Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: gPc0ueOk+hAJz74da0OhnsVSYY3zvfxuG93kwVMYxDs=
Subject key identifier: 81:69:C2:09:B6:A0:8D:E8:58:8E:06:24:61:6A:AA:C4:37:E7:69:B7
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 018F215C50370AB99B53A56C3E763966A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 113F
Signing time: Sat 27 Apr 2024 21:00:48 +0000
Manifest this update: Sat 27 Apr 2024 21:00:48 +0000
Manifest next update: Sun 28 Apr 2024 21:00:48 +0000
Files and hashes: 1: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: dwBqcg/qo8Kl905wpcKNbYFn3X2pyfL1K+gTocwQRP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:21:5c:50:37:0a:b9:9b:53:a5:6c:3e:76:39:66:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Apr 27 21:00:48 2024 GMT
Not After : Apr 28 21:00:48 2024 GMT
Subject: CN=8169c209b6a08de8588e0624616aaac437e769b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:8c:20:f0:d4:c2:9f:68:ff:67:d2:97:cf:
a1:69:75:95:1c:8d:fc:b7:d1:13:94:7c:19:58:32:
5f:10:67:aa:9d:e5:e7:e6:d6:42:a3:18:6e:a9:d1:
45:49:5a:35:b8:ea:a8:80:c8:a9:e8:d9:d0:46:e3:
0a:f6:30:0e:3b:3e:c1:79:6b:91:5f:4b:38:0a:02:
bb:fc:c5:ee:c9:6d:2f:b6:04:96:44:63:bd:57:37:
96:41:41:a9:2f:6b:07:04:97:87:5b:94:c3:13:18:
89:e5:96:21:f6:88:00:03:21:da:6f:d6:df:52:24:
84:1a:e2:8e:ea:dd:a5:9f:05:c9:72:3c:80:76:ae:
b9:a3:96:87:b0:5a:bf:96:60:56:8c:28:1f:03:b2:
f8:83:48:75:f4:87:b7:db:d7:bb:cd:ee:a0:62:66:
95:76:5b:bc:85:4a:a1:bc:23:34:83:b7:fd:ed:6c:
5f:a7:59:55:cb:0d:bc:43:18:11:bf:7d:36:28:9d:
4b:88:e8:67:e1:1e:2a:60:0e:2f:31:1b:ff:fb:56:
4b:4a:0b:19:33:e5:0a:7e:55:8c:ae:77:fe:cc:ef:
3b:37:cd:f8:60:57:61:fa:1e:ab:1e:7f:7c:d7:40:
dd:88:4d:cd:ff:44:1b:37:18:d8:1a:5f:6f:7a:84:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:C2:09:B6:A0:8D:E8:58:8E:06:24:61:6A:AA:C4:37:E7:69:B7
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a6:64:aa:0a:8f:36:95:00:5e:c3:ca:bf:ea:2d:57:06:e2:
af:cc:2c:d3:27:aa:d3:68:1b:73:bf:ff:16:c7:e2:30:91:2d:
a7:fa:de:ec:cb:72:34:d7:e5:e6:c9:1b:0b:2b:96:be:4f:ac:
3c:97:85:45:c5:03:9e:0d:ec:c5:14:6e:05:1b:8a:2d:f1:38:
c6:3b:32:9a:a4:58:f1:85:38:52:ed:12:87:44:ba:42:84:5e:
d5:56:6a:7c:a5:c5:41:e0:0a:0b:30:32:dc:92:ad:37:08:f7:
e1:64:7b:8d:7c:ba:9a:18:92:bb:64:65:36:d2:12:78:ab:d6:
ad:3a:d4:07:19:f4:a8:24:09:4a:8d:cf:1f:74:bb:a1:bd:6e:
e3:52:9e:0e:95:46:db:e6:18:77:4f:1b:ce:8b:8e:3d:af:05:
9c:d9:0c:9d:db:4e:f4:34:9f:95:a4:05:57:27:a3:5b:70:5f:
6f:86:fa:0b:7d:d4:9f:5b:de:4e:e3:cb:64:8d:d2:d2:66:b8:
9e:d5:3e:0a:11:10:e5:d1:37:ab:3e:38:32:26:86:43:49:ad:
8a:67:75:f5:8f:0a:f1:fd:34:17:96:c6:6c:d0:ad:54:fd:0c:
d3:8b:66:b3:0c:92:12:e8:82:96:5d:03:a4:fb:1b:41:2e:4c:
3b:d9:1f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8hXFA3CrmbU6VsPnY5ZqCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2M2RjM2MyNTllNjBiMmM5ODY4MDJkZDYwMjExMTVl
OGJmMWYwHhcNMjQwNDI3MjEwMDQ4WhcNMjQwNDI4MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg4MTY5YzIwOWI2YTA4ZGU4NTg4ZTA2MjQ2MTZhYWFjNDM3ZTc2OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkWMIPDUwp9o/2fSl8+haXWVHI38
t9ETlHwZWDJfEGeqneXn5tZCoxhuqdFFSVo1uOqogMip6NnQRuMK9jAOOz7BeWuR
X0s4CgK7/MXuyW0vtgSWRGO9VzeWQUGpL2sHBJeHW5TDExiJ5ZYh9ogAAyHab9bf
UiSEGuKO6t2lnwXJcjyAdq65o5aHsFq/lmBWjCgfA7L4g0h19Ie329e7ze6gYmaV
dlu8hUqhvCM0g7f97Wxfp1lVyw28QxgRv302KJ1LiOhn4R4qYA4vMRv/+1ZLSgsZ
M+UKflWMrnf+zO87N834YFdh+h6rHn9810DdiE3N/0QbNxjYGl9veoSRMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFpwgm2oI3oWI4GJGFqqsQ352m3MB8GA1UdIwQY
MBaAFAN4Y9w8JZ5gssmGgC3WAhEV6L8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWIt
ZDlmMzAxODY4ZWYzLzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWItZDlmMzAxODY4ZWYz
LzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2KZkqgqP
NpUAXsPKv+otVwbir8ws0yeq02gbc7//FsfiMJEtp/re7MtyNNfl5skbCyuWvk+s
PJeFRcUDng3sxRRuBRuKLfE4xjsymqRY8YU4Uu0Sh0S6QoRe1VZqfKXFQeAKCzAy
3JKtNwj34WR7jXy6mhiSu2RlNtISeKvWrTrUBxn0qCQJSo3PH3S7ob1u41KeDpVG
2+YYd08bzouOPa8FnNkMndtO9DSflaQFVyejW3Bfb4b6C33Un1veTuPLZI3S0ma4
ntU+ChEQ5dE3qz44MiaGQ0mtimd19Y8K8f00F5bGbNCtVP0M04tmswySEuiCll0D
pPsbQS5MO9kf3g==
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:51:42 2024 by rpki-client on console-ams.rpki-client.org