Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: qSx7WHLSFgEFWT/nzYg3WWWB3dw4tMdZAR9ROxj3lRc=
Subject key identifier: 82:7A:A3:BD:47:A3:CB:F8:02:C2:D0:5D:EC:57:3E:BF:9A:A6:96:C0
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 018F223848D7C2E814DF26FA1EE387902E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 0B7E
Signing time: Sun 28 Apr 2024 01:01:04 +0000
Manifest this update: Sun 28 Apr 2024 01:01:04 +0000
Manifest next update: Mon 29 Apr 2024 01:01:04 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: 6CBX8vTdcY6uM9bHeOIaQPK4YzqD507ReOKQtnVzaZY=)
2: eTjK7Z9YPuL0QnUnSG2cxkPY1Zo.roa (hash: Dw7SjMGPtPzHEV6Ji6CrHMhejN3RyvYHJg0j+DQixbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:38:48:d7:c2:e8:14:df:26:fa:1e:e3:87:90:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Apr 28 01:01:04 2024 GMT
Not After : Apr 29 01:01:04 2024 GMT
Subject: CN=827aa3bd47a3cbf802c2d05dec573ebf9aa696c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:f9:bf:6e:f5:af:40:c7:f7:d6:f3:a1:52:
70:20:7e:2d:48:93:56:2e:a2:18:42:3b:db:fe:9b:
0d:52:e6:23:ac:6c:f6:ae:f0:3c:99:20:b5:f3:f6:
dc:27:d5:db:db:9b:d4:1f:fe:e6:db:23:13:13:a7:
70:6b:b1:6e:03:b6:32:05:8e:07:c0:b6:1f:17:14:
8a:48:25:13:17:7a:a2:d4:0d:1a:f6:31:8f:92:1e:
e9:ff:27:97:6b:75:e8:02:49:62:0f:be:e3:33:d2:
32:0e:9e:e2:45:77:6c:2a:d1:93:19:44:be:88:45:
1d:33:76:d2:a7:94:a9:5e:60:9e:2b:62:27:59:34:
3b:1f:a0:ca:4c:23:e2:92:43:3b:c6:af:11:ea:e2:
e1:91:85:ee:1f:ce:ac:ad:b8:c9:ea:be:d6:5f:88:
27:b4:0b:fe:29:22:96:d2:31:af:f6:39:42:c1:8e:
95:69:cd:18:06:5a:73:9d:6e:24:0c:a7:21:e5:5a:
17:39:ed:a0:75:18:d6:80:51:a1:2f:d3:d8:ce:c3:
22:34:9d:fe:13:b2:f1:95:1a:d9:c7:38:8f:ce:d8:
f9:59:82:bb:9e:01:a7:d9:8c:00:0e:42:cc:ba:fc:
c2:23:f3:32:33:32:1a:e6:0e:75:62:ee:1b:a2:d4:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:A3:BD:47:A3:CB:F8:02:C2:D0:5D:EC:57:3E:BF:9A:A6:96:C0
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:35:e0:5c:85:c3:ef:bb:34:8a:3f:8c:d1:fe:91:b7:58:bc:
1a:74:31:c6:99:af:ba:d0:dd:8c:1d:cd:ce:42:56:88:d9:23:
7e:03:f2:77:26:4d:01:64:da:df:3a:99:7e:9e:a9:6e:9c:0f:
61:ae:03:af:7b:62:f1:29:a0:ed:9d:f0:83:0f:03:06:72:3c:
a4:df:a5:85:3f:fc:1f:ff:89:55:5d:b5:0c:99:2d:73:6d:16:
00:9e:fe:93:1b:03:69:25:e9:13:64:4e:c0:8c:96:da:d9:c3:
f7:a3:5e:60:08:80:32:f0:51:fc:6e:ee:53:0a:8e:fd:ad:62:
5b:66:a5:d7:02:55:fe:29:ba:a5:2c:b9:8e:55:9e:6d:9e:af:
04:b7:44:29:cd:3c:29:bb:93:2d:46:9a:21:ba:22:9e:4d:7f:
5f:de:1d:ae:57:9b:ea:3e:d0:d2:42:0c:f2:a4:e5:c3:34:e7:
e3:b2:e0:3e:2b:f3:64:e4:cf:e6:3a:a8:13:3f:40:61:9f:a5:
fe:af:fb:ff:95:37:13:3e:90:5a:62:d0:ef:2f:af:87:45:10:
25:13:7a:f1:df:fb:b3:5d:e7:27:e6:dd:6c:d2:8c:0f:48:7d:
88:e7:d5:6b:70:5c:e4:ef:b9:04:63:4d:37:71:70:78:38:2b:
5a:c3:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:35:42 2024 by rpki-client on console-ams.rpki-client.org