Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
File: 0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft (raw, json)
Hash identifier: RhFYTA6Od0ypdhtgl4ys1TZodfpnOPp+PlJGU3dilBE=
Subject key identifier: CA:8A:B8:F2:8D:2A:49:5E:46:2F:71:C5:95:2F:C5:EB:89:44:A7:B6
Authority key identifier: D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
Certificate issuer: /CN=d24f497d157847005336b777361b1d20905c5213
Certificate serial: 018F3EF9458A0F3FA125944A71F2B0D76450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
Manifest number: 115B
Signing time: Fri 03 May 2024 15:01:14 +0000
Manifest this update: Fri 03 May 2024 15:01:14 +0000
Manifest next update: Sat 04 May 2024 15:01:14 +0000
Files and hashes: 1: 0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl (hash: noy5gw5YNx8YJfrbNrqL0sddOtiJEU+AJw6TFyIENG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:f9:45:8a:0f:3f:a1:25:94:4a:71:f2:b0:d7:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24f497d157847005336b777361b1d20905c5213
Validity
Not Before: May 3 15:01:14 2024 GMT
Not After : May 4 15:01:14 2024 GMT
Subject: CN=ca8ab8f28d2a495e462f71c5952fc5eb8944a7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:de:e7:23:5e:13:ba:18:ac:c4:86:47:02:
fa:a8:e4:b2:c0:05:b8:44:99:25:45:2c:bc:cb:d5:
52:63:dd:a8:53:af:28:1e:51:ab:ad:a3:85:da:a0:
6a:d9:d9:d0:aa:ea:94:ab:cf:9b:40:17:af:32:5f:
4c:d1:49:4d:82:83:e4:d8:1a:2b:48:3b:51:e3:df:
d7:39:67:d3:0e:f7:f5:d5:c1:88:a6:dc:51:bd:13:
8e:3a:4a:ab:4e:65:5e:76:d5:f3:51:41:a1:68:df:
65:32:80:a8:64:8c:98:8c:57:02:da:cd:6e:0a:1f:
69:6b:ae:14:16:6f:64:9f:ec:d2:3f:94:10:e6:3b:
c6:2c:a4:05:51:dc:c2:ef:96:51:30:f8:38:b5:61:
ea:e1:c3:1c:f8:a1:00:ba:7e:6f:8a:5f:51:4f:8c:
a2:07:fb:f0:f7:64:aa:65:f3:38:50:18:7f:ef:cb:
8b:2b:0f:ee:0b:0c:64:0e:f2:65:f0:85:db:0c:bb:
86:ed:05:3e:55:bb:a8:2c:00:81:22:d3:94:35:2c:
8b:04:72:4a:e5:cc:00:fa:94:17:c7:ed:e1:93:81:
61:f0:b4:10:b5:c8:4f:eb:59:b9:89:18:15:56:6a:
d7:c2:32:56:10:0d:e8:a2:e2:01:0e:f1:a8:f7:18:
d5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:B8:F2:8D:2A:49:5E:46:2F:71:C5:95:2F:C5:EB:89:44:A7:B6
X509v3 Authority Key Identifier:
keyid:D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:1b:fd:28:1f:dd:3d:bd:f8:f3:69:c0:c1:5b:c7:6f:d6:
b8:cf:6c:19:64:76:a8:d9:a2:f6:ef:63:7a:4d:9b:9d:0b:f0:
83:0b:b1:fb:fd:98:4d:a5:84:e2:60:de:83:e8:83:77:8b:af:
b8:61:68:a4:2c:ff:a4:b1:dc:f2:95:aa:e9:a9:9a:57:62:ed:
1d:4b:cb:1c:08:ed:94:1b:3d:38:a1:2f:73:59:c8:04:40:09:
6f:dd:46:fb:47:5e:ae:04:45:7c:10:71:9c:78:1a:1b:00:fb:
bc:a5:18:eb:47:34:b2:d7:e1:aa:19:4e:f7:ff:1e:2c:dd:c9:
12:3a:a2:80:60:4e:42:3f:48:e7:f0:c9:fb:c9:02:4f:95:17:
aa:5d:6e:f5:9b:e9:e6:35:dd:e8:e8:56:ea:11:c8:f6:73:47:
83:c1:0a:1a:7a:20:ce:67:f0:41:4c:2f:1d:88:21:b1:a8:d5:
90:95:af:c2:95:19:e5:7c:43:b1:0f:34:37:e3:3a:ab:df:19:
c7:33:41:ff:a5:0f:02:54:62:9b:41:c2:cb:9f:cc:86:1f:c4:
6c:a8:cd:8f:77:3e:46:a5:e9:a6:2e:75:0f:18:24:20:73:93:
32:9f:c0:4f:c9:08:e4:85:a0:fd:69:17:c5:59:03:94:34:6d:
59:09:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:23:57 2024 by rpki-client on console-fra.rpki-client.org