Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: vmquYbqtrTy+j9Gs8wdUXyALnnotnsMk0A6nrm2ssso=
Subject key identifier: 38:46:7B:C6:5C:95:0D:CA:8D:2C:94:43:5F:E6:09:72:0E:9A:19:B3
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018F99F39E2CB0CF7AD9D9D66E75EA77E22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1190
Signing time: Tue 21 May 2024 07:00:30 +0000
Manifest this update: Tue 21 May 2024 07:00:30 +0000
Manifest next update: Wed 22 May 2024 07:00:30 +0000
Files and hashes: 1: 8ZQxAqBtcNw-FdBAJlMT_Oti8nE.roa (hash: 1pPNy53rvIqJl5xKtOmqkNxNkKD0TbW59rv72fSPaqY=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: WeWqVl7cJ377KGee2F+LX9csLAWuRp53VQMSNJg4Tn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:f3:9e:2c:b0:cf:7a:d9:d9:d6:6e:75:ea:77:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: May 21 07:00:30 2024 GMT
Not After : May 22 07:00:30 2024 GMT
Subject: CN=38467bc65c950dca8d2c94435fe609720e9a19b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:3b:93:3b:7c:81:d7:8c:0e:88:2f:1f:05:
73:eb:14:2f:30:a2:37:b5:5f:3c:b3:29:17:06:14:
4d:c7:ad:ad:c6:50:33:7c:09:5a:e7:fa:da:bb:c9:
f2:d2:10:5e:45:0d:37:7c:3f:71:b5:68:f5:24:cb:
af:37:74:4b:85:af:6a:b4:e2:d1:e4:51:27:24:e1:
14:97:0a:72:5a:68:b8:38:93:d2:1b:3c:ca:50:b6:
8b:a6:30:1b:07:59:7f:a3:d8:c7:a8:3c:1e:ff:65:
06:90:77:9a:30:03:d9:ac:d9:4b:f4:7b:cf:52:2e:
03:e0:75:92:68:e5:3d:68:3b:4f:a1:ea:16:07:7f:
b6:0f:e9:71:50:50:8f:c2:6e:a5:4c:0f:a1:c2:d0:
2a:bd:e4:e7:b2:c3:46:8f:f4:ce:de:ca:54:ac:91:
79:09:52:6f:65:b3:c4:f7:88:34:1e:50:c7:c3:3d:
be:d7:d1:88:ed:e3:57:cf:08:5d:4c:a8:3f:8b:e7:
66:9a:8a:e2:a1:a1:47:ef:2a:1a:fb:ae:1e:26:b5:
fb:bd:e2:95:12:1f:eb:c7:42:19:d6:de:50:12:48:
01:16:47:24:ce:4c:9e:6e:a2:bb:df:12:2d:ec:b4:
be:b3:c7:67:08:25:bc:0d:06:0f:56:c1:78:72:d2:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:46:7B:C6:5C:95:0D:CA:8D:2C:94:43:5F:E6:09:72:0E:9A:19:B3
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:c8:71:be:0f:2e:0a:be:51:03:c4:ea:54:8e:3c:94:df:
0f:a8:36:a8:8f:31:7d:10:a2:2b:a6:d8:4e:a4:5e:57:85:cc:
6f:40:fb:55:95:a0:62:f6:6c:1a:4b:b9:75:10:5e:00:a7:5c:
5b:e1:84:8f:39:6d:dc:c6:da:29:b7:74:18:21:14:90:40:65:
26:f1:a0:04:f6:d1:c1:df:80:da:d6:d2:65:73:15:b8:e2:ea:
4c:17:d6:7a:0c:56:fc:0d:42:f5:2a:d7:9a:5d:88:7e:5e:54:
18:9c:15:d6:71:8f:4c:da:a6:76:3c:8b:86:af:98:76:18:85:
93:61:4a:93:a7:dd:4d:b0:5b:27:ff:37:03:b9:c7:9a:85:cc:
ad:62:54:1e:b8:7f:04:84:d7:2e:81:e7:5f:24:1f:8a:65:ed:
a0:3c:4c:dc:f5:b6:70:26:34:3f:a7:b7:7c:48:bd:cd:0b:23:
14:d5:6e:a3:f9:2c:1c:e5:f4:83:29:01:99:1b:7f:96:8e:7f:
99:75:0a:60:51:34:34:b0:c6:30:9f:04:93:1c:2c:ed:92:e2:
01:ce:2d:a0:c7:2e:4e:50:dc:d2:01:37:96:24:c3:bf:3f:e1:
5c:d2:dc:82:f2:93:f5:9f:b2:b9:b1:5e:66:52:ed:ee:f0:ce:
ea:f7:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:48:39 2024 by rpki-client on console-ams.rpki-client.org