Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: 3XcxWflqkpTNoafSS99HS35xc3Wo4bEKi0hSdgy+sBk=
Subject key identifier: 23:D7:25:B0:D5:BB:40:E0:80:EF:A3:19:38:A8:D6:67:0D:84:B1:96
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 018F8748A812C81E9FCEDF61BEED2FE5F41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:00:36 +0000
Manifest this update: Fri 17 May 2024 16:00:36 +0000
Manifest next update: Sat 18 May 2024 16:00:36 +0000
Files and hashes: 1: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: 4BxEaCOj/bFi3iAWtQjih0V/5xwjXcAqub33Q7+Eet0=)
2: q4J3dhxiudlZHYxoLN0Ed93d50Q.roa (hash: mXQz6eL6JwM8f/sbta9e7txX1hsF8dS8Z04OEW27AHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:a8:12:c8:1e:9f:ce:df:61:be:ed:2f:e5:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: May 17 16:00:36 2024 GMT
Not After : May 18 16:00:36 2024 GMT
Subject: CN=23d725b0d5bb40e080efa31938a8d6670d84b196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:4c:82:db:1e:af:8b:f2:f9:db:b2:06:7b:
ec:17:91:c7:e5:28:b0:39:fb:81:38:02:9b:e1:99:
8f:ce:02:35:c1:a2:b0:85:cf:9e:2e:77:50:e6:ba:
d4:d4:e0:01:93:e6:11:81:66:9b:2a:85:97:1d:30:
ff:67:64:87:49:20:93:ec:21:73:ee:8b:20:d4:60:
bb:77:83:3e:b7:28:4a:d4:af:52:35:a7:c3:46:76:
9f:9f:a5:60:6f:a9:e4:93:30:22:2b:3d:bb:c5:c3:
61:19:57:6b:e4:e3:aa:80:69:8e:da:37:28:8f:eb:
02:da:2f:80:43:0c:33:e1:35:97:87:04:62:79:4e:
c2:de:93:a7:4b:a6:f5:e0:39:9d:7f:7a:0b:5a:ee:
de:a7:64:7a:34:6e:ed:aa:e8:46:10:db:77:ea:ca:
88:c9:08:7b:73:f1:3d:f0:53:30:c3:33:ca:63:b2:
7b:d1:15:b9:c8:46:a1:a4:2a:86:9f:39:c5:08:09:
5a:5f:bd:8a:29:52:18:a2:0d:e6:75:25:c4:c0:a7:
75:da:26:69:2f:b6:bd:89:5a:56:ec:d1:a1:06:57:
58:40:64:20:3b:b8:a5:a2:8d:e0:03:5c:ae:b5:ad:
3f:65:a8:c7:9e:69:23:01:84:ad:da:8f:4c:10:de:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:25:B0:D5:BB:40:E0:80:EF:A3:19:38:A8:D6:67:0D:84:B1:96
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3f:e7:0f:95:59:e0:da:12:28:54:16:25:c3:6d:a4:c8:07:
8e:09:3b:99:f7:85:ce:4d:6e:46:c5:a7:8e:5a:c7:a0:b5:ae:
2e:2b:cc:aa:53:f4:e8:10:92:9b:7c:ca:ad:a9:d9:dd:50:7f:
7e:f6:3b:98:b8:85:d7:10:d0:5a:a1:c8:9e:ab:e5:de:cc:d6:
c1:a2:74:2d:8a:65:7d:28:cf:19:c5:d5:06:35:19:b8:6a:17:
13:66:1f:6b:7d:7f:73:4f:6f:d2:e8:ba:fc:53:d0:35:ac:56:
4b:82:27:f5:d0:14:65:17:f6:5a:6d:1a:84:18:57:e5:ad:77:
22:83:dc:78:72:f1:d1:a6:f3:97:e1:78:e4:a3:54:f7:a6:e3:
9d:01:d0:c3:a5:f1:54:42:98:db:88:c6:7b:1e:bc:9c:ce:51:
18:88:67:b7:d4:11:f1:12:2a:79:a3:b4:94:79:01:07:b4:8f:
74:01:c4:b1:fd:48:e7:12:0e:39:7b:cb:7a:ce:73:d4:9d:71:
1e:bd:2f:51:81:fe:d8:c1:d5:87:5a:ac:b1:84:de:d4:99:77:
20:e7:b5:48:31:35:9a:e2:bd:38:76:fc:4b:86:48:c8:9e:a4:
6f:75:5c:f3:fc:c6:16:30:1a:c9:fa:5b:ec:78:ca:7f:f5:b4:
75:5f:f0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSKgSyB6fzt9hvu0v5fQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh
M2IzNDkwHhcNMjQwNTE3MTYwMDM2WhcNMjQwNTE4MTYwMDM2WjAzMTEwLwYDVQQD
EygyM2Q3MjViMGQ1YmI0MGUwODBlZmEzMTkzOGE4ZDY2NzBkODRiMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolFMgtser4vy+duyBnvsF5HH5Siw
OfuBOAKb4ZmPzgI1waKwhc+eLndQ5rrU1OABk+YRgWabKoWXHTD/Z2SHSSCT7CFz
7osg1GC7d4M+tyhK1K9SNafDRnafn6Vgb6nkkzAiKz27xcNhGVdr5OOqgGmO2jco
j+sC2i+AQwwz4TWXhwRieU7C3pOnS6b14Dmdf3oLWu7ep2R6NG7tquhGENt36sqI
yQh7c/E98FMwwzPKY7J70RW5yEahpCqGnznFCAlaX72KKVIYog3mdSXEwKd12iZp
L7a9iVpW7NGhBldYQGQgO7iloo3gA1yuta0/ZajHnmkjAYSt2o9MEN4QZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPXJbDVu0DggO+jGTio1mcNhLGWMB8GA1UdIwQY
MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt
Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj
LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj/nD5VZ
4NoSKFQWJcNtpMgHjgk7mfeFzk1uRsWnjlrHoLWuLivMqlP06BCSm3zKranZ3VB/
fvY7mLiF1xDQWqHInqvl3szWwaJ0LYplfSjPGcXVBjUZuGoXE2Yfa31/c09v0ui6
/FPQNaxWS4In9dAUZRf2Wm0ahBhX5a13IoPceHLx0abzl+F45KNU96bjnQHQw6Xx
VEKY24jGex68nM5RGIhnt9QR8RIqeaO0lHkBB7SPdAHEsf1I5xIOOXvLes5z1J1x
Hr0vUYH+2MHVh1qssYTe1Jl3IOe1SDE1muK9OHb8S4ZIyJ6kb3Vc8/zGFjAayfpb
7HjKf/W0dV/wEw==
-----END CERTIFICATE-----
Generated at Fri May 17 23:57:46 2024 by rpki-client on console-fra.rpki-client.org