Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: BFpeCyKBYfPc/SuldBSs2HyU6xOC9RqbqemsRMy/k6M=
Subject key identifier: 0A:79:6E:C8:C3:5C:C1:6D:56:52:99:98:CD:C5:0E:A9:3C:73:9B:96
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 018F98052977FC4DB8064D858AAA302457E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 080C
Signing time: Mon 20 May 2024 22:00:26 +0000
Manifest this update: Mon 20 May 2024 22:00:26 +0000
Manifest next update: Tue 21 May 2024 22:00:26 +0000
Files and hashes: 1: FreDDf36fJJHnja659K6kzZ0CIU.roa (hash: dVYLTCBe7Vrz2RX/SNd12KGY0gacz9YnKarFiNi8tAM=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: VtgJXfv8tZ2bpscgFCJ/u+TKV4/I+a1fS2w/a3t1zYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:05:29:77:fc:4d:b8:06:4d:85:8a:aa:30:24:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: May 20 22:00:26 2024 GMT
Not After : May 21 22:00:26 2024 GMT
Subject: CN=0a796ec8c35cc16d56529998cdc50ea93c739b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:4b:dd:36:21:18:7b:90:10:34:2d:97:e9:
81:d2:e1:a3:3e:c5:2b:ae:4d:e9:32:e6:00:0b:ab:
f3:4b:bf:72:75:63:0b:e6:ae:01:65:3a:1b:35:ef:
5b:39:14:d0:3d:44:3b:88:84:f4:6c:11:d0:66:15:
7f:c4:44:00:a8:9d:9f:bd:0e:76:6f:d2:ac:15:ce:
e1:ff:c0:60:56:fe:28:1c:1c:03:18:5d:7f:7f:dc:
21:e0:1e:fe:a5:f9:69:94:43:a7:e8:28:40:c3:1c:
fd:5c:4d:5c:d6:a2:de:e9:c8:35:dc:93:ae:15:fb:
bf:8d:2e:bf:7b:a5:5b:a0:c1:7d:fd:fd:c8:f0:03:
e3:29:42:1a:2e:26:8e:b9:84:1e:73:29:d9:6f:34:
6e:3c:20:f2:0e:4a:0c:e2:e4:79:6f:ca:18:8f:b2:
63:c0:a5:cd:1b:fa:7c:4b:71:58:43:58:02:b4:13:
a9:2c:28:d8:e2:80:f8:c1:d3:98:21:20:6f:32:ff:
7e:3d:d2:1c:b1:a5:e6:2d:b6:0c:ef:99:e6:42:47:
ac:de:bd:62:e6:7b:26:de:5f:be:40:f2:05:30:7f:
5a:92:b3:85:4b:dc:e4:9c:1a:bb:fe:44:f6:13:4e:
d7:32:9a:b3:fd:8c:8e:fa:02:17:96:ca:91:4c:14:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:6E:C8:C3:5C:C1:6D:56:52:99:98:CD:C5:0E:A9:3C:73:9B:96
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:d1:f7:45:6f:9d:2c:d2:6d:aa:83:a6:8a:5d:2e:47:07:
66:85:af:05:04:cc:58:a6:66:0c:9b:82:5f:12:db:04:99:ac:
1d:ed:16:39:d8:c9:59:a4:2b:b6:8c:24:34:c6:35:dd:1f:a0:
6a:10:26:3d:85:48:55:f0:09:dd:0f:5d:50:ec:bf:ed:ca:ec:
fb:08:cd:b5:90:19:50:c4:c1:69:96:16:7d:0c:05:79:02:8c:
7a:20:1d:91:ee:c4:8c:c5:d8:15:00:a1:b2:0a:c0:4e:22:11:
95:21:c5:10:80:aa:a1:a5:78:ee:19:a8:4a:0d:03:b5:a6:30:
f6:91:af:f8:eb:0b:c6:6d:09:e3:df:a8:71:f3:70:45:29:4a:
25:a9:39:76:6e:54:9d:74:45:64:2c:cc:26:44:5a:01:66:76:
73:5b:f1:c2:af:bb:3a:94:da:8a:93:6c:fb:99:aa:56:9e:24:
79:e3:a6:d3:ca:14:a0:e2:70:7b:4e:6c:fd:27:23:75:c2:75:
56:79:3b:cc:66:b5:8f:06:c3:ca:81:45:b1:64:c4:77:b9:64:
20:eb:40:ba:a1:bd:f2:12:fe:50:16:77:a0:27:11:11:6e:dc:
62:4a:0a:bc:e4:3b:b2:df:f9:46:02:ff:a7:a8:8f:ef:ab:7d:
83:fa:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:00:26 2024 by rpki-client on console-ams.rpki-client.org