Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: TrRpSDZwftk3u9tfOMJ34iMkbb5j/+usygFNBtvtL0k=
Subject key identifier: 17:62:EC:AC:C4:F1:8F:25:4F:52:97:AE:94:95:DB:9B:EC:28:0F:E0
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 018F874AC5CDE6875FF758AFCCD5C8882AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 02B4
Signing time: Fri 17 May 2024 16:02:55 +0000
Manifest this update: Fri 17 May 2024 16:02:55 +0000
Manifest next update: Sat 18 May 2024 16:02:55 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: A71sAaGLplqaDdFbUvnNvzdwCLtmPxmO34rIwr0IQY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:c5:cd:e6:87:5f:f7:58:af:cc:d5:c8:88:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: May 17 16:02:55 2024 GMT
Not After : May 18 16:02:55 2024 GMT
Subject: CN=1762ecacc4f18f254f5297ae9495db9bec280fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:5e:de:6a:f8:62:f6:42:5a:39:36:1c:57:
01:fb:7a:6f:a8:8d:73:eb:2e:29:33:c7:d1:7c:3f:
6f:fa:de:40:77:8a:fc:ba:fd:4c:51:99:7c:c9:57:
3b:d1:0f:bd:b6:4c:af:78:a8:b0:30:a6:7a:a0:1b:
fe:8f:46:90:45:ea:ed:64:7d:cd:29:54:58:2f:69:
d9:2e:93:e5:2b:c5:e6:63:b4:77:d9:2d:d4:49:d4:
71:b0:e9:a5:69:ac:cb:72:1f:d0:9e:f6:0f:22:75:
34:ac:69:22:16:a8:59:33:0e:40:29:c3:92:59:e6:
46:04:a3:90:45:22:c6:4a:ef:4b:40:91:1c:e6:a9:
f7:60:d3:c8:3b:ed:c8:84:71:25:0a:6b:23:d5:94:
7a:73:bb:c4:dd:53:08:f3:96:63:35:ae:b3:6f:48:
e0:dd:91:6e:3d:21:2a:2a:00:ff:9b:09:63:07:1d:
be:15:1b:12:50:f9:8d:a7:da:be:51:de:ee:69:7c:
d6:28:73:6c:8d:12:f1:5d:c3:54:d0:c1:3c:1f:d5:
6d:06:ae:75:31:88:25:fe:48:37:1e:ec:43:9b:73:
7f:ab:b4:fe:7f:72:ba:96:29:96:81:99:0b:dc:99:
e9:af:79:d4:64:0f:1f:39:79:9f:fc:6e:77:ad:fe:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:EC:AC:C4:F1:8F:25:4F:52:97:AE:94:95:DB:9B:EC:28:0F:E0
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:c0:47:14:39:fc:22:96:77:ec:c4:73:d4:de:c5:f9:70:
3a:23:14:4e:c8:39:39:52:c6:ff:16:dd:37:bb:b7:6d:34:8f:
a0:3d:86:08:fb:4d:33:cc:c2:f2:93:bd:54:73:c9:d6:6a:9e:
27:c8:c1:32:93:60:8f:00:61:28:90:ad:25:b8:9c:72:d1:db:
75:83:47:77:18:ec:53:bc:8d:66:fe:78:4d:dd:73:ef:0d:e3:
05:f7:d1:16:77:47:8f:a9:3e:41:ec:f7:a3:8f:54:6a:76:38:
1a:ff:cf:4f:69:79:4e:8a:3d:76:58:a6:dc:28:4e:37:10:ef:
8e:f2:d2:9e:80:5a:e1:d6:ab:bf:59:99:99:fc:fb:92:8b:7d:
9a:bb:f3:15:0f:25:9d:38:ed:8b:3f:88:af:53:59:60:d7:1e:
21:8f:42:c7:97:ab:e7:8c:f7:ac:6c:ea:38:83:e7:05:32:12:
08:4a:84:93:1c:05:32:85:06:ed:39:98:10:84:3a:b6:98:ab:
e1:9d:66:f8:00:73:42:d5:80:ad:a3:d7:fc:66:73:7b:bd:1c:
a6:af:ff:54:08:69:8b:91:18:a3:80:10:7a:82:1b:e6:58:4d:
d6:1a:25:82:c9:6f:b3:d7:d3:7f:e3:dd:25:2f:d7:4c:16:88:
59:35:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:06 2024 by rpki-client on console-fra.rpki-client.org