Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 15moCHQMLQKDuNuAdx+TmputCbd0nMUan92Zw4tu1Cc=
Subject key identifier: 09:A9:FD:05:45:A2:67:E8:C5:64:74:38:8D:E2:F4:E2:CC:54:9A:7B
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 018F9428FD4398EE989758E204CA1754026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0A07
Signing time: Mon 20 May 2024 04:01:05 +0000
Manifest this update: Mon 20 May 2024 04:01:05 +0000
Manifest next update: Tue 21 May 2024 04:01:05 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: uMwBOP0nv+iidopvmKhlNxmpUHoGSwmj0LRgcOtiaSo=)
2: oiGEPig_MWt2Tjhol_VI2Ys_9kQ.roa (hash: swSM228e6N+HikfI2gosftImWT36zpNYsonAnVvdp+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:28:fd:43:98:ee:98:97:58:e2:04:ca:17:54:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: May 20 04:01:05 2024 GMT
Not After : May 21 04:01:05 2024 GMT
Subject: CN=09a9fd0545a267e8c56474388de2f4e2cc549a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:e4:b7:ef:6d:bc:58:11:5b:ca:ce:f9:0a:
a6:7f:e7:18:53:a7:e3:2c:54:e2:a2:41:67:34:73:
b1:7e:91:20:30:20:23:ab:05:d6:62:b9:94:2f:bc:
2f:66:20:13:44:57:e3:e7:f0:dd:f5:cc:c7:df:40:
0a:38:06:73:d2:3e:a0:d3:f9:44:91:d1:41:cd:8b:
6a:91:6c:d9:0c:ce:57:84:35:38:14:69:5d:d3:df:
6e:f9:3c:40:1a:4b:49:03:86:64:a9:88:43:c2:a2:
4f:0f:e2:89:3d:4e:6d:8e:98:47:08:a9:87:d1:a9:
39:9e:d0:be:e8:d4:df:7e:e2:63:33:90:1e:79:8e:
1b:9f:84:29:db:c3:73:db:5a:76:e0:00:89:88:c9:
28:37:c5:da:63:c5:40:b4:57:6f:4e:65:24:88:a4:
3b:e5:0f:72:85:e4:5b:95:e0:ff:1e:31:29:2e:3c:
35:56:a9:85:d1:91:7b:6d:da:7d:54:71:3b:9a:5b:
ff:f8:d5:55:ba:21:de:26:58:cd:92:7c:a3:07:46:
df:5e:df:88:e0:87:b5:b1:9d:ca:bf:83:73:a6:c6:
28:b3:5d:ac:3e:82:c0:15:3e:af:ca:f8:6d:59:1c:
f4:88:0e:ce:94:bc:11:bf:bd:0e:a1:6a:76:af:21:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:FD:05:45:A2:67:E8:C5:64:74:38:8D:E2:F4:E2:CC:54:9A:7B
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4d:12:54:e1:91:f1:4e:e7:d5:75:ea:c6:61:d4:ba:0d:91:
63:12:e5:dc:ea:d3:41:8d:0b:af:8c:a1:f0:f8:00:96:de:b8:
ef:6b:5e:64:d9:d4:cf:fe:18:04:0f:99:26:41:24:85:77:86:
4e:8f:6f:ec:6d:65:d1:60:d5:8a:ac:83:b4:50:3d:df:ca:12:
86:52:d4:b8:30:20:0a:f9:85:88:f0:31:ab:ee:6e:19:f5:7f:
e8:92:22:ae:15:3c:0b:04:92:cb:59:f5:94:ba:91:54:54:b9:
11:80:37:e7:fe:2a:39:a3:c3:d7:4b:b5:7a:4d:54:f5:4b:8b:
81:d7:1f:71:f5:12:5c:3f:2a:6e:82:7e:11:92:28:47:00:6c:
27:94:3b:dd:b2:eb:20:b8:b4:4f:1c:55:21:45:aa:06:40:0c:
3a:c7:16:e0:a6:f2:9e:cf:af:e2:91:9b:d2:b8:d0:b8:5e:7a:
98:e6:31:c0:e0:55:b2:47:53:35:40:f9:f0:24:90:28:0f:19:
23:0e:ab:2b:77:87:ba:66:62:f1:d9:f4:37:27:5e:fb:fa:5d:
65:a3:85:e3:6c:31:4f:15:bd:d2:49:1f:c6:98:d4:4e:11:12:
b0:1c:92:4f:cc:60:86:a7:3d:02:75:73:af:b7:f4:60:b2:aa:
58:cb:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:42:50 2024 by rpki-client on console-ams.rpki-client.org