Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: WJYxg9Tkpwts/tgWaMCVYQkfTKYA0dEkWF+DhziXpbo=
Subject key identifier: 9E:76:7E:72:72:47:C1:90:3B:BC:D9:A3:A2:2A:2A:85:4A:C3:B4:80
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 018F866CE5B7E6D9BF18EEB564ECC31683E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 12:00:34 +0000
Manifest this update: Fri 17 May 2024 12:00:34 +0000
Manifest next update: Sat 18 May 2024 12:00:34 +0000
Files and hashes: 1: 2_kYM8UycXt919TcX5mOTsnEKUg.roa (hash: cMsfqDbPwYb+rHnoDfg7qTFNioii1dihoosr5nyhOCI=)
2: eyb9WMGGMfI97ol7Y_AEWpf2HWg.roa (hash: VTZTA+PmpEkq+waDAMXCQjHMPg09hN+phzURPEMy+EA=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: Rhof4jQ6flGXLX1/7NhBbRYPpYwlJaYyMIvJX/oA7/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:e5:b7:e6:d9:bf:18:ee:b5:64:ec:c3:16:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: May 17 12:00:34 2024 GMT
Not After : May 18 12:00:34 2024 GMT
Subject: CN=9e767e727247c1903bbcd9a3a22a2a854ac3b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:0b:66:81:3e:f6:f6:fe:7c:f7:43:2e:18:
b3:cd:71:3b:39:af:0f:56:72:7b:bd:9e:dd:a1:98:
56:71:34:73:78:b8:5e:90:6d:26:43:ba:a5:d3:6e:
32:ce:e2:98:f0:ff:6e:f2:c8:a1:ad:b0:0c:56:51:
82:1d:a3:df:93:6a:da:87:59:1e:8b:5c:0e:b8:ec:
ad:8f:6c:3f:8d:48:67:36:56:03:43:cf:97:67:5b:
e1:36:6c:f2:00:41:85:f6:17:eb:a1:02:b7:cc:3c:
d6:88:18:60:f8:0a:7e:b4:27:66:ca:3b:69:c9:2d:
08:80:20:c6:cb:1f:55:61:51:d5:39:2f:a9:b5:3b:
d7:ba:41:6e:68:e4:68:e8:96:e1:d4:b7:b5:7c:3d:
9d:b5:4b:0b:17:5e:21:5a:ed:3c:82:53:2d:06:01:
79:23:48:5d:73:67:2d:e5:2c:0b:55:c8:f1:57:41:
54:d7:24:83:bf:bb:0f:14:b5:ce:d0:f3:01:be:f6:
cf:a0:82:11:05:e7:dc:8c:e7:4d:5d:ed:6b:63:61:
1f:3f:3a:8c:45:61:7f:71:14:39:49:c4:ae:74:d9:
08:42:2b:20:e4:94:67:dd:45:a2:73:26:26:07:34:
07:c1:bb:a9:07:06:e5:c7:6d:69:62:2f:d5:cc:eb:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:76:7E:72:72:47:C1:90:3B:BC:D9:A3:A2:2A:2A:85:4A:C3:B4:80
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:66:2c:19:0e:df:85:57:b0:fa:da:20:54:44:fc:95:b7:9f:
a0:60:c2:e5:55:eb:73:ff:29:4b:3a:4e:9c:11:e7:38:97:4b:
4a:02:43:de:83:72:c0:3e:f8:e2:e5:b5:b2:26:98:c6:64:87:
db:dc:8a:95:7d:cb:13:3a:89:6e:17:a9:b6:43:1c:9e:a7:d8:
72:ef:80:d2:26:a2:57:7a:2e:ad:05:b2:eb:e3:e9:db:91:87:
46:0e:2a:d3:4b:2a:c2:11:f2:65:ea:7b:7e:a7:44:fa:7c:68:
01:0a:e7:79:d2:bc:0a:fa:1f:c6:2e:f8:9f:a8:f8:63:72:92:
13:60:5e:ed:38:02:4f:35:72:11:cb:dd:7f:01:43:7b:05:34:
67:f6:ac:09:1e:90:31:8a:56:1f:ed:fe:09:1d:e5:dd:e5:32:
36:60:7a:5c:3e:a9:5d:9f:26:ea:37:ae:0d:f0:e8:2f:3c:16:
24:d5:5d:08:71:7a:12:ae:cb:63:59:56:36:cb:b5:74:6a:88:
f2:72:8d:20:a9:4d:43:02:cf:90:82:69:bd:ba:7e:d0:db:23:
e7:0e:10:02:56:c3:74:41:aa:48:d8:ec:a8:26:22:5a:58:44:
56:1d:84:96:d1:6c:15:b4:69:4b:2b:73:0a:8c:cb:dd:6d:37:
3a:43:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:51 2024 by rpki-client on console-ams.rpki-client.org