Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: jBGwK+EL+GnMJYOHRbZZO5Hlsq/vz6vBmC1I6A4pIC8=
Subject key identifier: F5:A5:FC:C4:CB:72:EC:EB:00:47:EE:0F:2A:1C:1F:93:71:63:20:3B
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 018F3776FC7570331B5C5949A20CC8568C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 0DAB
Signing time: Thu 02 May 2024 04:01:35 +0000
Manifest this update: Thu 02 May 2024 04:01:35 +0000
Manifest next update: Fri 03 May 2024 04:01:35 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: VMcvRaIuuRjqu2j0SftnRVHsJF0lcyOyxiAhOiufGBE=)
2: MzAuNWF_AaRz8rX5YmQOEm3GPwM.roa (hash: onidPeK+BvXeUM9UErHDVkmfS8q42EAZWpqDSdhW19o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:76:fc:75:70:33:1b:5c:59:49:a2:0c:c8:56:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: May 2 04:01:35 2024 GMT
Not After : May 3 04:01:35 2024 GMT
Subject: CN=f5a5fcc4cb72eceb0047ee0f2a1c1f937163203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:cf:45:92:f4:6a:72:8d:10:ea:5e:9f:2e:
50:24:f7:44:5b:cb:a5:3d:14:ce:21:67:38:b0:3e:
1f:40:0f:b9:c3:ce:c3:7b:c2:37:60:38:e5:7f:98:
f6:52:68:fd:b8:01:0c:fd:54:61:96:cb:af:b9:8d:
64:9f:7d:f2:67:bd:e6:c0:c8:63:04:ff:7e:ca:fa:
6b:76:ba:c9:2c:76:21:af:f0:d6:65:80:2d:73:c1:
60:8d:c4:89:f4:a8:6a:06:4e:70:13:2d:32:60:84:
b7:13:6d:dd:55:c2:a7:22:04:f8:7d:41:fd:86:d3:
9b:2e:77:b5:17:d5:47:ce:c2:fd:da:f2:cf:ad:7b:
84:62:72:69:d5:c0:d7:f8:68:8c:75:ed:de:23:d4:
29:99:0f:71:e0:44:f6:c9:ff:8f:4a:94:74:e8:8b:
f2:10:9b:39:1e:71:f4:0d:36:a5:2a:da:68:b3:11:
c3:1a:1f:be:ee:15:51:c0:c6:0a:75:6c:a7:37:fd:
ff:55:28:a4:3a:09:5f:47:5b:93:fb:61:27:36:de:
a6:c9:77:ce:08:5e:e5:98:1b:8d:4a:e3:1f:3f:ad:
43:ad:84:5f:02:6a:c1:e4:70:06:72:aa:97:69:a3:
d2:72:48:05:f4:8b:0b:83:5b:d9:9a:11:8f:4c:5f:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:FC:C4:CB:72:EC:EB:00:47:EE:0F:2A:1C:1F:93:71:63:20:3B
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:56:a2:00:34:84:ea:a6:fa:9b:91:c3:12:c6:d6:18:12:
32:05:c8:3c:8e:96:37:32:fe:55:09:ee:e5:b2:55:be:af:51:
dd:e4:0b:88:da:79:55:bd:2f:ce:84:47:24:47:af:ac:70:19:
95:1e:63:a8:52:7d:cf:3d:65:ab:ea:db:7b:0b:0c:ad:4a:fe:
52:c4:92:d6:8b:9c:f6:19:37:fd:93:6c:0f:a7:b0:64:bf:20:
f4:e4:77:e2:ec:1b:37:eb:38:71:a3:c3:d4:93:91:ae:3e:83:
23:b3:22:d8:2c:43:d9:a1:42:46:2b:9f:0f:4a:d4:98:1e:a1:
2e:3d:7f:79:9a:ec:c0:63:2c:52:08:02:39:3c:b5:da:2e:41:
fe:b9:d8:7b:d5:3d:c7:d7:22:2d:93:16:7f:04:9f:1e:c3:cc:
31:57:57:3b:83:d2:c3:57:e4:2f:1b:2a:42:f0:00:63:77:16:
d0:d8:c2:73:93:1e:2f:43:3b:ca:e5:c4:09:da:8b:6e:a4:38:
a4:ae:91:a2:ae:08:d2:12:3a:c2:41:18:e5:c4:40:84:30:48:
6b:f1:ba:71:a3:a9:bf:f6:8a:77:75:6d:c8:7f:8d:27:1a:5a:
f1:5a:3e:4e:89:a9:74:34:a3:4f:38:01:85:04:1b:14:21:3d:
d7:65:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:28:32 2024 by rpki-client on console-fra.rpki-client.org