Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: 0nj90cieo0dg1z59Knqycdvv9GK0mBfOdOKtmSKbPWA=
Subject key identifier: 79:C4:5E:3E:23:5A:E0:F7:81:30:9D:B7:FB:93:E7:18:9F:41:69:4C
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 018F325226150D63F522A976444DF0070325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1148
Signing time: Wed 01 May 2024 04:03:15 +0000
Manifest this update: Wed 01 May 2024 04:03:15 +0000
Manifest next update: Thu 02 May 2024 04:03:15 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: CqMCZ6Js6yiRXnWG2qTJgagOOBYapGudq+d+nQEOg0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 04:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:52:26:15:0d:63:f5:22:a9:76:44:4d:f0:07:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: May 1 04:03:15 2024 GMT
Not After : May 2 04:03:15 2024 GMT
Subject: CN=79c45e3e235ae0f781309db7fb93e7189f41694c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:2f:37:24:b4:4a:20:dc:d0:73:13:13:03:
3b:da:4f:f2:40:44:a4:cf:a2:42:4e:d1:a6:b3:4a:
64:34:db:4d:0b:72:85:99:63:bf:d8:1a:57:3c:88:
7c:04:ef:14:92:25:f5:92:1e:2e:f1:42:ef:1d:d8:
11:db:73:67:5a:04:8d:d9:24:c4:f4:3e:ae:6e:d0:
38:76:2f:cf:45:30:9e:bc:a2:0d:c4:5e:d5:0b:d1:
b1:72:8b:ee:db:ad:87:6e:63:8d:af:18:d1:74:73:
3e:2e:0e:ec:b9:a9:b6:c9:f2:ce:3e:bb:2c:8e:02:
98:5d:42:2d:99:50:72:8d:32:a5:36:bb:1a:fb:e1:
6e:11:07:24:f2:1c:52:a3:5d:eb:a2:e2:8a:a6:49:
af:bc:b3:3b:f9:2b:03:66:8e:89:de:cf:0c:8e:6e:
1d:af:ab:73:ab:e8:fd:94:d8:ec:8d:4c:7d:d3:83:
71:fb:c6:a4:62:11:12:83:43:e0:c8:7d:87:fa:49:
ea:d8:84:cc:6f:1b:ea:f1:33:e3:33:85:7e:64:f3:
94:33:fd:cc:10:6d:10:7e:4d:73:9b:30:34:97:ea:
83:f3:63:80:9d:c7:fa:a2:72:83:02:50:ec:98:79:
08:00:2c:73:5e:05:79:3a:18:85:1c:e1:46:7d:a8:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:5E:3E:23:5A:E0:F7:81:30:9D:B7:FB:93:E7:18:9F:41:69:4C
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:f2:66:f4:0d:db:ab:cb:b2:66:5c:93:44:f9:81:6b:65:
c9:62:5a:b2:5f:b4:69:5e:38:23:bc:b0:cc:da:5f:1a:d5:eb:
96:95:06:15:72:b6:de:46:0c:2a:89:13:5c:a6:72:d1:6b:6e:
42:14:8d:39:db:39:d6:e5:c4:a9:aa:2f:69:69:21:4a:83:6a:
3d:1d:a7:c6:a7:d1:8f:e6:ec:6e:d4:c4:4e:13:8e:36:3d:fb:
ea:31:78:71:3a:08:d0:d3:40:e1:c1:8a:15:77:3f:72:49:ad:
af:0f:64:f4:24:70:14:a9:12:88:72:e7:66:bb:72:4e:0d:15:
83:40:9c:a6:c3:f4:80:63:c6:b0:c3:43:f5:a0:2c:05:e1:25:
9b:be:92:50:6c:10:e3:57:85:36:be:c1:ea:4a:f8:55:28:46:
d9:cb:6d:70:09:04:de:f3:9c:57:0a:48:12:2b:54:22:4e:fa:
0e:93:13:f0:91:fd:ca:c0:b8:85:ae:db:79:9e:89:fe:43:c6:
69:e0:57:a7:6b:44:79:5a:59:09:ca:ae:45:76:27:ac:f0:3b:
e1:c8:db:43:5d:8c:eb:9b:69:2b:d6:e1:32:86:11:5d:ee:ab:
36:76:1b:5d:a9:c1:de:cf:20:d4:19:a1:7e:fa:9e:56:67:f3:
7d:25:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:54:09 2024 by rpki-client on console-ams.rpki-client.org