Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: AwhrQaeys5fdqtvdFZHf0jlf/wHnHHJRruAC129FeWc=
Subject key identifier: AA:C6:2E:FE:F2:22:0A:2D:7A:66:C8:4E:75:78:D3:95:BD:11:E7:1F
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 018F874AAB88DF6B45BBE739A299D94CEA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:02:48 +0000
Manifest this update: Fri 17 May 2024 16:02:48 +0000
Manifest next update: Sat 18 May 2024 16:02:48 +0000
Files and hashes: 1: 7HQmaY0WiQ6cg0X-D3xkK-ycUKg.roa (hash: VUKyNVgFmuK6qGHYPYX6H+JoOaHBoXGXSgxpfDGrs+k=)
2: YgVJPj-ZvVdQH_Iyvexw0BTHonY.roa (hash: 5AjsEHivWAvdyvaVHlP2RZWcwe6zVqVmDRzB3JudYnw=)
3: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: vyMgyGfxLfbFOOvr8TTtqAPhJgrkb0lQy7J5BZfurbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:ab:88:df:6b:45:bb:e7:39:a2:99:d9:4c:ea:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: May 17 16:02:48 2024 GMT
Not After : May 18 16:02:48 2024 GMT
Subject: CN=aac62efef2220a2d7a66c84e7578d395bd11e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:f7:22:7c:04:2c:38:72:56:14:af:da:69:
65:23:05:25:39:90:ee:13:79:39:f5:52:7b:d7:bf:
29:d7:a4:da:4b:d4:63:59:c0:95:6a:e1:dd:da:4d:
21:8b:cc:64:a9:19:96:bd:e0:64:50:75:09:5f:cd:
83:28:27:bf:95:a9:03:da:1a:63:5e:c4:89:b4:e4:
4f:a6:0e:06:d7:cd:f1:c4:83:f6:02:df:a8:b4:2b:
f0:8b:a9:f7:e4:9d:f2:d4:ac:fe:89:13:9e:fd:97:
a5:0f:37:82:ae:a1:63:de:c1:7f:ca:7e:c6:da:0f:
2c:7e:9e:d2:a8:40:71:48:13:38:f0:d3:d5:de:71:
ac:87:bc:d8:65:75:a6:f3:4e:d1:cb:d3:72:49:78:
37:99:54:79:1c:af:a9:1e:db:64:b3:7d:8f:d0:d5:
51:f5:4b:1f:e6:16:83:c6:1f:fe:6f:75:5f:0d:58:
ac:ad:13:ec:9a:74:38:5a:18:cd:0c:65:c2:39:ac:
74:bc:ee:d6:41:88:b2:3b:47:39:1b:96:40:1b:5d:
45:e5:29:a8:21:00:60:6f:ae:af:07:f4:25:53:f6:
aa:89:51:38:e9:1c:1e:b4:35:ea:65:b0:59:99:6d:
57:fd:02:09:72:fd:8e:49:fc:70:a0:0c:d5:2a:c0:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:2E:FE:F2:22:0A:2D:7A:66:C8:4E:75:78:D3:95:BD:11:E7:1F
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:0f:1a:e8:95:76:41:65:15:b9:38:6e:08:46:54:db:2b:
77:89:75:ca:db:89:3a:ac:bd:61:eb:4b:a3:2e:50:f1:5d:af:
cf:f0:75:ce:a3:7d:a9:27:2e:3b:cc:e0:e6:b6:54:c8:e6:a7:
1a:79:5a:21:1e:ad:03:1d:63:5c:78:31:52:80:95:dd:f0:3b:
4e:b4:c8:2f:5f:18:08:45:c0:80:40:b3:40:d0:07:b6:db:3c:
53:0f:52:43:d0:d9:24:9f:66:42:2f:fd:09:01:1a:2b:c3:23:
12:45:e9:a0:6f:af:c3:a6:7e:84:a9:1c:71:ea:bb:74:94:88:
52:4c:29:1c:58:e0:59:ba:75:5c:5a:c2:ca:9f:55:56:9f:51:
a9:b0:48:32:d0:70:25:df:5d:06:43:46:0e:1e:5a:86:b7:b4:
71:f2:c6:29:eb:19:83:6b:44:5d:8e:4c:ea:fd:f8:d8:eb:f7:
52:3d:e6:a9:50:04:fa:c0:ea:9a:88:3e:aa:dd:49:bb:67:08:
06:e1:2e:7e:55:65:02:63:a1:c1:fb:d2:b7:16:a0:88:6b:15:
55:73:e4:91:ba:51:61:c8:16:05:67:20:0e:d2:30:41:f8:61:
88:4e:cd:c0:7b:e2:c2:a3:d2:20:f0:8e:61:44:99:b7:9d:2f:
ad:fb:93:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSquI32tFu+c5opnZTOp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTMyZTQ0NWMyNGRlZDliODUyMTJkNDc5Yjg4MDA4MTY1
ZWJkYmEwHhcNMjQwNTE3MTYwMjQ4WhcNMjQwNTE4MTYwMjQ4WjAzMTEwLwYDVQQD
EyhhYWM2MmVmZWYyMjIwYTJkN2E2NmM4NGU3NTc4ZDM5NWJkMTFlNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj833InwELDhyVhSv2mllIwUlOZDu
E3k59VJ7178p16TaS9RjWcCVauHd2k0hi8xkqRmWveBkUHUJX82DKCe/lakD2hpj
XsSJtORPpg4G183xxIP2At+otCvwi6n35J3y1Kz+iROe/ZelDzeCrqFj3sF/yn7G
2g8sfp7SqEBxSBM48NPV3nGsh7zYZXWm807Ry9NySXg3mVR5HK+pHttks32P0NVR
9Usf5haDxh/+b3VfDVisrRPsmnQ4WhjNDGXCOax0vO7WQYiyO0c5G5ZAG11F5Smo
IQBgb66vB/QlU/aqiVE46RwetDXqZbBZmW1X/QIJcv2OSfxwoAzVKsARxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrGLv7yIgotembITnV405W9EecfMB8GA1UdIwQY
MBaAFJSjLkRcJN7ZuFIS1Hm4gAgWXr26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODIt
ZTE0ODdhNTRjMWU1LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mODkxYzQtMTlhYy00MzdjLWI3ODItZTE0ODdhNTRjMWU1
LzEvbEtNdVJGd2szdG00VWhMVWViaUFDQlpldmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActEPGuiV
dkFlFbk4bghGVNsrd4l1ytuJOqy9YetLoy5Q8V2vz/B1zqN9qScuO8zg5rZUyOan
GnlaIR6tAx1jXHgxUoCV3fA7TrTIL18YCEXAgECzQNAHtts8Uw9SQ9DZJJ9mQi/9
CQEaK8MjEkXpoG+vw6Z+hKkcceq7dJSIUkwpHFjgWbp1XFrCyp9VVp9RqbBIMtBw
Jd9dBkNGDh5ahre0cfLGKesZg2tEXY5M6v342Ov3Uj3mqVAE+sDqmog+qt1Ju2cI
BuEuflVlAmOhwfvStxagiGsVVXPkkbpRYcgWBWcgDtIwQfhhiE7NwHviwqPSIPCO
YUSZt50vrfuT6A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:29:12 2024 by rpki-client on console-fra.rpki-client.org