Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: lvIv7V5jtgpRJbUPnuIHROc8rC0iT2qM/eMgzsT6qOg=
Subject key identifier: F5:BF:CA:21:76:8D:F3:79:DD:29:59:18:A9:FF:81:64:1C:BE:02:14
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 018F1E5B0CC5BE9698157D110CAB5B4BC5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1142
Signing time: Sat 27 Apr 2024 07:00:34 +0000
Manifest this update: Sat 27 Apr 2024 07:00:34 +0000
Manifest next update: Sun 28 Apr 2024 07:00:34 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: JmNG9Y7vVYtaMl+xJDYwr7Qi7AVXjc9VnOOSFrU6pbo=)
2: QTS4pfPguVgwQOFWzW9C_NpOfKI.roa (hash: G9Srle6Lels3XGCDmkX8WgVcp/8GB5hWE5Dbnx7LpNk=)
3: ryjIHr3uxiOHc6XK7RzVWr7JeBI.roa (hash: BKN1KBVK/1UKQo8P6rAhFlYMidJGtHkL2LKINCyxs50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:5b:0c:c5:be:96:98:15:7d:11:0c:ab:5b:4b:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Apr 27 07:00:34 2024 GMT
Not After : Apr 28 07:00:34 2024 GMT
Subject: CN=f5bfca21768df379dd295918a9ff81641cbe0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:7f:f7:dd:d2:6b:14:8b:6e:c8:56:0c:97:
48:87:7e:25:5a:03:b3:db:9b:40:68:29:50:54:01:
8a:f5:ee:00:4e:39:fe:67:64:b8:d4:39:88:89:67:
df:f9:4c:07:37:7b:38:4a:24:7e:91:a3:12:74:92:
e7:e8:c8:99:dd:c6:f9:89:4f:5f:76:6f:6f:19:0f:
3c:b5:84:e9:88:5b:60:78:7a:8a:04:67:46:91:0d:
42:62:fc:1f:f6:37:a0:6e:0f:5e:24:df:68:e0:bc:
42:f2:5a:b1:51:67:09:05:b2:ab:61:e4:8b:c1:8f:
c6:b0:21:d9:e0:ba:f8:31:c2:c4:58:f7:b7:b5:24:
a1:63:1e:b9:f8:6a:a9:1d:90:93:e8:46:1c:da:c8:
55:d7:97:5a:7d:9a:bb:68:ef:1d:ac:c9:10:75:cd:
c8:9d:e2:5c:f8:22:9c:a4:38:0a:b7:15:c3:87:58:
08:ed:8c:96:6b:ef:39:1c:5c:bc:98:06:27:6a:5b:
02:39:81:02:29:e8:06:db:75:e2:ae:db:f5:8a:c4:
c7:82:9b:30:ef:d7:f9:e5:67:ba:3d:ed:85:31:c4:
66:73:b1:ad:4c:26:46:4d:99:49:14:e7:8e:0b:f2:
10:96:90:c5:30:06:88:f2:dd:f0:2d:71:10:ca:64:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:CA:21:76:8D:F3:79:DD:29:59:18:A9:FF:81:64:1C:BE:02:14
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:52:27:f2:5c:e4:0f:84:6d:96:90:3a:0b:ff:eb:7f:9f:
c4:ac:e1:f9:e0:15:ca:36:fb:c2:2c:47:44:99:4d:6f:7a:ff:
c6:9f:e1:66:9c:0d:23:9a:6e:83:75:d1:8b:f0:1d:75:f6:d6:
25:a8:0b:b7:76:b4:16:63:e3:77:43:e2:43:b3:98:62:34:a5:
fa:dd:f7:57:7f:67:02:25:6e:95:0b:3a:be:f8:b5:14:3f:a3:
4a:12:d1:92:1b:3e:f1:db:80:6a:73:f3:d5:67:28:61:dc:8b:
1f:bb:f0:cb:a2:fb:cb:bf:02:a3:48:2b:c1:37:0c:af:ee:e2:
14:ae:e6:11:79:0f:ad:aa:cf:ab:25:fe:f7:cb:7b:a3:74:a5:
e6:70:4c:18:b3:df:03:95:e8:9d:43:aa:90:40:39:4d:1a:50:
ae:e8:d4:f0:c6:80:84:00:28:05:c5:a0:84:7d:16:f3:8b:29:
72:a7:ad:02:66:49:ed:55:d7:70:42:c3:4a:3c:51:76:9f:9a:
ea:ad:1c:52:6c:a6:d4:98:e1:65:59:d3:36:65:41:c5:96:a9:
d5:ba:ae:ad:68:b4:f6:0c:e4:81:b1:50:03:f2:96:05:11:3f:
47:86:3c:dc:56:b3:36:42:f8:57:ca:d0:02:50:21:52:fa:16:
6a:3d:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:07:40 2024 by rpki-client on console-ams.rpki-client.org