Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: 4OzCEqo3c4Rkpxk+6RS4v+LGJvEugxSyAT0aAiSK/mA=
Subject key identifier: D8:92:97:9B:A8:6A:F3:7F:82:1B:85:E5:04:BE:DF:5B:DD:DA:96:6D
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 018F20F15BDFB69AB50FA10CBD25EBA8A040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 051C
Signing time: Sat 27 Apr 2024 19:03:59 +0000
Manifest this update: Sat 27 Apr 2024 19:03:59 +0000
Manifest next update: Sun 28 Apr 2024 19:03:59 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: +P8fbNGZ3EAUXeZCPHnTMJ+qCawItFksOlTYBamT2w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:f1:5b:df:b6:9a:b5:0f:a1:0c:bd:25:eb:a8:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Apr 27 19:03:59 2024 GMT
Not After : Apr 28 19:03:59 2024 GMT
Subject: CN=d892979ba86af37f821b85e504bedf5bddda966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:5a:83:54:0f:4b:38:56:f2:24:9a:69:1d:
63:86:ba:25:40:dd:f2:d9:7a:7d:f7:1e:7a:d7:aa:
30:58:dc:eb:88:ff:2d:c0:c8:1e:9f:22:96:f1:bb:
00:fa:9e:40:93:39:51:55:58:cb:89:bd:c2:07:1a:
e0:b5:b9:11:88:5c:f8:58:25:78:37:16:42:bb:00:
5f:70:28:4d:76:95:aa:14:36:05:0b:d5:3b:80:83:
0c:ef:32:6c:fc:e4:38:23:80:f5:d9:e3:85:1d:c5:
d6:f2:8f:80:f2:55:52:33:6c:a2:87:3e:8f:bf:8c:
5e:36:26:2b:82:a4:fe:93:59:e7:b6:36:c7:d1:f8:
2d:88:f0:b1:8d:2a:9f:8e:5f:b5:25:76:b1:aa:b9:
2c:b3:39:18:7e:85:c9:c5:68:d7:eb:ea:1b:1b:c8:
ae:76:4c:3d:71:3e:8e:3c:90:84:8e:39:95:7c:ed:
b0:8e:f2:31:52:3c:05:b9:87:94:9a:60:d6:08:04:
64:62:66:79:fb:20:70:37:23:d3:e4:44:e7:3d:18:
e0:96:5e:8e:40:96:79:7e:4f:a0:6c:8d:a3:4f:da:
e8:13:c4:24:e3:50:ee:02:fc:c4:4f:28:0c:d7:79:
10:8a:dc:b3:02:dd:a3:22:3d:5d:cb:75:1c:30:09:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:97:9B:A8:6A:F3:7F:82:1B:85:E5:04:BE:DF:5B:DD:DA:96:6D
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:b7:ae:2b:9e:10:a8:a1:ee:74:1e:16:83:ce:b1:ed:3d:
55:ec:3b:8a:2b:37:ae:8d:e7:e0:14:a2:44:5f:73:ff:72:ed:
1b:2f:eb:b1:e6:9b:46:55:e6:a3:e2:b2:9e:56:39:8a:e0:29:
ff:bf:4b:d7:57:ce:36:8a:52:a0:b5:e1:00:19:3c:90:2d:ef:
49:d9:2f:b7:8e:d6:b9:68:7e:4c:3d:d4:b8:df:ba:1f:03:89:
05:e9:f7:06:2a:32:41:28:4e:fa:1d:f3:18:a2:18:f8:7f:50:
dc:b9:23:f0:9b:5d:52:e3:57:4b:40:39:05:4e:1b:af:96:0b:
2f:95:f1:00:39:95:47:28:ba:ac:f2:5d:6a:ce:50:80:1e:7c:
14:8c:8c:e5:30:c3:cb:91:63:1c:ec:b5:97:f3:ec:2c:95:d1:
67:cd:3c:a7:f3:1f:c2:a5:71:17:0a:8c:1e:2c:62:cb:c5:e9:
d1:38:31:b4:68:0b:36:46:b2:94:b0:03:ed:ad:df:68:df:c7:
ff:3c:42:43:2a:ad:2f:96:3d:0e:c4:96:4a:c2:b2:ac:e8:10:
ae:e7:e1:dc:37:9f:2e:de:75:b5:56:08:95:a3:ef:96:b6:bc:
38:fc:a6:fe:a9:bc:79:06:41:e4:02:46:4a:cf:4a:55:54:be:
09:cc:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:53:13 2024 by rpki-client on console-ams.rpki-client.org