Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
File: kliCV2f7wINzKpbhgSzMW_4VAYU.mft (raw, json)
Hash identifier: RBFNjL4tPJ9CD46lN/Lh8BJBFY/kKXIyZmNKpNUja5g=
Subject key identifier: 21:F4:AB:D5:27:07:AB:24:F1:4F:10:E9:D0:52:22:D4:60:11:AE:24
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Certificate issuer: /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial: 018F88925DBFD1411C5FE321AA7A1E570069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 22:00:44 +0000
Manifest this update: Fri 17 May 2024 22:00:44 +0000
Manifest next update: Sat 18 May 2024 22:00:44 +0000
Files and hashes: 1: ercIdVlJkxIKH02ojT5ZiihhpTs.roa (hash: nsG7MsUXGZZFjHZPahiuShhI5hH9Nivx8Qktb0xnyIQ=)
2: kliCV2f7wINzKpbhgSzMW_4VAYU.crl (hash: OlsEfiXmwffQ3P2ZNJuahDOmwnhIQPy7BQkIbqXUreI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:5d:bf:d1:41:1c:5f:e3:21:aa:7a:1e:57:00:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
Validity
Not Before: May 17 22:00:44 2024 GMT
Not After : May 18 22:00:44 2024 GMT
Subject: CN=21f4abd52707ab24f14f10e9d05222d46011ae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:30:8c:42:51:11:9d:ed:75:18:90:0d:9a:
ef:2e:04:2a:e6:7d:c8:c6:95:ce:6a:59:2a:ef:25:
e1:79:be:c0:ec:a6:9c:71:64:be:22:62:09:ae:dc:
61:dd:61:a9:26:25:9b:92:87:ed:cd:bc:a7:c1:67:
55:4e:fa:7a:39:f1:aa:4b:ed:1d:3d:91:a4:4f:11:
18:71:1c:84:c4:2f:45:c1:83:cc:2e:5b:1b:50:19:
31:60:0c:d3:96:69:7a:cd:cc:86:e1:4a:e0:47:55:
82:1b:1c:0e:78:a9:b6:af:2d:ef:00:54:aa:51:e9:
4e:d8:15:d6:ec:a0:2c:b9:ad:95:a5:7f:46:52:d0:
95:cf:2d:a9:87:f1:63:46:27:d1:04:ab:28:0b:c9:
49:9c:5f:b2:c6:09:57:b4:d9:67:8b:0e:ab:df:63:
6f:05:71:67:e4:d6:e2:b6:75:5f:47:8a:5a:e3:28:
da:cc:63:17:78:ac:34:0f:f3:9a:d5:4d:98:4f:9b:
62:db:46:b2:ce:68:0a:82:2e:f6:3f:3d:f6:fa:99:
fc:97:1d:93:b7:19:1d:eb:81:0d:62:14:06:3a:db:
19:48:3f:04:63:0d:6b:f9:b4:e1:09:58:2b:28:7d:
1f:47:93:c9:04:c4:4c:03:3e:44:66:b9:05:b0:2f:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:AB:D5:27:07:AB:24:F1:4F:10:E9:D0:52:22:D4:60:11:AE:24
X509v3 Authority Key Identifier:
keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:df:44:86:0d:bd:aa:7f:14:7c:57:e1:15:df:a2:39:95:
b3:5e:5b:a6:de:04:60:ba:d5:64:17:12:bc:b7:87:71:71:d0:
d8:9f:cf:b8:ce:37:96:a4:1a:60:fd:73:34:04:02:2e:e2:2f:
b0:0a:e3:ea:6f:34:b5:5f:1e:0f:81:39:8a:11:e1:41:20:cd:
9e:fe:ee:3e:12:e5:20:bd:39:40:b9:1a:a4:2e:39:c1:18:97:
a5:78:49:89:8f:1e:67:f8:e3:7f:d5:93:34:b8:8c:e7:6a:18:
0e:53:f1:8d:04:e8:4a:95:0e:7f:96:a3:b7:15:a8:c0:d1:aa:
a2:db:67:44:d8:3e:d4:2f:87:8d:c4:88:dd:2c:1a:5f:19:0d:
c1:b4:99:f5:5c:9f:94:8b:7a:34:ad:45:04:09:f8:fd:e1:ad:
c9:d1:99:e1:6a:36:78:e8:32:4b:8e:1c:ab:af:58:41:7e:d0:
ec:83:7b:93:5c:33:ed:89:c1:95:30:18:1d:d3:de:46:f1:11:
c4:1e:e7:0c:38:4d:5e:3e:a8:52:bc:0a:12:79:8a:35:1c:f8:
de:e1:ac:8a:93:ac:be:ab:65:43:8e:1d:f1:a2:a7:bc:43:2c:
ec:28:17:5b:03:31:18:1a:d3:5f:ad:05:68:ed:be:4d:21:38:
cf:91:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:05:29 2024 by rpki-client on console-ams.rpki-client.org