Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: 6hLTksVFGjQDx4SLSNxHlFiCHaZs0g8/wxcNYLZpMe0=
Subject key identifier: 36:CE:57:AE:C1:A8:3D:BC:A1:46:22:EE:68:C9:3F:56:43:E3:A3:F2
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 018F22DEA69530C4CDC829D68A33A45F2035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0A7D
Signing time: Sun 28 Apr 2024 04:02:47 +0000
Manifest this update: Sun 28 Apr 2024 04:02:47 +0000
Manifest next update: Mon 29 Apr 2024 04:02:47 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: xikXPPWiNhLbQpbliThkizUUbxRbCaNwA+XOvcqHM4k=)
2: rKqbXRvvTUDzQPngPev2jP9QaiA.roa (hash: onbz3TavZ/XF/63Ud5TAQxVrFNcklSHrTcPVsukG/lA=)
3: vEVL8LBdDyq0nSK8oWqo6_5WfcY.roa (hash: sk3ugrqlfM/fU+UrzoT6JLHIbCrJlg3CGwOTB4++8bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:de:a6:95:30:c4:cd:c8:29:d6:8a:33:a4:5f:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Apr 28 04:02:47 2024 GMT
Not After : Apr 29 04:02:47 2024 GMT
Subject: CN=36ce57aec1a83dbca14622ee68c93f5643e3a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:d6:85:56:87:f2:26:41:7a:d1:57:12:64:
1c:70:1a:55:98:23:55:0c:c1:0f:dc:7d:a6:e9:58:
98:9c:81:8c:48:6a:7e:be:2c:63:ee:4a:03:10:92:
78:64:4a:9f:d9:f7:39:dd:cc:94:8e:62:92:eb:ef:
d0:92:25:fa:fe:d9:bf:82:57:07:d9:80:b3:bb:ee:
fa:ca:d7:ea:f7:41:f8:e2:50:a9:05:61:91:3f:17:
f8:1d:9b:7d:87:d1:ab:ca:ea:65:a9:e1:f5:a4:97:
e2:53:94:91:88:9a:ba:03:2b:ef:65:89:83:b9:a3:
23:ab:36:ca:e3:09:84:ff:dd:f4:f4:38:68:81:90:
96:d0:81:30:63:ab:d2:93:92:e3:b2:59:75:cc:17:
f2:31:f8:26:11:c7:ed:93:68:e6:b3:66:a2:80:1e:
fa:d7:f4:a6:32:40:bb:8e:46:35:f3:7f:ec:38:aa:
29:9a:aa:37:cb:af:7c:43:6b:57:fb:31:41:44:a1:
5a:b0:e9:26:0a:1e:02:54:bf:f4:d8:e0:41:d8:f7:
e8:37:9a:3c:a7:08:97:2b:e9:32:b8:24:b5:93:94:
00:17:24:58:cf:b3:e3:d2:34:b9:1d:35:f8:79:95:
13:03:65:46:71:b6:dd:37:01:f2:38:64:93:d0:dc:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CE:57:AE:C1:A8:3D:BC:A1:46:22:EE:68:C9:3F:56:43:E3:A3:F2
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:00:28:3d:a1:ec:f5:51:73:57:8d:94:37:aa:2f:5f:19:
47:e6:1c:b0:31:e9:67:98:fd:dd:2a:a3:16:d8:19:ca:4f:22:
20:76:1b:a8:85:7e:20:cc:0a:0f:8f:5e:df:eb:74:c5:dc:d8:
31:3f:b3:b4:98:10:c5:d8:db:52:ab:e2:02:d6:6b:77:b0:f9:
61:90:c6:91:ad:c6:f8:17:ef:7b:b3:0d:21:e9:11:7e:5b:e4:
1a:d7:2f:69:7d:a8:d2:3c:a6:e9:1c:ee:74:4d:ec:dd:eb:b0:
cc:03:cb:0f:30:2a:f6:4e:98:88:6d:bd:89:85:a7:2f:46:5d:
6d:e1:29:ca:5b:42:79:97:a5:e8:33:fa:b5:2d:4b:3c:3c:38:
92:84:ec:de:4d:05:4c:1d:ef:1c:2e:9c:ec:36:bd:fc:42:51:
8d:02:88:f9:05:a3:ff:8e:36:ee:f0:c5:50:54:63:30:90:67:
8a:9a:c3:6a:6c:dd:2f:e2:82:94:fe:82:7a:ac:b6:2c:8b:78:
f0:db:50:b3:8d:66:ca:cd:ce:ff:02:47:bf:22:f6:a2:6a:21:
5c:fc:8b:57:6d:0e:54:60:de:08:bd:fd:bf:cc:ea:7b:7c:5b:
89:6e:ab:e9:da:ec:6a:58:4a:1c:f2:bf:36:84:84:a1:f0:36:
d1:a7:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:42:50 2024 by rpki-client on console-ams.rpki-client.org