y2E4MzM4MTZh
ZjdkYTQwHhcNMjQwNTE4MDEwMDI5WhcNMjQwNTE5MDEwMDI5WjAzMTEwLwYDVQQD
EyhhMTE2YmY1YTI5ZmM5ZjNiNTQzYWUwZWFiOGQ5ZGNiMTdmOWEwZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPIdz1b3qfrHsYB2/V8JIpG44Dyl
VYA3q2EgPZaTJlavSi/m8Ed8jw3dFBKAl17EjEmZWAYtSBnBcg3OqxNfnQEUeMPT
yTfiWod0VSU0cBg5MoETMZQSNwP5f1ZFuyrQwri9IyKD6djML4NH2SNNvgf75vz0
on292bJ+24vV+MI6s5yLKh9g+sIKUYq2jiRwBnSBtlQAYn2MflGPIs23YkbtswIj
F4p74cbIop0vzV4TNYe3f2OyIR8gox/B04wKe054CthQtXFr1pHv2SsdK1NEY8uk
yQKiIy6AqCVG5s7By4BEifLPtJ5hfbB9t/PLSDQ/Ki5taktwZp5uUWV9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEWv1op/J87VDrg6rjZ3LF/mg+nMB8GA1UdIwQY
MBaAFMdnEnC2nOxQRgaxJsTKgzgWr32kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2Qt
OTg2ZWEyMDNmOWVjLzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2QtOTg2ZWEyMDNmOWVj
LzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwlF3WFE
H7f3fO/4Ezu8t8zI94VjeP3YYBZDlHK3IoOyTEdpfsIXC6KGZF6rsM4+AL1zZJqr
7U5eXe4a2oW4+CiV9sqRWPDvhhZ1m+bh22+tU/BeQ/95W/7s3b5GEaVLriZAdQ1A
3N3hi9UZxIZbVkmjnLgw6mkK3X4mr/AEGYN8UH4mPMmeR2c/in4fw/kAsWbbh7U1
1cC2z1e00QvDRmiP9t4kB2RT+/PSfkiOOhBUIEiu/NUDXkE65JUNwzya/5sAC23f
He2m+NW22iOlrBoe+L6aMOUEn2VhnU0hSjQkDjmZnMQOyqDrrsUnmdvCsKWmUso0
Ivd8Qg9OW4TCJg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:08:37 2024 by rpki-client on console-ams.rpki-client.org