Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: uZuMhRV+ASzZfpgHqUv0F8hHYTM89vukBIYZMPUDaKc=
Subject key identifier: 2D:76:F8:65:92:A3:96:71:30:6E:CF:0A:40:EB:DC:10:5E:DF:4D:2B
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 018F362F1AC8BA340C6BA2613AA23E4B0AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0A70
Signing time: Wed 01 May 2024 22:03:27 +0000
Manifest this update: Wed 01 May 2024 22:03:27 +0000
Manifest next update: Thu 02 May 2024 22:03:27 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: fyfaY5XRFfTc1b+bIRHs9KeR9qI8kesg+OB18UfN10w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2f:1a:c8:ba:34:0c:6b:a2:61:3a:a2:3e:4b:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: May 1 22:03:27 2024 GMT
Not After : May 2 22:03:27 2024 GMT
Subject: CN=2d76f86592a39671306ecf0a40ebdc105edf4d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:6d:c3:44:c7:51:24:3a:5e:45:49:c3:cc:
78:a4:1b:ad:67:8e:15:e7:c1:0a:0d:e2:8b:89:a6:
3e:6b:42:45:0e:b0:45:6b:40:3a:78:ef:f7:de:e1:
45:d0:70:4c:e6:6d:3e:62:15:b0:59:3c:02:7a:c6:
27:1c:60:39:ce:1d:58:a8:5f:7c:39:ac:63:c8:86:
c2:3c:8a:5e:29:88:c0:06:bd:75:32:a8:26:bb:a0:
58:81:13:1e:a1:48:a1:92:b0:2e:1a:28:bc:14:70:
58:3d:8b:be:78:9e:ff:67:80:99:65:e7:8b:49:56:
30:6e:8e:af:92:de:63:5a:23:a3:7b:17:f0:c9:5a:
22:ee:73:2f:32:22:41:37:1c:dc:eb:80:ac:52:43:
4b:d8:5b:b7:47:ae:83:cb:1d:2c:20:9d:55:d3:3d:
43:4c:30:fc:73:d3:25:c9:34:1d:70:91:4f:83:19:
32:6b:b0:ca:1b:40:59:bf:34:e3:d0:22:b8:55:46:
87:51:6e:e9:2b:78:29:12:24:73:33:5b:01:b7:d6:
2f:64:29:c1:c9:0f:20:94:b5:a9:84:bf:1d:38:11:
0d:90:a5:9e:f9:9c:34:8c:d2:fe:63:46:4c:46:9c:
f1:62:36:71:dc:f4:27:4b:c9:ae:7d:59:13:6b:4d:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:F8:65:92:A3:96:71:30:6E:CF:0A:40:EB:DC:10:5E:DF:4D:2B
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:fd:b0:50:e5:93:64:3a:db:f8:ce:72:ee:be:87:ae:97:
ad:61:11:12:38:2b:99:d9:1c:63:d4:82:21:50:93:86:76:23:
43:95:ca:e0:92:fb:a0:62:20:4a:47:1b:69:b9:8f:b3:5e:9e:
bc:6c:8f:89:71:ac:f9:f5:2a:8a:33:82:d7:9c:e0:e4:d6:01:
65:8d:98:8f:ac:1e:d5:cb:74:9d:69:58:2b:eb:6f:54:be:99:
3e:da:80:cd:2f:33:68:ad:7a:03:3a:82:40:d3:aa:d8:25:ed:
a8:fa:13:9d:c2:2c:21:64:0f:2a:e8:f3:dd:ba:92:e4:4e:18:
01:f0:4b:f0:2c:8c:6f:55:66:9e:e9:77:41:56:f9:d4:3b:59:
6e:41:6d:46:3b:0b:65:1d:99:cf:75:1c:50:1a:62:9a:d4:06:
14:65:09:19:ac:10:8d:3f:92:11:cc:64:82:9b:e6:d6:a8:78:
41:06:d4:fd:4e:0e:58:b1:4a:d6:5d:84:b3:ef:4e:5f:13:fc:
f7:84:00:5e:f7:59:66:bd:73:69:11:65:00:8d:c5:63:81:99:
73:22:55:04:77:d0:78:af:88:70:65:4c:89:a2:ac:72:d5:2b:
b3:6e:c4:9a:9e:06:62:8a:e7:fb:ce:1f:f8:73:30:34:8d:24:
fb:45:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:34:32 2024 by rpki-client on console-ams.rpki-client.org