Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: aJ611wiZWs7r7zmkEkpGPfheAub8UwUQojLj+LbkW2w=
Subject key identifier: B4:E5:5F:99:98:C5:9D:E5:64:CB:1F:85:1D:0F:13:F4:C9:37:E5:FF
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 018FD86707B0A118A5E783A3125EC7EEF947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 11A7
Signing time: Sun 02 Jun 2024 10:03:01 +0000
Manifest this update: Sun 02 Jun 2024 10:03:01 +0000
Manifest next update: Mon 03 Jun 2024 10:03:01 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: ydZzd8YqD/RA+sFkOYfwFcWxnWV8/u4ku4R54StyYiU=)
2: QcyjKAkOGVncDLsD3wMIC681f7o.roa (hash: WhrtwrSBq+ES20pQdH/1HFwik4B7K0xpZtBmOr2BCO4=)
3: efw94VkySZl1OLI7lfVK1BW_-cc.roa (hash: iVe/+lpDDAi7IdhaiYzK+owIU5QDwJ2yg7D6CHtBOwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:67:07:b0:a1:18:a5:e7:83:a3:12:5e:c7:ee:f9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jun 2 10:03:01 2024 GMT
Not After : Jun 3 10:03:01 2024 GMT
Subject: CN=b4e55f9998c59de564cb1f851d0f13f4c937e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:72:d9:f0:24:d1:86:26:ba:b4:81:cb:58:b3:
34:80:bc:7d:12:8c:bd:9b:f8:46:a8:96:86:ab:ea:
86:8f:20:63:d6:80:80:19:21:1e:44:f7:30:29:6c:
c4:f9:68:bc:42:03:e3:b0:12:05:aa:dc:28:a1:a3:
75:3d:1c:3d:46:74:0b:5d:6c:ea:6c:f9:22:50:30:
c7:74:82:15:d9:9c:08:11:c7:17:e0:45:74:68:fd:
a1:ff:7c:bf:66:f3:1a:ba:4e:44:6a:bb:11:3e:5f:
a5:ec:ca:fa:d8:3a:68:c4:47:31:72:fe:f7:ec:56:
84:48:1f:ee:f7:90:49:48:42:a6:77:39:2b:16:86:
ba:1e:2b:13:1a:40:2f:ef:6d:61:52:c2:d4:30:8e:
73:a0:6a:4b:d4:04:eb:f9:d0:a0:42:a5:32:f0:15:
b6:ea:51:0f:e5:7b:9e:09:b1:09:84:3a:11:01:31:
8a:3c:99:71:90:36:38:6d:4b:24:3f:5e:b7:b8:8e:
d2:6c:56:7d:54:2b:52:07:0d:3c:5b:b1:84:46:59:
8b:ac:18:59:13:68:d3:9a:90:a4:78:00:80:cf:ff:
f5:36:00:32:fb:ee:cd:8e:1c:1d:44:04:25:4f:b5:
99:26:29:9d:80:24:cb:23:dc:15:67:55:1d:c9:54:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:5F:99:98:C5:9D:E5:64:CB:1F:85:1D:0F:13:F4:C9:37:E5:FF
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:f6:a2:10:fe:ef:cd:25:f3:49:90:ca:c7:d2:5f:48:81:
51:ba:5a:39:7b:a9:6b:bd:ff:74:2e:e2:d9:d2:11:04:09:86:
7e:a2:8b:27:7f:34:a4:c5:a6:02:1a:7a:a4:16:49:10:8b:3c:
72:b5:39:42:ae:fb:33:97:eb:02:98:91:da:ec:a9:15:63:3d:
6a:c0:f8:ec:44:a2:b3:bd:c8:be:24:2c:be:ef:df:6a:58:34:
54:4b:31:73:54:b9:6c:7f:42:3d:ea:b0:5f:ce:73:26:3c:04:
6c:a7:f5:67:c6:cc:ca:55:2d:3b:39:f2:8f:5d:93:42:8c:1e:
7a:2b:01:97:88:60:e6:38:fd:53:e2:8c:76:0d:cb:4e:27:42:
6c:9b:a7:a7:17:ae:73:d6:cb:70:3e:68:19:3f:56:42:e2:31:
f5:bf:08:92:7b:01:11:44:65:61:19:5d:8b:87:b5:14:cc:56:
1d:69:88:a9:8f:1b:e9:5b:46:48:5e:56:d4:54:0d:cc:00:ba:
4a:21:22:a6:c5:5c:6a:8d:50:db:f1:6f:bf:eb:81:89:a3:28:
c2:69:ad:d4:a0:95:ef:f7:31:f5:93:8b:1f:8b:60:ec:1e:ec:
e8:6b:e5:96:da:c1:8c:fa:01:aa:c4:c0:ef:be:ee:c6:4a:91:
48:55:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:53:59 2024 by rpki-client on console-ams.rpki-client.org