Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: ixaOTtdax1R6w6rLEVJwfyTFzr0u6tl7OWOBEJ6HRGA=
Subject key identifier: 61:B8:39:8C:27:39:67:84:72:BE:18:B2:4E:E9:08:94:9C:DB:1A:D4
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 018F4C470108C4C6843D903B41856CA0BA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0A6A
Signing time: Mon 06 May 2024 05:01:12 +0000
Manifest this update: Mon 06 May 2024 05:01:12 +0000
Manifest next update: Tue 07 May 2024 05:01:12 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: iZ/o7DCyQADfIhPYweP8VDlXqTELSznPF++vjQYqONg=)
2: JBy6s4yqXddN9TopskLthm_S0NU.roa (hash: avJtbPSTGFB9k4b1FH0m/w91Ipef0iicMgzRrptkAyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:47:01:08:c4:c6:84:3d:90:3b:41:85:6c:a0:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: May 6 05:01:12 2024 GMT
Not After : May 7 05:01:12 2024 GMT
Subject: CN=61b8398c2739678472be18b24ee908949cdb1ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:90:71:45:23:30:bd:21:7a:3f:7b:5f:19:
7f:e6:72:ab:4a:0b:02:86:c5:b4:c9:2c:e0:06:4b:
d7:12:9e:cb:a7:e0:5e:d9:4f:c8:2e:e0:81:0f:46:
f4:18:bf:d9:9b:38:24:39:a2:78:16:76:6e:94:f8:
30:9b:c5:85:09:c3:f7:3c:b0:f7:ee:c4:ea:99:a5:
c8:0b:7f:e4:8f:7d:9e:02:4e:c2:e0:61:1d:79:7e:
41:a9:de:c7:23:e8:a2:10:17:70:5a:96:66:da:1c:
0e:83:a4:b1:6e:01:77:f5:00:d8:09:c5:95:ae:6c:
96:a2:2e:4c:db:a3:88:0c:ab:38:7b:f8:28:e1:db:
18:dd:69:55:a3:b3:8d:95:f8:3b:b4:e2:04:14:11:
6c:55:6a:68:77:04:0d:c0:85:fa:34:32:f6:51:e3:
ff:8b:08:7f:b4:c2:d9:40:73:9f:10:70:9a:a7:e4:
1a:8f:1a:34:49:7b:8f:69:9c:e9:51:46:70:89:f8:
06:3b:2f:3c:51:22:3a:b2:99:81:7e:5e:a4:75:b9:
a7:73:1b:3e:2e:9f:58:db:dd:9d:38:58:9d:85:a8:
e3:ab:1c:8a:31:1e:9d:62:3d:0e:f5:41:69:f8:d3:
97:52:ff:ab:10:48:59:9f:e4:a9:ac:a1:48:aa:c6:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B8:39:8C:27:39:67:84:72:BE:18:B2:4E:E9:08:94:9C:DB:1A:D4
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:3f:73:03:f6:11:ba:1e:b7:32:a8:39:86:44:60:3e:8b:
9a:ae:a0:60:1b:12:92:2a:6d:0b:02:f9:a2:3f:45:31:0c:3a:
a1:00:0f:e6:96:1b:44:ef:70:93:83:a4:dd:6f:06:5c:b0:3a:
f5:c6:18:f5:8a:ef:ab:1c:73:66:83:6d:fd:55:0c:b6:6b:3f:
4e:6e:38:9b:0f:79:c2:ab:31:b0:7d:c0:75:9a:db:b4:44:21:
e6:82:36:62:8f:7b:69:f6:dd:03:cd:67:92:78:0c:13:12:6e:
a7:79:18:43:25:3d:bb:75:6f:ba:38:a4:d7:34:43:1c:69:3e:
84:f1:4d:9c:40:3b:e5:e6:a0:75:01:d7:ae:cd:6b:cd:95:22:
26:c9:9b:df:4b:ca:bc:b5:bb:e8:b3:f7:14:86:3c:9a:49:53:
ae:87:0e:7e:cd:79:4a:0d:0b:a3:97:bd:0e:0b:16:cc:6d:21:
41:25:8b:c8:b3:62:e3:ba:f5:78:03:eb:2a:8c:aa:ad:ea:f2:
1a:71:a4:52:9e:a0:9c:19:24:36:15:16:01:77:75:d8:48:4c:
6a:7a:3b:3f:fe:2d:a6:72:33:73:99:1f:b1:34:95:43:4a:08:
a5:a7:fe:53:a0:a9:7d:ef:c1:a6:07:04:6b:3b:6f:84:1e:2b:
29:9c:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:42:10 2024 by rpki-client on console-fra.rpki-client.org