Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier: KuUJ28tY4RUIUNqfa2BTLCCNdaOMYFlGTIGXex+w/cs=
Subject key identifier: 51:27:1D:16:70:C3:F2:FF:E1:99:EF:C3:E0:BE:E9:7E:BF:0D:6F:42
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 018F37770C1CB44CA49A2F304F5B7D2CC21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number: 114A
Signing time: Thu 02 May 2024 04:01:39 +0000
Manifest this update: Thu 02 May 2024 04:01:39 +0000
Manifest next update: Fri 03 May 2024 04:01:39 +0000
Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: tctocQCqZSKoUAVZZn92gGFU0HiqiUmKDRrNdgsZiEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:77:0c:1c:b4:4c:a4:9a:2f:30:4f:5b:7d:2c:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: May 2 04:01:39 2024 GMT
Not After : May 3 04:01:39 2024 GMT
Subject: CN=51271d1670c3f2ffe199efc3e0bee97ebf0d6f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:b2:b5:de:dd:b7:49:1d:91:c9:1c:4e:4b:
68:ea:a9:c1:67:9e:52:88:58:2d:5d:9c:2c:49:80:
ad:fe:06:5d:24:fc:42:d0:03:d4:8f:76:ea:91:df:
01:55:72:cc:af:9d:db:a1:4d:d5:26:48:43:ab:6f:
f0:eb:5a:b2:9c:fa:1c:71:f3:a6:0b:3c:88:9a:9f:
70:11:7a:35:51:e4:ce:14:96:0c:73:8c:47:59:d0:
e9:b7:57:89:99:ba:ed:31:c5:a1:05:9d:cb:d6:76:
70:8b:d9:08:31:f0:d0:a5:c8:66:f5:62:b9:e4:d9:
80:7a:5b:3e:37:73:5d:47:9f:fc:06:c9:9c:2a:77:
86:19:ec:2d:bc:fd:0e:31:d1:41:49:31:1c:5d:f9:
a5:6a:20:f9:ac:af:bc:8b:f0:af:84:6c:ba:8b:f4:
7b:09:ae:a4:92:26:2f:2a:e5:72:73:18:71:cb:6c:
a3:18:d7:c3:ce:29:57:5d:12:3d:ab:9d:32:a8:d8:
0d:4e:0d:b9:c5:34:c9:c1:ac:20:f7:2b:9c:13:4d:
09:ef:c1:c0:77:4e:98:71:eb:37:a8:e0:24:05:b0:
ac:a3:43:99:1c:23:77:34:ee:a4:88:d5:b3:8d:a2:
98:ca:6b:13:a5:fa:74:c3:9c:3e:4c:7c:cf:91:71:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:1D:16:70:C3:F2:FF:E1:99:EF:C3:E0:BE:E9:7E:BF:0D:6F:42
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f9:c0:aa:de:cb:9a:64:ec:2b:dd:9a:b1:37:b3:1b:75:b2:
d2:21:15:3e:7f:46:92:66:c8:fc:8a:a6:92:8a:c9:79:a0:61:
27:aa:00:34:ed:52:be:93:06:5c:41:98:53:d1:19:31:e8:1b:
18:df:3f:4a:a9:da:a7:dd:81:e3:91:46:60:5d:3f:bf:c6:77:
7c:31:60:7f:15:8c:15:80:d6:e5:3f:ca:f7:26:5e:c9:a3:7f:
55:47:22:03:e3:4a:0e:94:1f:71:70:28:ef:4c:6c:1b:87:86:
1e:1c:13:c5:61:c3:aa:71:aa:17:de:ea:6a:12:4c:25:94:9e:
5d:65:42:ca:ec:0d:60:83:a8:37:f2:28:4d:bb:ad:77:fe:e9:
87:51:4a:a6:a7:2d:27:e3:97:6c:e3:28:0c:6d:53:c5:17:36:
40:c0:2e:1d:94:2f:72:b5:fa:19:cd:11:7d:f3:12:22:6d:bc:
b1:17:4c:d4:78:35:3e:19:62:6e:a8:01:ac:39:e9:2e:b8:68:
2e:25:04:23:50:ab:a0:d8:ec:d6:f9:01:9f:f4:25:e9:25:4a:
6a:98:cd:11:83:24:14:f1:e3:89:e5:2c:10:25:3e:89:3f:4f:
21:f0:44:46:d8:ae:ae:cd:f3:f3:24:33:13:44:bd:83:f7:34:
7a:34:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:30:08 2024 by rpki-client on console-fra.rpki-client.org