Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: JLyXm1UQ5gfYWX+idTwqdX+G1C/Mp52zmlUjQGZhVKc=
Subject key identifier: 37:4D:5B:60:34:6A:28:11:25:BE:D6:74:80:D2:1B:40:09:42:AD:CB
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 018F8635872091552F586C7339EF5A0D3339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 01A1
Signing time: Fri 17 May 2024 11:00:05 +0000
Manifest this update: Fri 17 May 2024 11:00:05 +0000
Manifest next update: Sat 18 May 2024 11:00:05 +0000
Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: KpFO5eOHyEoyLOEiD1IHpd1pMQDByYozeg21mb5UWsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:35:87:20:91:55:2f:58:6c:73:39:ef:5a:0d:33:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: May 17 11:00:05 2024 GMT
Not After : May 18 11:00:05 2024 GMT
Subject: CN=374d5b60346a281125bed67480d21b400942adcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:c5:37:a2:ba:52:1e:fa:d0:24:53:d5:ea:
e6:4f:87:10:b1:06:c2:58:6c:7d:16:1b:d2:eb:b1:
d7:44:df:66:76:19:e8:1d:c6:f8:79:c2:e5:69:81:
15:a6:ed:3c:26:72:db:8c:28:6a:7f:80:39:02:3e:
0c:8c:61:10:42:f5:ea:ad:c5:60:b6:ba:26:25:8c:
ee:85:5b:b9:6d:4c:1e:f5:53:b8:96:2d:4f:01:8e:
8f:c2:2e:82:fe:f7:f3:37:4a:c1:41:fb:bf:b1:23:
84:d2:53:e3:4d:5a:19:c8:ea:4c:6e:6a:42:63:91:
ae:73:74:5a:41:90:ed:f0:77:23:15:38:2e:c3:56:
ff:91:4c:61:96:b8:16:a7:52:da:96:d9:9d:92:a7:
5e:cf:42:d6:dd:bf:69:5a:f1:f1:30:12:e9:f4:7a:
68:af:fd:82:ff:4e:6c:75:f7:fd:cd:cf:be:a9:1a:
80:1b:8c:20:97:6e:1b:ea:11:52:d2:3c:5a:89:a0:
09:2e:be:78:3c:04:1d:22:17:42:9b:cf:2a:45:63:
84:63:ad:3e:f7:90:41:55:13:12:97:72:9b:84:ca:
0b:3e:36:10:3e:93:6a:cd:b4:6e:28:90:79:f9:e1:
7f:fa:4e:f0:3b:df:b1:81:45:ff:07:8d:5f:b2:17:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:5B:60:34:6A:28:11:25:BE:D6:74:80:D2:1B:40:09:42:AD:CB
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:7d:ed:be:5d:7f:d8:56:30:15:f1:d1:67:39:fc:12:1c:
71:09:75:de:05:e3:d9:54:ad:eb:12:6d:c6:3b:f1:f8:6d:77:
4b:06:99:1a:53:5d:db:92:f8:bc:01:fc:d8:6f:f8:86:af:5b:
48:c8:00:ef:46:23:d7:04:85:f3:f5:96:bb:6e:b9:d4:63:4b:
d2:37:e6:6b:27:72:63:a7:4b:90:9b:00:7e:04:d2:c6:89:59:
67:ce:43:c1:ea:a7:30:e2:22:42:07:4c:6d:24:b6:b8:51:8d:
d5:5c:93:2c:58:58:d7:ae:a1:e8:f3:58:24:66:5a:bf:3b:44:
0a:e4:c6:f7:62:a6:94:89:d3:b6:93:30:2d:b2:2f:27:b8:ab:
e6:ed:f2:07:67:b4:4e:e1:03:6a:71:78:77:3a:9f:2c:02:97:
b1:6c:25:26:bf:01:1f:e0:e6:75:77:b5:69:b3:a3:67:56:79:
40:1b:c1:13:a0:3c:e7:63:04:a3:9a:fb:d3:d0:39:1a:74:d1:
b9:fe:76:b9:40:83:cc:65:2a:65:4d:62:ad:06:2c:23:17:43:
53:d8:85:e1:7b:fb:4a:16:fa:52:c2:22:aa:36:da:a8:1d:c6:
86:8b:82:4e:28:00:86:61:ca:14:65:cb:bd:3b:dc:06:4b:ac:
41:b8:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:01 2024 by rpki-client on console-ams.rpki-client.org