Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: 7WF5+lfoblfPaQta4nCD2v0DlWfp4NpDnofkP9ouuWY=
Subject key identifier: 37:F5:49:97:45:13:2E:53:AA:A4:EB:A3:BB:E1:3B:B5:E8:EB:81:67
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 018F89379F1F6C959650B1EB2B6D9073AD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 038E
Signing time: Sat 18 May 2024 01:01:14 +0000
Manifest this update: Sat 18 May 2024 01:01:14 +0000
Manifest next update: Sun 19 May 2024 01:01:14 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: OPnoW/7BjnklJq2yt00/ZbfrFJJwW6M3WVIPKDwxVss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:37:9f:1f:6c:95:96:50:b1:eb:2b:6d:90:73:ad:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: May 18 01:01:14 2024 GMT
Not After : May 19 01:01:14 2024 GMT
Subject: CN=37f5499745132e53aaa4eba3bbe13bb5e8eb8167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:a4:dd:84:f6:8f:20:4d:14:88:5b:9d:93:
11:45:6b:03:fa:1c:67:e2:36:fe:75:9e:58:0c:90:
55:bc:af:84:08:89:03:6a:19:48:a1:d1:d6:0e:80:
5b:77:48:d2:79:4f:d9:0b:ec:8f:c6:a7:48:00:52:
ae:0d:69:e8:0d:2e:3a:0a:0d:0b:32:a6:c3:4c:57:
b8:28:0f:e3:cd:79:aa:26:b6:49:90:2f:69:c9:03:
38:eb:da:af:d8:06:24:27:76:05:e9:38:17:94:41:
b9:ba:b6:d6:91:50:f7:ac:66:6f:f4:93:37:5c:23:
4c:b5:fc:2e:40:bb:e6:52:69:0f:39:ec:a0:65:59:
a4:b1:f6:f9:a3:1c:97:4e:40:e1:72:fe:3e:e6:61:
2c:93:76:7c:f7:6e:d9:89:21:36:e2:f0:52:68:52:
96:8c:9a:8e:07:3d:ef:5b:37:f7:b7:5b:a6:1d:76:
f9:d8:18:cf:db:ad:63:2f:63:6b:15:f0:66:7b:1f:
14:90:06:dd:21:e4:75:7f:3d:4e:f6:c3:b6:da:06:
d3:f4:5d:41:a6:f6:09:a2:b3:ab:9e:33:8f:03:c5:
83:ca:de:38:da:9f:c1:cf:40:be:61:5b:0e:8f:fc:
00:94:18:a9:38:85:7f:33:c8:bb:09:d9:c5:f7:3d:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:49:97:45:13:2E:53:AA:A4:EB:A3:BB:E1:3B:B5:E8:EB:81:67
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8c:6f:e5:f9:3a:9a:17:26:9c:f5:2a:7b:7a:6e:c1:c2:40:
8f:85:81:e9:ac:88:9e:13:77:cb:c5:16:59:39:28:00:fd:f5:
cf:22:dd:85:1b:ae:b5:a4:f7:09:9e:de:fc:ec:95:16:9c:d2:
5c:10:69:dd:f1:b7:95:25:1c:8c:51:02:69:11:a4:c9:2e:2f:
9a:12:22:73:55:03:8e:ff:1d:0e:a8:8f:6c:8e:25:4f:b9:df:
96:f9:00:b6:d3:27:f5:36:75:ef:5d:82:b5:6d:79:5c:ad:bf:
13:7f:76:65:fc:5b:90:62:a8:51:8c:54:f7:41:90:6e:3f:2b:
31:47:9b:19:a3:61:db:e7:f1:e6:ca:0d:b4:9d:82:c2:8b:bd:
60:38:60:22:2c:c0:8a:b2:0d:c4:64:36:0c:16:4c:c3:89:4e:
8c:40:3d:5d:7e:1e:b2:18:d2:59:6c:aa:7b:eb:a6:21:1e:db:
11:89:de:95:59:32:6e:b2:93:c3:4a:1e:73:1f:11:4b:7e:84:
82:9f:27:bc:27:4f:96:09:d7:ae:86:5b:5e:3e:3d:c8:94:ad:
21:73:4b:97:69:29:19:9e:10:6e:4d:4b:46:0c:84:3f:6a:a9:
e7:30:ae:08:c9:7f:e3:a2:80:67:54:02:47:d3:e4:6a:98:4f:
5b:22:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:43 2024 by rpki-client on console-ams.rpki-client.org