Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: plZSRPU2/o6rYy0Z149n7R3EVUB+OxXbKslZ4GRiUCc=
Subject key identifier: D2:1A:66:2E:E4:08:95:06:63:13:1A:68:97:58:00:11:B0:F1:51:A1
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 018F22DE5A08DD60CF9FEF9084633AADD623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1143
Signing time: Sun 28 Apr 2024 04:02:28 +0000
Manifest this update: Sun 28 Apr 2024 04:02:28 +0000
Manifest next update: Mon 29 Apr 2024 04:02:28 +0000
Files and hashes: 1: 7bPKhXsGBS37j0edM7zhsP2uf5Y.roa (hash: a8JhEnBpC8dFzPGjHqRtJfMHDon2SxFOxBndl8iBZwQ=)
2: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: tadvZFGo/LxqZCymxO/VX2cmg5aIQLTiKl/QDV9zDyo=)
3: F8Blo1BoR0QEdmujZT-0DhQ9xSk.roa (hash: INcuge+1sOoqqdwbqHomou7klQ3L7q5/f4kYx8zOqGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:de:5a:08:dd:60:cf:9f:ef:90:84:63:3a:ad:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Apr 28 04:02:28 2024 GMT
Not After : Apr 29 04:02:28 2024 GMT
Subject: CN=d21a662ee408950663131a6897580011b0f151a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:bc:1f:65:9f:c9:2f:ee:46:a5:f3:7b:24:
dc:a1:8b:12:8f:e2:1e:92:08:e1:31:0b:7d:ef:ba:
81:76:94:80:e9:41:98:8a:11:f4:75:ef:fd:26:02:
b7:0b:fd:99:90:5d:c5:64:33:33:b4:e6:be:59:7f:
2b:fa:11:f6:cc:f0:50:a5:dd:8d:78:e7:76:be:ca:
d9:6f:b5:0c:39:c3:d6:84:09:7e:34:3f:f4:f7:40:
29:3e:bd:97:cd:f8:b0:0c:f3:be:87:85:37:c3:5a:
fe:1a:fc:04:6b:9d:44:1a:09:fa:84:4b:b9:95:49:
62:2a:fe:57:7e:17:16:51:d2:26:4a:1b:70:1f:e1:
eb:78:bb:e9:0f:b5:fb:88:bb:a8:9e:f4:9f:08:11:
8e:d4:39:70:31:00:8f:13:4a:49:e9:f2:68:3d:9f:
c8:b4:9a:af:ae:e4:af:b9:98:f7:60:7a:64:6b:5a:
fd:73:47:4c:a2:a5:cc:1d:ff:b3:e8:9c:cc:4b:5d:
e6:9c:57:91:1b:74:9d:be:83:57:56:6f:0a:ef:79:
69:37:59:35:dd:02:34:32:97:cd:cb:03:4f:fe:da:
88:93:ce:20:ec:bd:77:e1:da:fa:78:09:ee:1f:4c:
5f:2c:f3:4c:b1:5a:88:47:bd:89:5b:7d:d2:92:38:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:66:2E:E4:08:95:06:63:13:1A:68:97:58:00:11:B0:F1:51:A1
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d0:21:18:dc:4b:3c:f9:05:e2:d4:cb:a8:4f:07:3f:cb:5f:
75:70:81:ec:91:e3:84:08:37:88:c1:a1:64:9b:31:67:1a:12:
81:24:26:ec:b7:a5:b9:7d:97:37:bf:66:03:c2:8c:7c:31:17:
e1:07:fa:7f:4f:4d:bd:1a:e5:83:bb:fa:93:ab:a3:d6:b8:70:
7a:91:1c:57:01:33:c0:61:ee:e1:cd:fa:f2:73:05:e0:60:4b:
5f:93:1b:93:c7:66:27:a9:13:83:64:22:a9:e1:0d:20:58:57:
73:c1:ce:53:37:b9:34:2b:37:35:da:b9:2e:6e:ac:39:70:1a:
8d:fd:6c:9d:ce:1d:d0:ea:4b:51:76:55:0e:ec:7e:3d:b0:ae:
86:be:39:aa:02:e9:f8:44:b7:98:a0:49:41:f2:34:43:41:b9:
b3:b1:9d:cd:db:27:b1:70:b7:4e:89:fa:d7:17:30:06:ec:c6:
68:99:e1:26:fd:4c:fe:86:8d:23:12:ac:76:5b:45:78:e2:12:
d8:11:3e:7a:5c:3f:21:5c:82:c4:56:bc:65:7c:f0:15:7b:44:
2f:cb:39:97:0d:84:36:27:fa:8b:6c:87:23:6c:51:24:9d:aa:
1e:86:69:64:99:79:5c:80:c7:e8:55:b4:97:3e:b1:d5:32:3f:
2e:a5:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:14:18 2024 by rpki-client on console-ams.rpki-client.org