Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
File: LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft (raw, json)
Hash identifier: x6bugb1t+q8mS6+EPn84u9TB/FXL+SAtML0tWm5DcHI=
Subject key identifier: 65:DD:AD:3D:D3:5D:1A:6E:00:F4:D7:CF:CE:D8:75:4B:D4:AA:BB:74
Authority key identifier: 2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
Certificate issuer: /CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Certificate serial: 018F8C6EB19FC36F4EE192F8DC0DFFD3E090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
Manifest number: 0138
Signing time: Sat 18 May 2024 16:00:15 +0000
Manifest this update: Sat 18 May 2024 16:00:15 +0000
Manifest next update: Sun 19 May 2024 16:00:15 +0000
Files and hashes: 1: LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl (hash: Gowmsgjk9fUOUeekRL4DGDGBVj7Ll08d2EaSIyNjDV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:6e:b1:9f:c3:6f:4e:e1:92:f8:dc:0d:ff:d3:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Validity
Not Before: May 18 16:00:15 2024 GMT
Not After : May 19 16:00:15 2024 GMT
Subject: CN=65ddad3dd35d1a6e00f4d7cfced8754bd4aabb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:be:ed:26:b8:d8:e0:d3:ba:ab:38:b4:15:
e9:86:cb:bf:83:0b:ef:2b:b2:95:77:b6:e3:e0:b8:
4d:ec:c1:87:9b:87:43:5c:5a:ec:22:bb:c4:fe:17:
a5:c4:8d:7a:4c:59:2a:34:24:ad:2d:eb:4c:4e:f4:
4d:24:28:4c:4a:f2:4c:0b:db:60:40:93:9e:7d:76:
35:3f:13:4e:b9:33:b5:f1:84:85:4f:96:54:5d:e8:
de:4f:52:89:69:f2:ae:d2:eb:e7:fa:1a:d8:bf:1f:
7b:1a:0d:2f:39:16:3f:c4:38:99:c8:7a:a6:1a:b9:
30:21:ca:56:66:1a:af:05:63:58:67:0e:c2:c4:81:
c2:44:5e:b5:fd:ec:d7:e0:f0:40:8c:c9:4b:51:29:
dc:24:fc:48:54:8f:66:74:68:6a:28:b9:27:88:2d:
1a:89:f1:cb:5e:78:d4:1c:44:cf:4a:50:33:9e:21:
ae:1d:d1:a4:e0:30:fd:83:46:d6:95:25:67:b3:99:
f8:96:2d:29:3e:fb:71:1e:a1:cb:e8:dc:1f:8a:dd:
4e:23:67:9a:ee:18:f6:ba:84:2b:cf:bd:65:9b:f4:
42:30:c1:b9:fe:69:be:a0:35:c6:cb:69:ad:92:94:
a4:d1:16:ce:a6:14:44:49:78:10:14:04:1a:07:90:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:AD:3D:D3:5D:1A:6E:00:F4:D7:CF:CE:D8:75:4B:D4:AA:BB:74
X509v3 Authority Key Identifier:
keyid:2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:8c:57:85:b5:40:be:f8:93:09:7b:a4:1d:8b:c6:9c:e5:
eb:6e:dc:fd:09:38:12:dc:10:b2:cf:f2:48:33:60:ed:8a:3a:
c6:a3:43:96:b3:90:38:fb:a2:1d:5d:29:2e:4d:84:3c:eb:ea:
78:57:3c:b5:76:f3:3c:df:e4:b7:b7:8f:45:a9:98:b8:85:b1:
c6:a4:a8:09:45:7e:d9:c2:f8:f0:44:a7:04:79:c8:ad:95:5b:
32:08:54:a5:1d:d7:a4:d3:f4:fd:d6:dc:bf:1c:ee:9f:fb:ee:
40:14:d0:14:95:74:e9:e9:42:df:8e:db:e6:33:bb:72:fb:5e:
59:b2:d6:e7:b1:96:4e:9e:7a:55:36:22:f2:64:9f:b2:2b:2f:
55:f2:8d:3e:8f:e9:ff:c2:69:5a:95:58:67:98:d8:ab:e6:ec:
5d:e5:29:29:6f:c2:ba:92:1e:c6:0d:e1:c0:75:3b:ac:48:22:
5f:b0:26:d6:de:40:74:d4:73:7e:cf:fb:18:b6:e4:7b:7b:b4:
3f:ad:29:6d:17:a5:b6:f4:e7:f6:56:4d:33:80:c0:4a:43:70:
bf:7a:2c:75:be:cc:6c:bc:62:2e:4e:8f:b4:ed:b3:f1:79:52:
85:5a:8a:94:33:78:77:0b:3b:54:7a:4f:a0:9a:74:ed:7d:74:
bf:64:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:01:26 2024 by rpki-client on console-fra.rpki-client.org