Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: 6/8xBu6bBon/4M+k3lSNTDno9/s8HM8EPenL5g8K0Gk=
Subject key identifier: D4:21:3E:A5:29:51:DB:54:95:60:41:02:B7:77:6B:81:A2:9E:E7:A0
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 018F889281B24F2D6A2F1702EEF5288C3791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 22:00:53 +0000
Manifest this update: Fri 17 May 2024 22:00:53 +0000
Manifest next update: Sat 18 May 2024 22:00:53 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: GzwFMzf6FD0obrr63CAr2iXXwo/D8h0cHzvPfidm7IU=)
2: uKDziCmYElaykB4W-VucqgTOm5c.roa (hash: +PLTn4mnFUAjlO0OKRPcAahPAsHMPRtAItwpvz34i3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:81:b2:4f:2d:6a:2f:17:02:ee:f5:28:8c:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: May 17 22:00:53 2024 GMT
Not After : May 18 22:00:53 2024 GMT
Subject: CN=d4213ea52951db5495604102b7776b81a29ee7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:ab:e1:bf:fe:a7:24:ce:d4:6f:78:66:b0:
8a:23:4c:72:06:f2:ac:d2:d2:82:54:0d:93:a8:ce:
09:73:3f:26:48:73:5c:b8:43:26:38:fe:6d:16:53:
c5:05:3f:a5:1c:db:d2:64:9f:17:6f:c3:66:d5:1a:
a5:9a:51:ae:ce:c8:af:7a:79:e3:88:b5:f7:24:c7:
c8:02:2b:4a:e8:d4:1e:25:d4:c4:33:e1:27:fc:7a:
ec:1e:68:15:7a:d3:2a:9a:1a:f8:6c:a0:3c:5a:55:
52:9f:ba:ac:97:45:97:a2:0f:9a:c6:30:c5:63:4c:
44:62:52:67:50:89:bc:22:bf:d4:5c:19:89:e9:04:
08:de:00:30:e8:44:e6:e2:f3:66:6e:bb:75:ba:1b:
cc:44:b3:ad:fb:20:68:1d:84:d8:5c:4a:cd:24:51:
0d:2b:f2:10:d8:fc:4d:da:87:e9:12:41:a4:dc:82:
27:b3:67:22:be:f6:26:27:1f:3d:95:9b:53:04:5b:
9f:07:24:6f:87:d1:eb:ca:cb:af:2b:f3:bf:49:f7:
80:89:17:92:91:15:97:10:b4:8f:03:c4:12:e2:9b:
3f:cb:0c:4d:fc:0e:68:6d:d9:cc:ab:b9:14:7a:0e:
b9:0a:45:98:2f:7e:54:0f:81:ae:f5:9d:ad:b3:94:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:3E:A5:29:51:DB:54:95:60:41:02:B7:77:6B:81:A2:9E:E7:A0
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:f7:4d:0d:87:ce:94:f8:32:22:21:0c:cd:dc:a4:dd:f5:
bb:d0:cc:19:fc:ff:84:8d:21:d9:df:0b:f3:00:6f:17:a9:b5:
f3:23:1d:ee:1a:b2:d9:19:90:0a:40:3d:d2:6f:95:b4:86:72:
57:d0:4a:98:a0:51:d1:f8:88:0f:ac:4d:33:2e:6a:ec:0a:f7:
b7:26:41:da:ca:31:c9:6b:dc:7e:a6:4c:4d:2f:52:0d:17:ad:
13:35:33:1d:28:b6:f0:0d:3c:04:41:3a:cc:1a:64:ba:6e:0b:
9f:05:bd:d1:52:20:02:78:e3:86:33:54:23:66:63:c7:fe:72:
cb:32:31:89:c2:95:6e:9c:88:e0:98:33:93:84:d6:e0:71:15:
3d:aa:1f:3b:e2:59:35:d4:a4:ad:c0:5c:d5:e3:0b:d2:da:17:
81:1c:15:b9:a3:03:14:27:04:b1:e4:dc:ef:64:21:ec:61:3c:
8c:ab:81:fc:79:42:f1:77:ef:5b:ad:a9:1f:85:25:7c:87:a0:
ab:89:37:cd:a3:fd:2e:66:f9:92:9a:58:e4:ca:69:05:b0:68:
03:55:70:7e:00:56:a3:8a:9f:a9:00:b6:2c:ef:f2:06:f5:4a:
81:d7:31:b1:13:ee:a3:49:c3:78:8c:51:eb:03:61:e6:bf:8f:
b0:90:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:32 2024 by rpki-client on console-fra.rpki-client.org