Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: b1SQK3iLEP1Ju2kOTBszTGYHlDH9dA7FurvHIEvS66I=
Subject key identifier: 51:56:15:65:E4:A0:F8:F1:43:6D:67:C0:A7:B1:F6:67:03:96:8E:FA
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 018FB1C5D99699A34B00FC4BD7F594096D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 118E
Signing time: Sat 25 May 2024 22:01:24 +0000
Manifest this update: Sat 25 May 2024 22:01:24 +0000
Manifest next update: Sun 26 May 2024 22:01:24 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 9rVb3aR+nG7wMXivIOvllQf1f79aBJqqPqw0dAokQBA=)
2: 5f0oPfTfIGtDGawi3IgDQWx9M5I.roa (hash: DFnNjvc0ebYptTwzjfIIvRtWp3C4SKNIhXjGXObdzm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b1:c5:d9:96:99:a3:4b:00:fc:4b:d7:f5:94:09:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: May 25 22:01:24 2024 GMT
Not After : May 26 22:01:24 2024 GMT
Subject: CN=51561565e4a0f8f1436d67c0a7b1f66703968efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:d9:e5:e8:8d:fe:74:5a:a7:46:3a:8a:0b:
f6:68:2a:b4:7a:a2:b0:98:55:40:66:ee:39:e6:cf:
5b:e1:82:b8:19:8f:7b:63:02:30:52:49:e8:82:88:
f5:c6:31:22:b8:22:f1:5f:87:2a:e0:88:bc:60:f7:
48:16:88:b2:18:b8:af:f0:18:8d:69:65:6c:d1:1e:
4b:4e:e7:e4:03:5e:73:33:26:c9:45:eb:94:0b:88:
1d:86:99:06:32:c9:67:c8:8d:27:45:82:5f:82:c7:
3f:dd:24:06:d4:2c:44:67:63:a4:06:9b:a1:ec:31:
50:e9:51:ba:58:fa:a0:ba:25:64:9b:19:aa:59:99:
c7:c6:66:23:53:47:84:09:aa:32:ea:8d:cb:d2:7a:
9e:44:3f:74:c0:61:02:4f:e3:28:92:e2:da:0e:43:
43:9b:16:a3:d4:7e:06:15:f2:b2:bc:bd:45:60:52:
25:64:a0:d8:a2:d1:4d:60:dd:02:d1:fb:73:fc:8b:
53:7b:ec:ea:35:f8:ac:bd:05:1d:14:41:7a:e0:5e:
df:04:f8:f0:10:e9:df:8a:4a:1a:f4:57:97:57:cd:
90:1f:b9:c4:f8:95:aa:65:1a:5c:de:06:aa:b9:ad:
07:1d:b9:2b:06:7e:41:e4:33:4f:b0:81:16:af:3e:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:15:65:E4:A0:F8:F1:43:6D:67:C0:A7:B1:F6:67:03:96:8E:FA
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7e:14:4b:cb:b3:d7:e0:79:4f:6b:b1:f3:6e:db:b8:5b:b4:
34:67:a4:9b:31:1b:52:26:57:8f:c7:74:c7:da:8a:57:7d:80:
2b:78:44:b9:fe:b5:9c:71:30:d9:39:08:55:27:7f:d6:b5:11:
74:53:7f:16:25:9e:70:8d:a9:22:59:09:6c:72:2e:0f:0c:e3:
57:bd:95:31:b8:be:b5:34:d0:20:46:f1:cc:fa:09:a3:36:7e:
b5:db:4c:1b:32:fc:f8:0f:ab:a7:33:ce:2d:ae:7f:90:d7:6a:
66:92:72:11:dc:e5:3d:ee:f6:8e:5b:5b:22:d6:78:52:a4:a0:
16:ab:bb:23:3a:87:dd:f6:68:62:85:61:f9:ed:df:d2:ff:53:
df:3a:ba:d5:fa:26:5d:40:9f:72:ef:0b:f0:1c:34:28:c8:71:
df:1f:59:98:66:39:18:fd:cb:41:e1:bf:3b:e0:db:3e:99:42:
91:6c:eb:38:db:f2:18:d9:29:e1:94:78:04:85:d5:82:f5:2c:
58:e4:be:31:ea:a7:17:7b:02:f5:b7:b3:ca:d7:46:e9:ae:83:
f3:d1:16:7c:bd:a2:ec:3e:87:13:e9:b4:1e:ac:a4:28:f0:ec:
01:c6:d8:51:19:45:2c:46:aa:27:69:fd:8f:e0:d1:cd:91:c0:
74:7c:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:39:52 2024 by rpki-client on console-fra.rpki-client.org