Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: Sj1TYU3/Ft5Kwte8AZr+ErEpaqowMRcc4mICo38880g=
Subject key identifier: BB:4B:DE:26:FF:BA:F5:D9:DA:F1:0C:37:47:62:85:8C:C4:CA:26:BD
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 018F4F49E5EECF340887488D715263F0CF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 1166
Signing time: Mon 06 May 2024 19:03:13 +0000
Manifest this update: Mon 06 May 2024 19:03:13 +0000
Manifest next update: Tue 07 May 2024 19:03:13 +0000
Files and hashes: 1: 12y-MmmWpSv2GWOd1v0iZICHr8M.roa (hash: jiSyFOz7ms7zzGyI/Qx3rRa2Xt4fe0Hui2tHD/jCAWk=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: cf53xlMvUBrzctkTo6m0mBwcWxbg4pBBOOHRSH/HtbQ=)
3: qKpM9MB8zJPXlCCWAH_r25O0-ko.roa (hash: Fgq2H49BwRz99FxRPavwZkW4GLac/KXaHo4ffV6SBa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:49:e5:ee:cf:34:08:87:48:8d:71:52:63:f0:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: May 6 19:03:13 2024 GMT
Not After : May 7 19:03:13 2024 GMT
Subject: CN=bb4bde26ffbaf5d9daf10c374762858cc4ca26bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:a5:7f:dc:14:1b:88:60:59:5b:f3:2f:b4:
c8:2b:f5:93:09:d4:f7:92:82:84:4c:35:2a:b4:4c:
a3:5c:7b:41:ac:fb:ca:ba:5f:d2:79:6e:c9:af:3a:
31:06:31:1f:7c:f7:b2:ea:0b:2a:24:15:e8:08:0c:
e1:92:84:0d:93:32:cc:a0:bd:0e:70:e5:62:c9:75:
eb:46:1b:4a:93:0e:95:8c:95:f4:de:34:f5:64:3c:
ac:46:2f:42:eb:b2:15:c7:f0:19:0b:3e:99:d4:26:
f8:b3:6c:f9:cd:e5:b5:70:b0:09:0b:42:a3:cd:4c:
46:d8:ea:29:18:91:34:06:23:de:b0:6a:c7:61:9d:
65:ae:5d:72:44:27:ea:6c:e4:cd:02:5b:d0:2c:90:
4c:00:3e:79:d0:ab:19:63:1b:8b:67:7d:c6:a1:0a:
59:a8:99:6a:2a:6c:2c:49:e5:e6:0f:ee:e2:1a:62:
76:ae:d0:bf:db:f3:32:e0:ec:21:c6:f1:06:74:81:
84:5d:ef:3b:24:ee:ed:df:f7:6e:c5:2a:16:e9:c0:
b0:70:a2:7f:7b:da:dd:ab:ca:c9:bc:2d:e4:95:19:
2f:87:73:d7:65:e7:c8:9b:a9:51:66:77:ba:cb:c1:
f2:62:dd:fd:de:ad:20:b4:38:07:9c:17:0e:5c:92:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:DE:26:FF:BA:F5:D9:DA:F1:0C:37:47:62:85:8C:C4:CA:26:BD
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:29:27:33:20:3d:aa:da:4b:13:22:09:b8:ae:f3:15:52:11:
9b:b3:bf:d8:a4:85:69:09:3d:06:11:e3:ce:c7:9f:3a:2d:fc:
71:be:a4:80:75:7d:34:5e:1f:59:9c:bc:70:a0:33:6e:fc:c9:
b5:5f:c0:4d:2c:bb:3e:5b:b0:4b:a7:8e:03:e8:ee:16:75:4d:
0a:7f:6c:be:80:3b:f6:f3:21:0d:98:c5:67:a4:4d:78:b4:04:
25:5e:55:ed:fa:cc:d0:21:fb:22:b0:d0:4e:87:f8:e7:f5:c3:
d8:6a:f6:84:02:25:9a:89:64:e0:3d:ac:e1:8d:ad:26:f3:b8:
1d:39:60:bf:b1:e7:61:f0:d1:25:26:db:bd:ff:28:ae:fe:51:
ad:bb:a5:1e:d5:63:fc:e0:16:69:85:45:3e:f9:e7:87:79:d2:
f9:ef:90:a5:c2:94:c8:41:f6:7c:85:b5:1c:1e:f2:dd:a0:1d:
5a:8a:4f:f4:03:0f:35:06:33:c9:5b:3b:d0:06:13:d0:31:81:
2b:4c:1d:23:fe:97:b6:89:af:18:51:ef:07:6f:c5:3c:b9:71:
5f:b1:03:dd:69:70:54:e7:d8:8b:ac:db:ad:9b:4e:0e:7f:f7:
15:4e:0a:fc:9f:cc:c4:21:aa:f0:96:a0:aa:3f:dc:a4:e0:46:
76:ec:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:12:29 2024 by rpki-client on console-ams.rpki-client.org