Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: nI/DnIraG8jC/hHOF96fZ1PHxp9B9xJ9X+lNB91PF3E=
Subject key identifier: AE:64:DC:3D:CF:E2:FA:0C:39:34:DA:4A:ED:2C:2E:01:3F:21:E7:26
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 018F317403596CBA77819EC1AD458BF33766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 0C5D
Signing time: Wed 01 May 2024 00:00:37 +0000
Manifest this update: Wed 01 May 2024 00:00:37 +0000
Manifest next update: Thu 02 May 2024 00:00:37 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: FO3lXWOpfFFFVljZ5N+r0nHMKwR+nilwebSIvUPwclY=)
2: ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa (hash: FCUDtdF68MBHSIxqoq2oSJ6SNLzgVm8q7csyjVeOM5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:74:03:59:6c:ba:77:81:9e:c1:ad:45:8b:f3:37:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: May 1 00:00:37 2024 GMT
Not After : May 2 00:00:37 2024 GMT
Subject: CN=ae64dc3dcfe2fa0c3934da4aed2c2e013f21e726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:6b:a9:69:a6:0e:bb:c7:4b:4a:63:02:56:
13:2f:13:05:94:60:fa:dc:36:65:da:59:2a:c0:99:
4b:40:db:56:e7:12:f1:09:55:75:06:e3:7b:83:48:
5e:95:87:8c:31:9d:5e:4d:a7:4e:f0:df:c4:63:b0:
fd:c6:a9:c6:c5:a1:64:a1:0e:1b:a4:f9:f8:42:a0:
48:ba:ea:90:9d:fa:9a:43:b2:51:4a:8f:24:09:9d:
12:6e:ae:71:13:03:f0:59:86:43:93:d5:b2:7b:d2:
94:54:70:d4:a6:18:a7:4f:66:dd:6e:f3:5c:31:34:
db:b1:a4:53:f8:b9:1b:f8:31:5f:2a:7e:f2:c5:ab:
0e:3a:a9:00:24:fc:66:4b:07:f6:cc:a6:aa:01:43:
b2:dd:5a:f2:83:c2:67:57:ea:bf:71:a6:c9:a4:f5:
2a:96:1c:25:50:da:89:d4:49:cd:f0:d4:ad:74:2f:
97:11:94:bc:20:60:3e:b3:e6:72:b1:cd:41:95:95:
de:2b:4d:ed:45:a2:01:65:34:92:c2:05:8c:74:d9:
23:71:f7:1d:09:92:ed:97:17:fe:19:3a:6d:40:7f:
49:7b:07:db:96:f9:87:96:ba:74:b8:06:60:9a:4e:
13:40:6f:7f:aa:78:d6:82:aa:34:3f:65:ec:c7:ba:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:DC:3D:CF:E2:FA:0C:39:34:DA:4A:ED:2C:2E:01:3F:21:E7:26
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:5e:e0:12:85:86:87:e6:cd:5b:a0:3c:74:4c:1c:58:25:
a7:fd:7b:a3:00:42:7f:ff:27:7e:ce:a9:85:87:98:87:6e:8e:
45:56:78:3c:5a:a5:9a:9b:7f:23:f2:72:83:48:73:74:6c:9a:
47:7a:71:4d:37:69:af:b0:bc:2f:1b:2a:46:b2:5b:70:1d:05:
1d:b0:c4:6d:95:d7:38:80:15:90:97:61:ca:45:cc:bf:53:4d:
12:18:90:4f:d1:7a:91:e5:14:af:34:23:a9:f8:c8:aa:9e:11:
3e:ad:c9:ff:81:7e:37:d4:db:53:c2:be:69:1b:5b:90:43:ca:
8b:23:35:ce:db:aa:a1:9b:57:da:3a:2c:6c:a3:5b:05:e5:18:
aa:e6:37:f4:6d:b6:62:cd:ec:0d:28:7c:c9:ff:80:32:f4:48:
75:d4:ea:7f:f9:cd:4f:d3:c8:c5:b0:f7:48:64:ce:92:41:39:
0e:86:96:81:d9:6d:de:92:fa:66:02:93:a8:ea:b2:bd:55:a0:
05:f6:b2:58:a3:8b:3a:5b:b0:3c:d0:41:61:1d:37:39:93:5d:
e3:ba:fb:50:92:42:fe:0e:c3:29:72:0f:ca:11:cb:2f:0b:bd:
27:a4:a6:9f:24:ee:81:6b:b3:9d:b3:76:46:46:73:f5:93:be:
7e:ec:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:51:48 2024 by rpki-client on console-ams.rpki-client.org