Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: z8TfN/Bl5gbozBFlpxgdPVP2rHZACyYVGD0a024klkA=
Subject key identifier: 8D:A7:40:45:3F:FE:DD:B9:E4:D5:F5:29:1C:D4:6C:81:1C:6F:99:1C
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 018F88244E8F714724A00A9C3DEB1EBAF779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 20:00:31 +0000
Manifest this update: Fri 17 May 2024 20:00:31 +0000
Manifest next update: Sat 18 May 2024 20:00:31 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: CJMtsPcFzrXI1Q97XySl5jp0r2w+JcD3gBBzBrTm3Js=)
2: qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa (hash: OIACBeyU7yQSofD/DDxyap+1u8eHInqVBFeozOGV4s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:4e:8f:71:47:24:a0:0a:9c:3d:eb:1e:ba:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: May 17 20:00:31 2024 GMT
Not After : May 18 20:00:31 2024 GMT
Subject: CN=8da740453ffeddb9e4d5f5291cd46c811c6f991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:ec:70:4a:86:d7:eb:f0:5b:d5:64:82:54:
93:da:d1:4f:ec:56:c6:0a:03:10:5c:99:ff:3e:94:
37:e4:e0:a5:74:3d:9a:5c:71:51:4e:b1:97:71:d5:
33:54:da:dc:3f:3d:17:35:cd:e7:bd:be:d6:04:a0:
10:54:60:8e:a9:03:0f:29:80:14:1f:c5:44:a7:93:
0e:9f:23:3d:3c:a6:52:12:9c:3f:a0:d1:71:41:c9:
96:9e:92:0b:9e:16:81:a2:d6:0f:e0:09:62:ee:68:
05:94:51:39:a6:96:a0:15:52:aa:d1:d4:81:9f:db:
3d:e5:bd:16:11:7a:97:41:4d:6e:ca:0f:5c:68:81:
77:d6:3f:63:4e:cc:fd:c3:14:ea:65:03:cd:a4:2c:
b4:7b:4f:e7:e7:2b:cf:95:d0:91:e6:fc:1f:de:63:
45:75:6f:57:a0:73:ed:02:03:d6:55:cf:5c:d9:ec:
ed:32:17:6e:06:fd:99:8f:a0:e9:db:6b:ea:02:f9:
ec:ed:f2:fd:19:d2:f7:e7:da:00:b8:b0:0b:f8:6d:
8c:19:32:00:f2:b1:b9:7a:28:f6:1b:8a:8c:bd:66:
5f:e2:0b:87:d2:94:7e:94:10:47:e2:df:16:dc:ca:
f6:ff:65:07:9a:3c:2d:23:4a:a9:10:7f:a5:32:93:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A7:40:45:3F:FE:DD:B9:E4:D5:F5:29:1C:D4:6C:81:1C:6F:99:1C
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1c:50:42:35:07:5b:ae:1a:90:51:f6:15:d0:ba:19:18:3a:
59:8e:1f:f9:a4:bf:e2:79:38:ba:c1:c4:d3:a0:6b:6b:c0:a8:
39:1b:fe:10:85:39:eb:26:fe:ce:38:b9:3f:4f:14:37:d8:25:
6e:da:75:42:65:d1:5f:91:bc:2e:5a:21:f1:f8:83:a5:11:d8:
1c:0d:1d:5e:37:23:76:6e:d8:22:eb:35:fe:86:40:21:86:29:
81:5b:15:f3:2c:3f:b6:b6:5f:e3:4a:bf:23:13:63:7f:55:eb:
fa:77:e5:0f:88:51:80:2b:15:b8:06:87:3c:22:07:77:e1:d1:
e0:7d:5b:74:53:9d:9d:b3:e3:32:80:21:f9:b0:69:e6:c6:ca:
21:44:d8:4c:35:78:5a:63:7a:fd:91:95:dd:00:fe:dc:fc:3f:
81:2d:bd:44:96:f9:f7:93:27:1e:43:d8:dd:bc:b5:46:0c:49:
a5:a4:87:21:e2:69:53:cf:c0:b7:89:45:3f:43:bd:7e:de:be:
61:81:56:73:75:58:00:f6:5e:24:d8:d0:1c:10:0c:ca:00:03:
78:d7:ef:a7:f8:d3:e7:65:59:16:0e:53:3c:c5:16:ce:03:3d:
51:87:f2:bf:3f:b9:69:9a:6d:46:d9:1a:39:2c:61:d5:5c:58:
57:0e:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:56 2024 by rpki-client on console-ams.rpki-client.org