Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: 9Rt0GWiCQYHuBpjSbmItGp0XB50pt39OuRKtYAD2x+k=
Subject key identifier: B9:CC:90:8C:13:EF:BB:91:98:BA:39:A2:02:E9:1D:93:71:5A:F1:8E
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 018F3C9D377DFE2F6A66E461A3884029B62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 10A6
Signing time: Fri 03 May 2024 04:01:27 +0000
Manifest this update: Fri 03 May 2024 04:01:27 +0000
Manifest next update: Sat 04 May 2024 04:01:27 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: cK2vLNZRF7ilB9j6gSAgimevr50kafW8mruSNr6kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9d:37:7d:fe:2f:6a:66:e4:61:a3:88:40:29:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: May 3 04:01:27 2024 GMT
Not After : May 4 04:01:27 2024 GMT
Subject: CN=b9cc908c13efbb9198ba39a202e91d93715af18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:10:97:ac:22:1f:b9:56:ef:e5:ff:6f:b7:02:
bd:f8:89:da:2f:6e:94:6d:a1:01:6c:3e:80:7e:0b:
a7:56:fe:58:fd:ef:9c:96:0f:45:b8:35:78:a5:6f:
cd:ee:6f:90:0e:1b:17:66:83:51:f4:08:01:f6:23:
9a:d7:cc:11:27:7a:ad:90:7f:15:b0:d8:61:2b:74:
74:e6:d6:d6:ba:0c:4d:73:65:af:2d:76:96:99:2c:
ee:53:78:b7:0a:51:c9:3d:8e:d6:bc:a6:39:72:9d:
2b:63:dc:b5:20:6c:36:00:41:5b:e7:57:83:6a:6f:
e9:42:50:97:51:4d:04:78:9f:31:31:60:c4:6c:bc:
42:0c:5b:d7:55:84:35:84:70:32:25:f5:51:1b:ae:
5b:0d:8f:9d:5d:a6:84:b5:11:36:69:db:14:7b:98:
36:29:a3:7a:c8:01:e3:ce:c1:50:c4:bf:71:74:4d:
6b:42:c5:b9:14:05:a3:43:c1:8f:99:49:81:37:12:
66:0e:97:57:f1:09:7d:ae:cc:90:ca:bd:c7:3c:fb:
22:94:b6:56:17:b3:d2:3b:8c:1f:61:9f:62:41:96:
2c:f1:eb:be:cc:7b:bb:bd:ca:16:35:71:74:7e:35:
6a:76:75:07:67:4b:1c:22:00:f3:4d:65:89:17:4c:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:90:8C:13:EF:BB:91:98:BA:39:A2:02:E9:1D:93:71:5A:F1:8E
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:d0:56:a2:1a:a9:29:7b:32:50:ac:20:44:b6:d0:1c:3f:
3d:2b:53:8e:13:03:17:83:d4:04:d7:46:e5:5a:7f:81:1e:3c:
53:43:1c:f6:04:72:3d:0c:7f:36:34:c1:a9:27:fb:6d:76:0a:
b2:c3:ea:54:68:e1:dd:6f:69:b6:79:bb:84:a2:5f:c8:54:9f:
d4:10:3f:01:38:e9:2b:ef:38:ba:3b:d9:6a:33:67:fd:e0:31:
06:d6:8f:ec:bc:26:ff:28:2b:8c:3a:c1:77:bf:e0:2f:68:7f:
c5:07:ce:36:c9:1b:95:8d:80:5f:26:cb:9a:e9:bc:d4:39:68:
3a:7e:4c:3b:08:7b:93:70:e3:06:c9:b9:6b:f3:04:a3:7d:bd:
ed:04:af:bc:76:36:f7:59:57:32:7c:17:1e:74:43:70:07:9a:
4f:b5:ee:4d:1e:27:95:65:fa:ea:f1:a0:bd:c2:3d:fd:05:78:
32:4a:6a:63:b3:97:88:a4:b2:90:3c:05:e4:5f:35:2d:e5:29:
3e:ce:42:55:2a:6c:31:4e:70:07:96:a0:c7:51:e2:3b:9c:38:
63:62:61:81:e1:86:74:ff:33:c0:af:8a:df:62:60:6e:86:56:
82:d9:8b:52:e3:58:4d:f5:0f:86:8f:16:79:aa:36:65:b2:fc:
a7:0d:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:52:49 2024 by rpki-client on console-fra.rpki-client.org