Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
File: e3GzUs9psfJyplQhurrIElGJ0-Q.mft (raw, json)
Hash identifier: STJ35QzgAjbP09UHL5oJnb90+lXJuqi6Vpo+P7EYN38=
Subject key identifier: 3F:37:04:BD:46:95:45:12:87:72:80:D3:30:B1:A1:2D:EE:99:4F:30
Authority key identifier: 7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
Certificate issuer: /CN=7b71b352cf69b1f272a65421babac8125189d3e4
Certificate serial: 018F87484042C80CC8618287DDD9E4BE7F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
Manifest number: 04D6
Signing time: Fri 17 May 2024 16:00:10 +0000
Manifest this update: Fri 17 May 2024 16:00:10 +0000
Manifest next update: Sat 18 May 2024 16:00:10 +0000
Files and hashes: 1: e3GzUs9psfJyplQhurrIElGJ0-Q.crl (hash: 8Ln+2hLtFdZKKBIBnrzUPpteu8oCQjoQVr+dTrejHq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:40:42:c8:0c:c8:61:82:87:dd:d9:e4:be:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b71b352cf69b1f272a65421babac8125189d3e4
Validity
Not Before: May 17 16:00:10 2024 GMT
Not After : May 18 16:00:10 2024 GMT
Subject: CN=3f3704bd46954512877280d330b1a12dee994f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:4c:94:b9:26:27:e1:95:a6:63:79:b3:63:
a7:9f:03:96:53:cb:05:0f:b1:a3:69:ae:6e:71:72:
dd:de:20:f7:53:c5:de:1a:70:bf:9d:0d:2b:82:05:
0d:9a:fa:d5:3e:16:10:f8:67:6d:c0:3f:58:47:3d:
ec:db:e3:5d:ee:e0:8d:2b:61:88:ef:76:d0:05:4f:
b9:7d:a6:b7:34:bf:45:88:60:48:5d:cf:57:3a:61:
1e:88:83:de:2f:8f:c2:99:d3:0b:05:48:f4:1d:34:
77:4c:07:ee:94:5f:bd:4a:0e:b4:32:01:6b:b8:6f:
a8:29:69:9f:13:db:70:32:1f:89:9d:f2:eb:8d:de:
14:34:d4:eb:c2:bb:c4:db:e7:c3:eb:e7:ea:d8:5e:
01:3c:f0:c5:79:d9:14:f3:e7:39:a2:6b:35:1c:c3:
6a:cb:4f:b5:91:fd:80:68:8c:93:b5:45:95:3b:8f:
38:f7:55:0d:35:11:c8:04:f9:b4:d1:db:6c:f3:9f:
91:b2:0f:82:d8:11:dc:6b:4b:f6:04:6d:48:dd:83:
8d:00:d2:a9:fe:a4:6a:e4:a4:f5:44:4d:bf:e8:7d:
71:81:5d:c1:a8:53:7f:17:60:bc:4f:b6:75:64:0d:
47:4b:a4:06:df:c9:51:02:9a:88:3f:1f:bc:9e:9e:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:37:04:BD:46:95:45:12:87:72:80:D3:30:B1:A1:2D:EE:99:4F:30
X509v3 Authority Key Identifier:
keyid:7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6e:e2:69:6a:e3:93:6b:8d:00:7c:05:5f:0c:83:80:76:6e:
a5:35:23:4f:2c:6a:7f:0a:6f:94:4d:d4:52:2a:ac:96:12:10:
7e:cb:5c:9b:7e:2b:04:34:9a:33:86:bf:04:6f:04:5a:0f:ee:
b5:d1:f9:11:c7:14:5d:09:be:43:b2:ff:fa:4a:e1:2e:09:8d:
17:c2:fe:5d:a9:f7:ac:d4:20:43:e7:3f:f6:7b:28:cb:a4:38:
aa:0e:0d:fc:b3:08:02:94:3f:c2:78:1e:2d:68:f2:8f:ef:26:
3c:c4:d7:d0:a7:af:3e:e9:10:5c:12:70:40:79:07:f1:3a:9a:
9b:26:1d:11:07:5d:12:6f:79:3b:a2:9e:a4:02:94:3d:47:9e:
71:34:ba:49:05:11:bd:f1:4d:69:c7:fc:7c:af:f6:bf:f6:96:
f4:21:30:1e:ce:54:f8:9d:77:8c:73:09:14:3a:d8:f3:e0:04:
05:f4:59:4a:13:39:86:17:43:bd:54:09:89:97:e7:ca:61:28:
29:01:5a:6a:ba:8d:a4:be:77:e8:34:da:f9:85:fa:e2:60:4d:
e4:b3:65:1d:23:ef:5a:a2:66:20:24:69:a8:21:71:93:12:5e:
7d:b8:41:17:92:50:af:97:5c:a7:04:ef:6c:cf:06:3e:a7:63:
a0:71:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:44 2024 by rpki-client on console-ams.rpki-client.org