Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: f1m+ixEfm+7vrCKVuAtaX31wWQ1UzpEAj5RC3XDpoxE=
Subject key identifier: A7:49:AB:5D:70:E1:E3:01:6F:53:23:47:D2:F4:1D:5B:1E:49:B1:5C
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 018F8748D7197F34BBBC771CF8B323E7DC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:00:48 +0000
Manifest this update: Fri 17 May 2024 16:00:48 +0000
Manifest next update: Sat 18 May 2024 16:00:48 +0000
Files and hashes: 1: 0HUpR_9z6nnMtAJTjN5x9uPw49I.roa (hash: sxeHl54biT5ZA3QbwV+eyh/MkfD+27Nszh0eVECbYdc=)
2: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: GgMzaFVWqGTM+50UZJ3JAAVOtx7ByJK8ECF/GizY4zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:d7:19:7f:34:bb:bc:77:1c:f8:b3:23:e7:dc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: May 17 16:00:48 2024 GMT
Not After : May 18 16:00:48 2024 GMT
Subject: CN=a749ab5d70e1e3016f532347d2f41d5b1e49b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:e9:85:da:0b:8a:4c:14:06:b9:90:97:2a:
58:b9:d0:69:81:c3:62:3d:0d:75:71:d7:35:4c:70:
e4:fb:62:aa:91:96:17:1f:8c:2c:81:e1:6a:79:fe:
6a:36:b9:c6:61:1e:9d:b3:34:73:9e:ae:f1:0f:2d:
50:8b:59:e6:8f:92:d2:d7:ea:21:26:a9:93:ad:bb:
89:8f:64:ff:11:25:32:95:f8:c2:1f:20:ca:7d:7a:
bd:cd:da:3f:cb:4b:8d:bf:ed:2d:ce:f0:6a:43:da:
44:05:df:da:20:d8:92:a1:35:51:3f:3d:28:1a:dc:
68:18:fb:d0:f0:70:92:9c:2d:ff:91:c9:1d:06:19:
51:16:17:62:a5:43:4c:dd:f7:aa:ba:5e:54:53:cf:
3a:8d:db:d1:b7:c6:32:6c:a7:2c:6d:f0:5a:61:3c:
5a:0e:9c:97:51:1d:c0:97:4e:90:fb:27:09:97:a1:
f1:61:00:79:e9:78:c5:83:72:79:76:0b:94:02:24:
fc:1d:1d:7a:46:78:8c:f2:ce:a9:fe:21:ee:56:d4:
e5:9e:6b:57:82:d9:bb:cf:98:b2:a6:23:a2:61:20:
42:b3:a7:0b:31:81:e1:b0:07:b9:b5:bb:bb:97:fa:
90:03:d6:32:de:e2:0b:2a:3b:6a:68:41:e2:f1:5b:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:49:AB:5D:70:E1:E3:01:6F:53:23:47:D2:F4:1D:5B:1E:49:B1:5C
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:26:37:f5:07:3a:59:94:e0:f6:3d:22:91:08:27:c3:af:
8e:44:fa:ae:fa:ac:6d:e6:41:2d:3c:c4:71:a4:6a:fb:43:e8:
37:d5:07:06:54:29:34:d9:b9:86:6d:29:87:2a:a9:40:60:c7:
cb:e2:72:86:c6:15:2b:1a:fc:ae:7b:68:69:6e:b0:68:d9:89:
7e:e7:e4:63:b4:8a:c8:96:a3:67:ee:c1:a4:7a:43:c0:71:f9:
46:5c:df:f5:d7:28:03:9a:73:d5:e5:94:8b:a5:00:b4:13:8b:
0d:78:ba:ae:70:e0:bb:d0:ea:05:58:dd:d8:2b:e3:53:75:bd:
6b:ac:bc:ea:f9:15:e0:2b:84:8e:d1:4c:ae:3b:ac:6d:59:eb:
85:ae:32:2d:fc:44:4c:b1:99:09:b4:90:a2:56:4b:59:b5:82:
d4:94:30:1e:c2:9d:f1:f2:02:0a:14:f2:42:45:b8:ee:26:7e:
ca:b4:ec:6f:90:51:07:63:34:a9:76:90:73:2b:fd:dc:4c:d7:
f0:2d:b2:13:3e:c7:2a:17:cd:ab:d9:e9:1d:5e:eb:d1:d5:36:
f4:fa:26:fe:7f:ff:0a:da:64:c4:fa:51:69:5a:16:93:c1:0d:
12:ec:e7:1f:05:a0:6b:67:ba:cf:ae:26:56:be:96:95:8f:34:
fa:f8:82:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:32 2024 by rpki-client on console-ams.rpki-client.org