Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: mXTIqETxuWpmP3stZIXhIJXvM8zTcQTGDojdZm18zkM=
Subject key identifier: 3C:56:84:73:52:8F:57:37:8E:11:2D:82:00:39:DB:B3:E1:62:3A:4D
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 018F4A8F98243740C8AE15768644CBD59409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1159
Signing time: Sun 05 May 2024 21:01:15 +0000
Manifest this update: Sun 05 May 2024 21:01:15 +0000
Manifest next update: Mon 06 May 2024 21:01:15 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: /rii1v4/fUvQ1mb1yAnP5neuH0QAaCxLtRAobz5+NhU=)
2: OAwzAJgXcirLln4EE83zIzfqBGI.roa (hash: 9vhyJnqOoMll2IghKTe9i1ni9kkld9g7tCM/p56Nm9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:8f:98:24:37:40:c8:ae:15:76:86:44:cb:d5:94:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: May 5 21:01:15 2024 GMT
Not After : May 6 21:01:15 2024 GMT
Subject: CN=3c568473528f57378e112d820039dbb3e1623a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:b9:94:60:6f:9a:54:f5:ac:7b:8d:24:86:
51:c8:62:af:60:85:73:da:a7:d8:50:7a:2a:81:f4:
31:f3:c6:07:be:2b:ca:13:96:8a:14:38:35:fc:ba:
00:07:c9:a9:74:85:c9:ae:fd:60:d9:bf:a0:6e:98:
f7:c4:e3:15:4e:df:e8:5e:6b:88:82:54:41:cb:0c:
ac:76:65:26:23:53:ad:48:82:46:f9:29:14:5b:2f:
24:43:97:1b:5f:d3:5f:e1:64:1c:b5:7d:ef:2e:b6:
18:4c:8e:ce:4c:45:ca:5e:50:a8:01:a2:2c:c3:52:
4c:9e:c9:86:2a:bc:57:36:e2:d9:de:aa:e7:32:7f:
3f:71:7a:e5:34:9f:16:9b:95:06:83:53:1e:0d:37:
3f:93:bd:0e:d5:6a:1d:69:a9:81:9f:bd:ca:17:8f:
3f:b3:01:0e:6b:44:a6:0e:1d:b7:c4:82:10:9a:6b:
87:c1:e5:27:87:21:22:28:c1:d9:b3:78:14:8b:77:
83:35:f5:47:91:f3:ba:43:9e:46:2d:71:62:a9:ef:
3f:5b:e9:f4:fb:24:c2:2f:9a:9a:bf:75:a7:7d:a0:
02:5c:5b:78:eb:0c:ab:c0:de:df:90:b2:4e:b7:bf:
8b:89:66:8a:eb:b0:c8:5e:af:9c:65:14:b1:3b:2a:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:84:73:52:8F:57:37:8E:11:2D:82:00:39:DB:B3:E1:62:3A:4D
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:2a:bf:ac:05:a1:d0:25:3b:ab:05:d0:79:3c:da:4f:75:d2:
6e:02:7f:a0:5b:92:c2:4c:94:54:6f:ec:1a:35:5f:ad:00:20:
1b:da:94:16:e6:11:ec:4f:e2:08:08:f7:c9:be:57:5e:a2:03:
53:50:2a:79:0e:ca:27:43:3b:a0:ae:58:52:f3:b0:24:1d:71:
10:3b:0f:a3:17:58:ef:ca:e4:da:91:f2:c7:a7:2b:68:c2:54:
52:43:4e:6b:53:7d:8b:3a:77:ae:f8:f5:0d:31:97:a9:88:b9:
f0:ce:2b:5e:25:4d:e4:93:47:3d:3d:84:67:5c:bc:36:a3:bc:
92:a0:8f:5c:84:1e:0a:e7:11:68:8a:ea:53:5f:44:1a:e4:82:
72:21:fb:0f:4c:d9:33:76:69:39:b8:ee:8c:ff:91:a5:14:8b:
c1:51:cd:fd:cf:9b:07:40:57:ac:7c:e4:09:75:c3:43:b3:35:
70:70:e0:9b:0a:58:56:b7:b5:a9:ac:04:79:f6:c9:09:d4:b1:
fa:95:2e:3a:45:de:c1:99:82:2f:6f:eb:58:e1:76:aa:63:a7:
59:79:bd:27:2e:70:ae:01:a6:b6:3d:15:22:0c:a7:d7:bb:61:
a7:a1:d9:67:d6:81:77:99:ae:2a:88:3f:39:b9:5f:d4:ed:f7:
42:79:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:08:33 2024 by rpki-client on console-fra.rpki-client.org