Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: 58um8e1Erz2LToD1MPtAglQZayy65E0n/1lc9C5q7Hg=
Subject key identifier: D7:08:02:94:C9:5D:15:A5:67:54:51:FD:39:4A:8D:14:02:34:92:8F
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 018F44C4C56C5C5D6F460A64A08E512B7A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 05E2
Signing time: Sat 04 May 2024 18:01:37 +0000
Manifest this update: Sat 04 May 2024 18:01:37 +0000
Manifest next update: Sun 05 May 2024 18:01:37 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 2Dt1np3ONZ1YVIgNEkMBManFAy6RtGac240WvoZW8OE=)
2: EyIQuzgu9jowyHXNsEbTGWe3xKw.roa (hash: mfztXAQncAzzHSh5GXA0aBZBJkYGkBjO+bO2RFPzXFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:c4:c5:6c:5c:5d:6f:46:0a:64:a0:8e:51:2b:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: May 4 18:01:37 2024 GMT
Not After : May 5 18:01:37 2024 GMT
Subject: CN=d7080294c95d15a5675451fd394a8d140234928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:24:58:4b:a2:7f:94:93:7d:6c:f7:43:19:
95:ee:b9:6e:ad:71:f9:ab:18:b4:30:66:0f:ad:e5:
00:5f:7c:a6:81:e3:d2:8d:c1:0c:88:34:39:54:9e:
f2:30:ac:37:34:a5:11:09:02:07:49:d9:65:a3:4b:
63:3b:9f:49:c0:e6:50:27:54:52:3f:0c:8f:53:ab:
87:a5:e1:6b:98:48:fb:2b:ee:6e:98:58:9b:9e:93:
94:bd:0a:77:b3:6b:54:77:26:13:dc:be:bb:25:7d:
a6:68:db:c9:fa:3d:63:33:62:8d:e2:1e:8a:22:54:
44:a2:86:12:a5:ec:d1:2e:16:d6:7d:01:73:b4:a2:
91:ba:2d:66:cd:b4:f9:ba:b1:b0:2a:de:2e:15:70:
a4:e7:56:81:c1:8b:65:08:09:d4:31:3a:8d:ab:3a:
5d:3c:25:30:5c:a0:cb:77:1b:f4:9b:74:68:27:7a:
77:5b:07:25:c0:0a:71:86:0a:78:4d:2f:32:84:4d:
26:6e:55:23:a1:a3:fa:3d:a0:84:e7:10:71:8d:5a:
2b:73:af:54:d9:4a:b4:cc:ab:b8:ba:46:20:6e:ba:
66:44:0b:42:45:41:47:b4:c6:97:ab:6f:6b:99:2c:
6d:0b:c7:bf:33:d4:00:5a:95:9b:be:db:04:e3:39:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:02:94:C9:5D:15:A5:67:54:51:FD:39:4A:8D:14:02:34:92:8F
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:85:b5:bf:01:dd:ec:92:0f:b0:9e:18:b0:a9:16:62:af:
1b:ec:f0:89:b8:2b:ab:55:b7:ba:09:dc:92:d7:c5:92:81:8c:
93:9c:99:34:f2:8b:3d:90:7b:b3:f6:6b:0b:e2:69:bc:47:cd:
2d:94:9d:84:e0:00:a1:c0:f2:21:00:ec:41:53:28:88:d8:16:
bb:08:64:4c:04:e6:4e:5f:53:96:cf:60:39:f8:26:77:ce:4b:
2b:38:fd:75:a7:16:d9:3c:ef:52:d5:e5:e6:10:87:a5:0e:dc:
e3:fa:d2:02:1a:1a:9a:5f:01:b7:e2:c0:60:5c:30:27:b4:13:
01:75:4c:2d:4d:86:8a:75:70:eb:c3:93:72:29:6e:22:af:93:
45:b6:87:98:94:51:68:f2:b1:65:62:b1:43:c2:03:64:34:3e:
3a:dd:f1:d4:a9:17:09:a9:44:15:43:70:3a:a4:7e:36:67:d9:
cf:84:70:50:a2:f0:db:de:af:04:4f:47:fb:65:fb:c1:fa:00:
08:29:35:88:2d:52:f7:f3:6a:e2:63:16:52:53:dc:c0:91:31:
3c:e7:46:9a:07:fb:bf:35:30:42:6c:7f:e0:bf:81:ea:d7:c5:
a4:8b:e7:8c:d2:32:28:c8:f4:53:25:5b:10:77:b5:16:0e:de:
8e:33:c5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ExMVsXF1vRgpkoI5RK3oBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk
ZGI0OTYwHhcNMjQwNTA0MTgwMTM3WhcNMjQwNTA1MTgwMTM3WjAzMTEwLwYDVQQD
EyhkNzA4MDI5NGM5NWQxNWE1Njc1NDUxZmQzOTRhOGQxNDAyMzQ5MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l8kWEuif5STfWz3QxmV7rlurXH5
qxi0MGYPreUAX3ymgePSjcEMiDQ5VJ7yMKw3NKURCQIHSdllo0tjO59JwOZQJ1RS
PwyPU6uHpeFrmEj7K+5umFibnpOUvQp3s2tUdyYT3L67JX2maNvJ+j1jM2KN4h6K
IlREooYSpezRLhbWfQFztKKRui1mzbT5urGwKt4uFXCk51aBwYtlCAnUMTqNqzpd
PCUwXKDLdxv0m3RoJ3p3WwclwApxhgp4TS8yhE0mblUjoaP6PaCE5xBxjVorc69U
2Uq0zKu4ukYgbrpmRAtCRUFHtMaXq29rmSxtC8e/M9QAWpWbvtsE4zmpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcIApTJXRWlZ1RR/TlKjRQCNJKPMB8GA1UdIwQY
MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt
NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4
LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEKFtb8B
3eySD7CeGLCpFmKvG+zwibgrq1W3ugncktfFkoGMk5yZNPKLPZB7s/ZrC+JpvEfN
LZSdhOAAocDyIQDsQVMoiNgWuwhkTATmTl9Tls9gOfgmd85LKzj9dacW2TzvUtXl
5hCHpQ7c4/rSAhoaml8Bt+LAYFwwJ7QTAXVMLU2GinVw68OTciluIq+TRbaHmJRR
aPKxZWKxQ8IDZDQ+Ot3x1KkXCalEFUNwOqR+NmfZz4RwUKLw296vBE9H+2X7wfoA
CCk1iC1S9/Nq4mMWUlPcwJExPOdGmgf7vzUwQmx/4L+B6tfFpIvnjNIyKMj0UyVb
EHe1Fg7ejjPFIA==
-----END CERTIFICATE-----
Generated at Sat May 4 20:47:50 2024 by rpki-client on console-fra.rpki-client.org