Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: mu1rfVOjAcS+VM3qr3Eq+yZ/QMyzXX6yt8UCQPyISa0=
Subject key identifier: 38:42:0E:AF:62:29:AB:4D:B1:C3:E0:FB:FD:3A:11:9B:14:32:9D:FE
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 018F5B4C784C6E6A81DCD22A8D1DE9F5144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1167
Signing time: Thu 09 May 2024 03:01:29 +0000
Manifest this update: Thu 09 May 2024 03:01:29 +0000
Manifest next update: Fri 10 May 2024 03:01:29 +0000
Files and hashes: 1: BTI-OYejCfxokvrBtx66yR0xxfQ.roa (hash: eNpdcBNXcPMpX4iV3EDVeSvtYyJQoN0Hkku4w31OCME=)
2: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: mV6U0dG4w+VVBD1qMpyKgjdcHrJ5wt1sooW3p8k1/jU=)
3: toKfpwwFZSo8wfW0MN1VmNaFSWs.roa (hash: lYL4YhuLB3v741Ox5CSxyOoqL+IqWH9Jn+pHD80R9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:4c:78:4c:6e:6a:81:dc:d2:2a:8d:1d:e9:f5:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: May 9 03:01:29 2024 GMT
Not After : May 10 03:01:29 2024 GMT
Subject: CN=38420eaf6229ab4db1c3e0fbfd3a119b14329dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:12:c7:84:3d:02:63:25:61:a6:41:8d:96:
a7:6b:6d:b5:0e:51:1a:43:0a:8f:d8:23:55:be:7f:
2f:f6:7f:a8:f8:06:67:15:81:d5:7d:65:7c:2b:ba:
05:bc:85:e9:dd:43:d9:70:5a:b8:ce:d3:6b:3f:c3:
b9:dc:e3:ee:9b:53:20:64:ca:76:55:0b:46:82:dd:
ee:ac:1d:05:25:cb:7c:dd:80:9e:23:f0:e6:a9:fc:
60:0e:4c:0f:73:ef:fe:49:ac:3e:21:43:79:c0:8e:
7d:6e:dc:be:55:d4:4c:cc:8c:a3:19:52:6a:ab:bc:
d8:49:b1:46:9b:f3:61:26:02:8c:c6:87:e1:c6:0e:
c1:69:0b:f8:b4:94:6a:e3:77:0f:e6:c1:b1:3b:78:
41:20:f3:e6:37:0c:9e:3b:ce:23:58:21:22:74:ce:
4c:ae:94:7f:3e:c5:60:e0:ad:5c:7b:31:89:74:4e:
26:c1:63:4a:18:1c:ac:20:1b:b2:5d:ed:52:5d:06:
44:5d:4c:98:1f:5f:da:40:62:d1:1a:e2:78:e2:ee:
bf:63:94:cd:3b:50:82:07:2f:f8:78:4b:eb:63:86:
69:fe:43:6b:c1:c9:e0:42:9d:10:24:8d:17:58:f9:
88:bd:f8:59:61:13:97:6f:dd:6a:6f:08:39:47:6c:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:0E:AF:62:29:AB:4D:B1:C3:E0:FB:FD:3A:11:9B:14:32:9D:FE
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:67:90:91:4c:d5:ba:7f:e4:f7:63:ee:b4:83:43:03:db:7e:
f3:c4:87:db:ee:c0:52:e9:af:83:1b:c6:68:b2:f2:f5:3c:05:
0a:1c:51:59:5e:39:28:eb:5a:c8:e3:20:af:82:4b:fb:47:03:
4b:fd:ec:93:14:b4:f2:01:1f:e1:b2:96:de:a8:e0:ca:6b:89:
50:c1:a0:66:49:50:a6:70:68:3c:1a:e3:90:12:a3:61:d6:38:
37:cb:87:e5:6a:0b:49:4f:c3:fc:b5:82:f2:a8:95:69:a1:3b:
7d:e9:3a:4d:18:f4:aa:07:8a:2c:4e:99:30:69:6d:e6:d8:13:
d2:1e:24:2a:2d:52:9c:0b:c1:85:6a:78:d2:7f:f5:40:d4:05:
ab:47:ef:a9:ea:59:b4:76:92:e3:e2:6b:e6:cb:4d:b3:82:8c:
cb:5c:e1:1b:31:b2:b3:35:64:23:d7:2f:31:fc:ac:1f:b6:6a:
60:7a:67:ca:51:36:4e:0c:82:92:d8:67:52:7f:2b:3f:83:55:
7b:3c:37:c1:1b:42:40:1c:f2:d7:de:ea:32:dd:67:bf:b2:21:
6c:e8:b2:b4:b0:b4:18:cc:c4:d1:76:14:03:f7:8e:74:01:95:
65:6e:48:cb:48:e7:3e:b0:e8:65:1a:8a:a1:e9:48:dc:0b:d5:
a4:33:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:15:26 2024 by rpki-client on console-ams.rpki-client.org