Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: WDRkzFLFARJa+UhZgkVEGRAim+7mfSwa89sB6lH4ADU=
Subject key identifier: 3E:FA:8C:13:F9:33:91:9C:FF:29:9D:96:0C:57:57:6A:56:C1:B4:64
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 018F4A22161D2155A7CD50301CCA18C77534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1155
Signing time: Sun 05 May 2024 19:01:38 +0000
Manifest this update: Sun 05 May 2024 19:01:38 +0000
Manifest next update: Mon 06 May 2024 19:01:38 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: E5Y/rL5nCfC1WUVA+Onrmj5MPiEZXYyTjZYGLUAKLGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:22:16:1d:21:55:a7:cd:50:30:1c:ca:18:c7:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: May 5 19:01:38 2024 GMT
Not After : May 6 19:01:38 2024 GMT
Subject: CN=3efa8c13f933919cff299d960c57576a56c1b464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:81:4a:7e:ac:3f:86:a8:22:28:f3:2a:0a:
0c:87:d6:12:ec:c0:e9:a3:57:a4:03:9a:7f:5c:63:
f7:07:d0:b1:47:f9:55:60:fe:34:de:2e:13:f9:01:
58:d3:92:c3:5b:ef:8f:70:44:2f:3b:c0:8f:93:67:
45:88:f0:a7:62:cc:a1:9d:c9:02:51:08:83:57:cf:
aa:6a:2d:db:e5:b9:ae:c9:9c:fb:fb:30:a2:97:1b:
1d:e9:53:19:08:d3:92:08:e7:c6:11:85:ab:e7:28:
ba:6a:ec:fe:d6:84:21:e7:a7:a1:09:27:9a:76:93:
e1:74:ba:1a:79:87:16:68:d0:74:0f:f5:37:4c:f3:
ca:38:61:2a:53:46:4e:4b:20:79:1a:d4:74:a9:fc:
3d:60:32:b8:5b:6a:79:78:4d:af:fa:fe:19:11:0f:
30:19:44:08:2b:ea:a0:ac:8b:88:36:31:8f:8b:5f:
98:e5:91:51:df:7b:de:59:53:02:3f:d2:f2:60:16:
f3:d5:4a:86:de:09:f9:6d:e7:18:d9:fc:96:28:b0:
98:52:ae:eb:70:b1:e0:06:e4:95:20:c2:34:33:7a:
b5:eb:d0:58:be:c8:14:ce:4b:e2:db:54:53:de:7f:
6a:8c:19:a3:2f:4a:fe:08:d9:e8:75:67:a8:16:49:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:8C:13:F9:33:91:9C:FF:29:9D:96:0C:57:57:6A:56:C1:B4:64
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ef:06:97:28:07:37:2b:0c:70:14:db:3f:c8:0b:ec:b4:bb:
3c:a7:24:8f:4b:f3:2b:de:0c:1c:3a:06:19:c5:a0:af:e1:d7:
94:df:87:e0:7b:40:bf:83:fe:37:f2:5c:9b:be:f0:5c:e8:71:
fe:ee:19:5c:0e:ba:86:72:55:c2:06:d4:e7:d4:16:d4:17:b4:
b1:16:3b:18:b4:cb:8f:df:ce:0d:6b:5d:a0:dc:4f:59:44:a8:
53:a1:47:dd:25:0e:8e:64:3a:b5:88:ca:79:f0:b4:08:9c:da:
04:48:83:35:e7:68:46:28:42:dc:63:98:6a:03:6d:8e:13:2f:
eb:5a:94:62:8f:8b:7f:d3:1d:d5:70:f4:71:6d:db:de:c3:54:
96:85:f8:87:d0:53:b0:82:57:f7:5d:1f:71:c0:49:d2:95:ab:
69:f4:d2:0f:11:b6:44:76:22:f9:b8:bb:6c:b5:87:71:3e:20:
bb:98:2c:6f:38:9a:24:43:ed:74:95:6a:8c:1c:f4:8d:eb:64:
82:6b:f7:d4:6e:ba:5f:75:ad:b7:51:c9:8e:af:75:af:c3:75:
93:66:3f:a6:2d:82:67:c6:63:fb:84:07:06:97:59:a9:b9:84:
6e:3a:47:37:f8:85:b1:53:58:24:b4:b6:c0:fa:7c:3c:98:62:
63:e4:0a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9KIhYdIVWnzVAwHMoYx3U0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGNmMDdjN2QwNTkzMDJiNTYwNjZhYWY2Y2JlZWMxMzUx
ODZhNDQwHhcNMjQwNTA1MTkwMTM4WhcNMjQwNTA2MTkwMTM4WjAzMTEwLwYDVQQD
EygzZWZhOGMxM2Y5MzM5MTljZmYyOTlkOTYwYzU3NTc2YTU2YzFiNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CBSn6sP4aoIijzKgoMh9YS7MDp
o1ekA5p/XGP3B9CxR/lVYP403i4T+QFY05LDW++PcEQvO8CPk2dFiPCnYsyhnckC
UQiDV8+qai3b5bmuyZz7+zCilxsd6VMZCNOSCOfGEYWr5yi6auz+1oQh56ehCSea
dpPhdLoaeYcWaNB0D/U3TPPKOGEqU0ZOSyB5GtR0qfw9YDK4W2p5eE2v+v4ZEQ8w
GUQIK+qgrIuINjGPi1+Y5ZFR33veWVMCP9LyYBbz1UqG3gn5becY2fyWKLCYUq7r
cLHgBuSVIMI0M3q169BYvsgUzkvi21RT3n9qjBmjL0r+CNnodWeoFkljVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD76jBP5M5Gc/ymdlgxXV2pWwbRkMB8GA1UdIwQY
MBaAFABM8Hx9BZMCtWBmqvbL7sE1GGpEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTIt
NmU1NDViNmM0M2IwLzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZjM3YTgtYjkzNy00YzZhLTk5MTItNmU1NDViNmM0M2Iw
LzEvQUV6d2ZIMEZrd0sxWUdhcTlzdnV3VFVZYWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO8GlygH
NysMcBTbP8gL7LS7PKckj0vzK94MHDoGGcWgr+HXlN+H4HtAv4P+N/Jcm77wXOhx
/u4ZXA66hnJVwgbU59QW1Be0sRY7GLTLj9/ODWtdoNxPWUSoU6FH3SUOjmQ6tYjK
efC0CJzaBEiDNedoRihC3GOYagNtjhMv61qUYo+Lf9Md1XD0cW3b3sNUloX4h9BT
sIJX910fccBJ0pWrafTSDxG2RHYi+bi7bLWHcT4gu5gsbziaJEPtdJVqjBz0jetk
gmv31G66X3Wtt1HJjq91r8N1k2Y/pi2CZ8Zj+4QHBpdZqbmEbjpHN/iFsVNYJLS2
wPp8PJhiY+QKaw==
-----END CERTIFICATE-----
Generated at Mon May 6 04:12:15 2024 by rpki-client on console-ams.rpki-client.org