Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: qEl6kP+U0v/Q7SUZ72+3UcqDtmgwmPFjU7JT4crE9wY=
Subject key identifier: A7:3C:D7:F7:90:FE:FE:01:98:FF:52:B1:A7:99:D5:B0:07:C0:5E:84
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 018F87ED9DF0F5CC8FA154ED8B30BE48191D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 19:00:47 +0000
Manifest this update: Fri 17 May 2024 19:00:47 +0000
Manifest next update: Sat 18 May 2024 19:00:47 +0000
Files and hashes: 1: GBJMkprg6USKw8Hd3Ecc2MpWrQs.roa (hash: 6EYa0/e6BVe3fyv4pvU+emsKpzXrT+YuLYMVsp181Qs=)
2: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: zNN/P98H42MMhSvC3bRlUP0ww+l8kXwuI8mOZMKS+BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:9d:f0:f5:cc:8f:a1:54:ed:8b:30:be:48:19:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: May 17 19:00:47 2024 GMT
Not After : May 18 19:00:47 2024 GMT
Subject: CN=a73cd7f790fefe0198ff52b1a799d5b007c05e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:05:8a:b4:cd:d4:c4:46:b6:c8:20:5c:dd:
94:c2:2d:ed:3d:dc:9e:1a:77:cd:64:5e:77:fe:ff:
7c:2a:65:4b:74:98:4e:02:ac:41:cf:12:20:b7:5f:
d6:c8:ec:5c:3b:1f:03:b9:fe:37:ac:72:77:ba:87:
87:0f:d9:9d:68:40:79:02:5f:5f:f2:f5:ac:c2:d8:
40:87:c5:c6:0a:7c:72:34:61:67:b0:2a:ca:65:8d:
70:9a:9e:86:7c:35:ab:f4:75:b5:d0:95:a2:54:c4:
64:b4:03:2a:08:40:d8:b8:4b:c3:0b:61:74:53:a6:
6c:78:f6:c3:ac:13:61:ea:da:70:cb:99:01:bb:4d:
dd:b3:44:ca:aa:48:3d:bd:c9:3e:bf:0e:b7:31:62:
83:e1:fc:c4:b9:4e:9e:b3:90:5c:c0:65:b1:58:96:
60:d7:c1:e9:8e:58:ab:33:bf:a0:bb:01:bb:e9:ac:
f5:83:ed:f2:46:04:9b:57:74:e0:08:18:f3:c7:13:
83:87:6b:52:f2:be:d1:c7:66:75:f1:68:1b:be:08:
ff:89:8c:a3:05:f1:af:62:b6:11:e1:e8:44:2f:da:
85:0f:f6:a6:c3:60:cb:b4:50:66:d8:b0:b1:41:b9:
b6:01:f2:e8:9a:5a:24:68:7d:3a:f6:a3:b0:4b:2d:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:D7:F7:90:FE:FE:01:98:FF:52:B1:A7:99:D5:B0:07:C0:5E:84
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f0:fe:e9:38:dc:91:1c:f9:31:9d:97:51:2d:61:ab:6e:b4:
3d:a0:36:2f:98:00:ff:30:15:9d:81:4a:35:df:91:91:a6:a1:
0c:01:f2:e0:33:e1:6b:54:4c:c3:b6:21:fa:53:bb:b9:49:10:
32:65:3b:b3:45:3a:35:4b:55:35:e2:90:05:b9:fa:2e:fa:a5:
6c:2c:60:a9:46:57:47:f1:ba:ee:2a:5b:5e:70:11:be:7e:11:
6d:52:c7:4c:9b:d3:e1:0b:78:42:6d:1a:dc:b6:b0:57:51:74:
0e:81:5c:5f:0a:a5:33:28:90:f9:b3:e6:7b:3f:e3:63:d3:36:
1b:0c:d4:e3:a6:75:df:0f:3c:ce:6a:3c:37:e5:41:d1:31:37:
94:85:9d:0a:cb:ae:2b:fb:20:e6:66:2a:62:67:50:6d:05:45:
82:f4:39:ee:7a:1f:50:3c:ba:16:8d:88:af:af:6c:1b:0c:24:
6a:20:9d:de:dd:9f:13:cb:e2:d2:cc:96:ff:50:06:78:3f:8d:
b6:26:33:52:22:0a:cf:c3:89:19:d0:e5:db:6d:af:93:84:2b:
fa:a3:11:a2:ae:44:4d:48:e4:88:9d:6f:8d:e0:a0:1c:1e:9f:
99:2a:a5:a8:8f:d2:9d:09:eb:99:1a:ea:25:d1:d1:ff:d3:83:
cf:07:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:53:33 2024 by rpki-client on console-ams.rpki-client.org