Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: 0VHkzp4CnOQ9kSE/UP1kpo0JtaXao0NaTk7v+0uBzdQ=
Subject key identifier: D6:76:E1:ED:8A:1A:8E:DB:19:E3:15:19:EB:74:F4:5A:65:34:28:B9
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 018F96BD2C8B7515A2A308CC20EA9764CC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1180
Signing time: Mon 20 May 2024 16:02:11 +0000
Manifest this update: Mon 20 May 2024 16:02:11 +0000
Manifest next update: Tue 21 May 2024 16:02:11 +0000
Files and hashes: 1: Jnk1gvpNMeGCGkzYJyRL79dotBc.roa (hash: 02aJ6mgsGXaqqmsNdECtRtifHCo5VqyAByO3HVqsKzg=)
2: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: W49R/Ms0JKU/iafJBEcOdCnX1DGR+wmnJ4hw8M7AK74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bd:2c:8b:75:15:a2:a3:08:cc:20:ea:97:64:cc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: May 20 16:02:11 2024 GMT
Not After : May 21 16:02:11 2024 GMT
Subject: CN=d676e1ed8a1a8edb19e31519eb74f45a653428b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:da:c0:33:84:37:05:6a:ac:a6:07:da:49:
3e:8d:7e:69:d2:72:55:52:3b:74:d0:f9:42:13:82:
65:d7:5e:0f:2c:3e:cb:6d:f8:35:a6:26:5e:42:1d:
dc:cc:1d:24:76:87:f4:89:bd:d7:7e:ca:f3:07:fe:
0a:3b:06:39:81:46:d7:c4:22:a2:50:76:94:02:3f:
d4:c2:d8:05:e5:6e:41:a0:8e:4e:e1:f1:b0:87:7c:
bd:ef:c5:64:53:08:e4:02:a4:73:6f:55:c1:a7:5c:
95:dc:61:49:e3:f9:30:e6:2c:ef:cf:0b:bc:02:58:
91:89:c0:6f:71:5b:e7:ed:07:72:e5:0b:c1:a7:73:
3a:10:f0:b9:b0:4f:4f:f0:45:5a:58:55:db:53:1f:
03:17:ec:5c:5a:39:88:7a:9f:9f:8c:b0:75:22:7e:
48:18:63:71:5d:93:0e:36:60:3d:6b:2a:c5:60:b7:
4a:11:28:89:36:80:8d:03:e3:3c:99:e1:05:b5:98:
de:91:b7:14:d7:b7:61:e4:3d:eb:a8:e5:3d:5b:8f:
9b:fe:d9:09:d5:8a:8c:43:b5:d2:08:01:b0:a4:3d:
6e:89:0f:50:2d:c7:96:3d:26:e5:23:ed:5c:70:f8:
8a:59:df:53:a6:fb:0c:90:9d:05:17:2d:35:cd:76:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:E1:ED:8A:1A:8E:DB:19:E3:15:19:EB:74:F4:5A:65:34:28:B9
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:8a:59:07:71:ff:26:0b:38:99:70:82:03:bd:94:0d:5e:
a3:5a:5f:34:10:eb:5b:c0:bd:1f:2b:51:9c:86:b3:df:a4:f5:
43:08:9c:b5:bb:f8:86:9c:1a:51:d5:bb:b3:a4:7a:a1:66:4f:
c7:d4:6e:7a:f3:7c:62:2f:c9:59:5e:ae:9c:31:7a:8f:0c:4a:
5d:da:d9:a9:c0:07:95:4c:70:aa:bf:91:06:ca:43:71:30:35:
c0:eb:83:84:ae:41:ff:c4:1b:ad:b1:7e:ed:51:ac:7e:c7:12:
67:0f:74:8b:ec:d7:5e:97:f2:43:e9:6c:5d:e3:39:9c:69:20:
fc:ae:6c:9b:5f:f1:35:e4:ee:e2:c4:ea:60:fc:c3:d6:d2:13:
07:e1:81:f8:36:31:71:b5:bd:c4:c3:40:11:c9:0b:fe:88:b7:
fb:f7:28:2d:2c:99:44:64:6d:35:75:a3:85:15:de:74:42:85:
0d:07:d1:0a:b2:cc:a7:ca:31:16:3d:ea:7e:2b:9f:cb:11:7c:
61:3c:6c:78:73:03:04:8e:50:67:1b:e1:79:46:0c:26:13:be:
c0:ee:b7:13:ca:b7:9a:94:5e:78:6f:02:0a:38:09:72:d2:5b:
5a:2f:dd:0a:18:c2:fd:3d:81:12:74:d4:bf:d0:32:8d:61:95:
62:b0:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:48:06 2024 by rpki-client on console-ams.rpki-client.org