Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: rohWKZld/W6/GZDN+7QrQszlKEu7zPsqqb6XgqlTk+I=
Subject key identifier: 63:AB:64:64:AB:DB:FE:BF:25:D8:C7:0D:B5:B2:31:B3:44:60:58:44
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 018F86A3BF1A874D97B65E7029B695279CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 0BB6
Signing time: Fri 17 May 2024 13:00:29 +0000
Manifest this update: Fri 17 May 2024 13:00:29 +0000
Manifest next update: Sat 18 May 2024 13:00:29 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: o64i5N+OgJGTh3DMilMWfK6XqhDwZJtp2vPYDpOVFBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:bf:1a:87:4d:97:b6:5e:70:29:b6:95:27:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: May 17 13:00:29 2024 GMT
Not After : May 18 13:00:29 2024 GMT
Subject: CN=63ab6464abdbfebf25d8c70db5b231b344605844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:de:8a:be:bf:07:6f:c3:ae:53:81:b3:bd:
01:8f:fb:ee:fd:a9:b7:da:2a:d1:b0:36:e0:1f:06:
fa:d5:53:ba:51:4a:ed:cd:32:fe:c3:16:f2:28:6a:
7c:0f:8d:6b:a0:06:98:3e:45:fc:51:44:8b:40:59:
08:bd:bc:32:d7:0c:08:d3:21:4a:31:d2:f9:de:40:
d5:a7:b2:ec:a7:6b:34:66:69:9a:b3:2c:a2:7d:27:
81:bd:b8:e6:4e:24:ca:7f:25:c7:94:3b:74:eb:c7:
8b:57:bd:7e:26:6a:94:64:05:5d:9f:95:21:e8:e7:
e5:a9:13:64:2b:32:7b:05:31:e0:57:f8:29:35:66:
2e:f6:fe:9a:ae:6b:25:2d:60:94:c9:d0:69:ae:1b:
7d:3a:44:f8:4a:0e:2f:63:e7:5c:9c:78:83:5c:f1:
d0:95:a9:c4:fd:8e:7b:2e:b5:1c:8b:9b:01:6e:a9:
9b:ed:e2:4a:e4:7d:e1:29:81:86:e7:fa:79:d9:b8:
3e:03:ca:e6:22:3a:1d:73:1e:ae:ad:4f:b6:43:b4:
b6:0d:2b:6b:82:9c:86:2a:42:c0:e8:b4:1a:9b:b7:
20:1b:1e:dd:64:44:f4:e1:76:68:dc:e9:ab:ce:b4:
95:f0:78:80:9a:63:51:32:87:1e:3f:72:7e:e0:7d:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:64:64:AB:DB:FE:BF:25:D8:C7:0D:B5:B2:31:B3:44:60:58:44
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:00:5d:01:74:3f:d7:cc:3f:14:89:ea:df:42:fe:0b:4f:
8b:9d:09:01:8b:0c:91:4c:ac:96:29:25:1f:3c:52:02:25:a2:
b7:79:c3:e4:c9:e8:bd:72:61:bd:52:10:37:98:3e:6f:f3:e0:
00:96:e1:6b:90:d3:db:29:64:09:21:b9:44:12:63:20:1d:8f:
c1:6a:21:bb:e1:33:eb:92:ff:a1:e0:c7:d9:e7:04:df:fa:69:
ee:30:f9:ad:d1:c4:1f:c0:bd:ce:5a:43:42:34:b4:f1:62:9a:
b2:11:b4:60:59:43:00:27:23:5a:05:45:e3:6c:5b:b6:60:81:
44:01:96:ec:7f:cb:91:d4:2f:b3:3d:14:70:42:47:63:cd:a2:
5d:dd:90:29:7c:a0:10:23:1c:4d:27:67:82:ad:71:b4:a8:df:
01:f0:72:da:34:21:19:44:a9:8c:be:f3:42:2b:9c:f9:01:8d:
15:09:dd:47:61:7b:8e:d3:31:15:98:34:74:af:04:06:bb:7f:
26:5a:94:e7:72:6c:bc:fe:2f:bf:9d:9a:52:92:9d:55:93:50:
44:62:12:0d:78:be:2c:3d:ab:9f:e1:48:1b:25:d4:b6:04:33:
10:67:de:6c:65:fa:84:36:19:6d:a2:57:87:09:f8:2e:4a:ad:
ee:9b:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:29 2024 by rpki-client on console-ams.rpki-client.org