Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: AkT6wFpTG5MKqsTaV5Jj5im3pP6NkAZGPb2CIETVgmA=
Subject key identifier: 68:B3:76:BC:A6:30:04:66:A6:FC:86:3D:A0:CE:A0:49:99:3E:4B:3C
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 018F4FED17EED9510FB08FFED311AEC310B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0590
Signing time: Mon 06 May 2024 22:01:29 +0000
Manifest this update: Mon 06 May 2024 22:01:29 +0000
Manifest next update: Tue 07 May 2024 22:01:29 +0000
Files and hashes: 1: ChBXmwkacze-4K7AnR3ogBIxSoM.roa (hash: tTvOa0DczsI2UICDCuF9V3mZtQ2S6LxBk9a8l28X7Ws=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: fskj7uuygLEnllCn6rCwrZ39gzWBmyqRfa6pnyyy9xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:ed:17:ee:d9:51:0f:b0:8f:fe:d3:11:ae:c3:10:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: May 6 22:01:29 2024 GMT
Not After : May 7 22:01:29 2024 GMT
Subject: CN=68b376bca6300466a6fc863da0cea049993e4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:57:f8:5a:3c:4b:a0:bc:19:a5:7a:cd:cc:
f9:ea:ca:3a:8f:fe:41:e4:39:27:39:a7:14:0f:6c:
ce:1f:ca:db:58:52:c6:00:3b:3b:13:cc:0a:32:c0:
c3:10:ff:d5:5c:00:7d:6a:99:2f:32:03:36:3b:81:
9b:57:94:a2:1a:f5:3c:54:0a:cd:89:2b:41:61:b8:
99:b0:49:ba:bb:ed:6c:fb:ca:35:e4:90:9e:b9:b2:
93:bd:3d:e1:b3:3e:0a:f0:4c:0b:f2:4b:cb:ca:1a:
6f:0f:cf:09:d8:85:55:2c:48:d3:33:00:04:86:02:
33:6e:5f:5c:b1:91:a8:da:49:76:30:33:46:45:52:
a5:7e:72:f2:75:2a:16:43:2c:b5:69:98:5a:2a:4c:
1e:d2:38:05:12:1e:62:72:b3:5e:d2:3c:4d:46:a6:
6c:2e:f3:58:35:a0:eb:55:eb:a3:24:15:a5:40:f4:
ce:a1:75:6f:dd:ec:78:2d:b0:a5:d0:03:89:bb:12:
9d:f5:c9:22:29:b6:ba:c0:f3:4c:95:9d:ab:c7:4f:
01:88:ec:85:e9:49:b8:3e:68:da:65:9a:42:c6:5f:
13:ab:d5:3b:c4:83:c8:e3:1c:c8:b1:d3:cd:b1:b6:
fc:0b:13:14:56:17:16:2d:82:76:91:c8:4e:aa:f9:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:76:BC:A6:30:04:66:A6:FC:86:3D:A0:CE:A0:49:99:3E:4B:3C
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:e1:74:34:61:8a:eb:b0:33:9e:89:8e:92:a7:36:68:a6:
8d:e7:d1:44:d2:b0:47:4e:03:bc:9a:e0:86:6b:1e:e9:c4:5b:
e6:44:ad:40:b1:08:c4:51:a8:f8:a8:ab:19:c4:9b:ac:59:2a:
88:e4:de:6f:11:cc:ca:7a:23:98:36:97:e7:16:77:80:e9:68:
db:df:5c:d5:31:65:6d:fc:86:a8:54:91:79:c9:5a:9a:25:4b:
3d:85:93:d7:c4:d0:a3:65:00:04:8c:99:ae:27:58:c1:b7:af:
ab:9c:3d:f4:2a:43:68:93:68:ef:e8:d8:ae:b8:35:1a:75:1c:
f5:34:4f:22:16:aa:39:c2:a4:5b:db:f1:2e:c9:97:8b:a1:03:
b6:c1:04:e9:dd:30:f8:f2:f5:66:ca:db:3d:1a:f6:ca:ab:d3:
28:b3:59:fd:78:48:9f:bc:79:85:07:13:11:4c:1d:5f:fc:1f:
b5:35:3e:43:3a:c3:fc:7b:ac:e3:9d:78:c7:39:7b:34:00:50:
32:6a:cd:fb:fb:07:21:e7:95:7e:ca:da:33:c3:11:d8:c2:18:
0a:26:19:9f:d1:c3:1f:03:80:3c:2a:99:96:e3:57:56:66:cc:
16:52:88:84:5b:6b:af:8b:b8:8b:6e:8b:19:9b:76:80:5c:39:
54:39:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:09:09 2024 by rpki-client on console-ams.rpki-client.org