Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: x7U4ARTWvBQwlEOtYS793+mPEz8I9YjRFqIVp6zZvqQ=
Subject key identifier: 06:0A:5F:7E:E7:F4:75:5C:89:B7:DC:96:E9:49:D4:AB:2A:61:E7:49
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 018F23137D767D76D48D405985C27E9F7126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0857
Signing time: Sun 28 Apr 2024 05:00:30 +0000
Manifest this update: Sun 28 Apr 2024 05:00:30 +0000
Manifest next update: Mon 29 Apr 2024 05:00:30 +0000
Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: Ab3Dlat56JxWTf/e6/6zwSisAQB8PDqY9swOD9O6PEc=)
2: dIQX4HlKBUqhhIvjx7nqLxmLR_w.roa (hash: HkBrmLYB96uniQCUoD9k6bWrk5O8Vub4goPLcN2wu2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:13:7d:76:7d:76:d4:8d:40:59:85:c2:7e:9f:71:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Apr 28 05:00:30 2024 GMT
Not After : Apr 29 05:00:30 2024 GMT
Subject: CN=060a5f7ee7f4755c89b7dc96e949d4ab2a61e749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:bc:ec:01:ca:88:af:b4:56:2c:3c:41:6d:
a8:34:42:5d:b0:81:84:83:81:69:91:8b:ae:77:3a:
9e:fa:55:ca:8a:3f:81:76:d4:2e:dd:4a:c5:e3:c4:
b1:19:c0:ff:eb:ec:c7:22:34:86:12:cf:f8:ec:1a:
c4:fe:e8:e2:e6:d3:05:3f:01:65:47:74:bc:94:d1:
66:65:05:75:ad:b7:6e:32:63:05:f5:90:24:9c:28:
1c:a6:9a:70:33:95:34:30:12:f9:5f:11:92:90:b7:
02:a8:1e:4a:09:6f:31:06:4b:fd:22:e5:a5:eb:9f:
7c:cd:9b:c5:99:07:67:6c:1d:98:98:cf:b7:a2:36:
f6:d1:62:18:c6:b4:66:d2:20:6f:48:d5:60:9c:a2:
58:2b:c5:6d:d2:25:46:aa:30:43:f6:e0:ca:56:16:
c2:96:c6:da:b0:4c:3c:c4:79:0f:63:f8:7e:c9:b9:
ea:e7:2a:0c:81:7e:1b:83:98:d4:e5:31:2c:a8:d1:
b1:6e:20:24:66:34:4d:39:e5:64:c9:da:6b:bc:25:
6e:85:2b:5a:9c:93:72:28:80:52:33:14:dc:f1:7e:
01:0a:77:c1:49:6d:89:62:b9:f7:0b:d2:09:98:d3:
54:2a:59:a3:91:1b:f1:9d:4e:b4:75:d1:99:ad:71:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:5F:7E:E7:F4:75:5C:89:B7:DC:96:E9:49:D4:AB:2A:61:E7:49
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bb:71:4d:b4:c7:4c:48:55:41:78:5c:69:ec:fa:af:0c:04:
50:55:23:67:dd:b5:c0:89:08:4e:05:97:af:4a:1d:31:5f:25:
d8:83:0a:6f:08:0b:1a:9c:09:65:b3:e9:3e:98:cd:8e:98:84:
51:ac:cc:ed:6b:50:49:1f:83:15:4d:15:fb:fb:5f:92:b7:19:
86:f2:73:f0:83:14:b7:05:f1:a0:09:09:bb:f3:b6:bf:33:5f:
0b:16:c3:f3:27:60:67:3a:18:8c:1e:ba:85:c8:11:e9:c4:bb:
77:28:2a:c6:8d:b0:8c:e0:db:10:52:8e:75:7b:af:f7:57:5e:
9a:6d:5b:52:a3:0f:3d:17:98:bf:87:9b:57:0a:7a:ac:8e:da:
5f:6e:34:fc:dd:53:6a:4d:d2:b3:00:e2:1c:2f:a9:5f:3f:fb:
9e:44:59:b7:28:6d:ee:51:a1:96:dd:a3:18:23:d4:27:ea:19:
7d:99:7d:23:67:41:90:3d:fe:6f:c4:8f:1e:52:60:e2:b2:00:
64:70:e0:25:b8:c1:e3:fd:66:85:44:71:64:e9:88:bb:81:b6:
e5:0e:71:d9:43:1c:52:d6:91:ac:83:51:62:d1:a5:9b:7e:87:
39:17:e6:40:30:8f:e9:90:89:2e:5a:66:41:31:a5:e0:c7:1c:
aa:f0:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:46:53 2024 by rpki-client on console-ams.rpki-client.org