Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: P0rr3rbclYRjncDVPRDK0WoDMvSyI5kmAGh5foe8isg=
Subject key identifier: 90:E4:61:50:0E:C9:32:B8:C6:28:FE:C5:35:84:DC:88:EA:70:E3:04
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 018F87B65E578FC817D26E62F1F5C453D135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 97
Signing time: Fri 17 May 2024 18:00:26 +0000
Manifest this update: Fri 17 May 2024 18:00:26 +0000
Manifest next update: Sat 18 May 2024 18:00:26 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: uscp3BJ2Gn+p+SeSVf6ir8M/MjAfYo4AN86wXRdRTRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:5e:57:8f:c8:17:d2:6e:62:f1:f5:c4:53:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: May 17 18:00:26 2024 GMT
Not After : May 18 18:00:26 2024 GMT
Subject: CN=90e461500ec932b8c628fec53584dc88ea70e304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:8f:0f:af:b9:47:37:a4:00:72:6f:a2:29:
b6:5c:7d:56:99:7e:5a:1d:b2:51:be:fb:82:9d:70:
e9:b9:3b:78:af:26:e2:f9:b5:e8:a6:2c:c7:45:40:
81:c5:95:0e:9d:93:1b:cb:7c:7f:44:09:5b:6f:c6:
e4:09:22:14:3a:57:ab:e3:85:9a:5d:92:d7:67:2b:
8c:9e:2a:ab:ce:82:c0:94:15:b6:83:10:f3:be:ac:
be:9d:56:6c:15:0c:53:17:82:73:45:e6:58:85:29:
e3:40:d8:5f:d9:9d:e7:d0:03:cf:77:55:76:32:31:
ec:05:8e:44:fb:6e:be:f1:04:b3:4e:ef:92:5d:27:
93:a7:45:8d:fe:73:e0:01:b1:75:26:2c:6b:c2:c5:
51:eb:22:4c:06:2a:2f:f6:7c:af:ef:9b:e5:40:f9:
47:3b:36:e2:cf:70:45:65:e2:ee:0e:a6:c4:bd:bd:
ab:8a:cb:69:59:50:e0:9b:59:72:05:bb:0d:85:5b:
cb:4f:e1:44:85:3d:b0:6e:59:12:02:a3:af:22:71:
5f:c7:30:56:bf:a8:66:75:26:fa:e8:a7:ae:ce:03:
b4:e6:16:95:cf:9a:3b:fb:e5:b5:8d:51:25:1d:49:
c0:b1:18:5a:ff:1b:52:28:e9:5e:51:50:f1:ec:39:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E4:61:50:0E:C9:32:B8:C6:28:FE:C5:35:84:DC:88:EA:70:E3:04
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:83:51:47:85:12:86:a1:7d:9d:c3:c6:9f:60:74:7a:da:17:
ee:81:29:bc:f9:fd:df:dc:d0:3e:71:44:bd:7f:75:b9:33:89:
9e:ae:e6:49:d8:94:e1:90:f2:1c:fb:7e:48:cb:31:46:87:60:
15:41:51:09:39:9d:df:a8:9d:0a:13:45:b4:eb:0d:ce:39:76:
99:fe:ac:e2:26:d5:5d:3c:19:d3:db:a2:24:28:68:d0:00:bb:
e4:ba:ba:4c:79:fb:65:2d:6c:40:8e:24:10:f0:7e:58:07:1f:
87:2f:bc:94:42:12:b3:e1:a0:f0:2a:6f:ff:e2:b1:f4:01:13:
ff:a5:b1:0f:a4:12:36:93:04:53:11:19:ae:a2:dd:7a:52:e1:
11:7a:f0:93:ab:27:43:84:5f:6c:8d:e5:da:cf:71:6c:0a:39:
d0:76:7b:5e:34:59:64:56:6b:40:3a:44:0e:bc:17:f5:2b:b5:
a6:a9:f4:f8:1b:04:fa:b9:f2:8a:1b:f1:bd:ac:70:87:1b:58:
53:b6:11:cb:51:b3:65:05:a3:1f:67:a5:a9:1d:f1:a3:b3:10:
9f:ec:33:b0:55:e1:7e:77:8d:fd:73:75:4e:bf:f0:40:8b:21:
09:dc:c2:f0:79:5d:65:0c:08:5f:f4:66:de:2b:cb:54:f6:c9:
68:09:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:47 2024 by rpki-client on console-fra.rpki-client.org