Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
File: otIJQ2BBB_arGBOenTB1-XwHHOM.mft (raw, json)
Hash identifier: B/1+MIVCvYI7SUCBQVpf0r7CziHNOjctDEwu5rNHIEI=
Subject key identifier: C2:F8:D7:45:6D:C7:16:09:BF:73:9B:B1:E4:A6:7A:6D:BD:45:6B:65
Authority key identifier: A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
Certificate issuer: /CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Certificate serial: 018F98AB343797CB817F7DD73EDE7931C5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
Manifest number: 020B
Signing time: Tue 21 May 2024 01:01:47 +0000
Manifest this update: Tue 21 May 2024 01:01:47 +0000
Manifest next update: Wed 22 May 2024 01:01:47 +0000
Files and hashes: 1: 4IhxN6dETtHZkB0lPspu0TztDOE.roa (hash: +wIiw37yVz5vQlP59JLEZorTG3qlEhqiR2+rSllq+s4=)
2: otIJQ2BBB_arGBOenTB1-XwHHOM.crl (hash: RCucAm1/4fFBmbbiINcYbBrjUPc8aSzK4D3IJV6F0/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:ab:34:37:97:cb:81:7f:7d:d7:3e:de:79:31:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Validity
Not Before: May 21 01:01:47 2024 GMT
Not After : May 22 01:01:47 2024 GMT
Subject: CN=c2f8d7456dc71609bf739bb1e4a67a6dbd456b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:96:34:ce:84:94:69:c9:51:26:37:96:b1:28:
f9:7e:bf:00:6f:8a:55:19:2f:ea:3e:eb:90:6b:25:
ff:55:bd:ff:d7:02:b2:b5:49:ec:cb:e2:66:48:b2:
4a:17:5f:59:b0:9f:bb:47:64:25:db:0f:3d:2c:98:
62:86:ea:16:d9:f9:0b:bf:79:ae:af:9f:a4:50:9d:
71:e6:14:39:bc:12:2e:ea:58:04:df:86:17:53:0a:
8b:86:b6:8b:1d:34:aa:6b:14:61:40:9b:d0:61:0e:
33:d8:67:ae:74:9b:20:d3:13:ee:bf:34:bb:18:98:
bd:5a:41:c8:e1:09:df:87:40:ed:82:db:cc:ca:95:
bc:78:68:03:99:5c:b3:29:92:6f:be:34:bb:8f:34:
ac:64:78:15:fc:1c:2c:be:e7:cd:89:69:00:72:3f:
0b:45:36:d7:8e:97:7a:ef:41:0a:fe:85:79:26:be:
3f:fe:aa:8b:01:67:6a:85:c9:1c:9f:c6:e8:ae:ad:
d8:b9:bd:27:e9:86:3b:8a:e8:d0:de:64:d5:be:ce:
b0:e6:4f:da:4d:31:08:35:ba:f1:1b:07:cf:6e:48:
cd:0b:9e:95:8f:02:d0:79:b8:fd:0f:34:43:1f:06:
ed:a1:05:09:10:8f:9e:94:cc:1c:8b:6d:d1:44:ce:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:D7:45:6D:C7:16:09:BF:73:9B:B1:E4:A6:7A:6D:BD:45:6B:65
X509v3 Authority Key Identifier:
keyid:A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:bb:e8:94:91:75:cf:3e:21:15:02:32:e1:6a:8b:ab:c2:
3b:77:65:0b:fc:2b:39:0d:5a:e0:76:85:99:09:d4:15:2b:e7:
0c:c7:3c:db:14:b0:42:e4:bd:dc:7f:ec:74:44:f5:dd:97:80:
3a:86:a5:50:72:7f:b0:d1:3b:a4:35:2d:f2:8e:8e:ce:4b:c9:
7b:12:93:ca:95:ca:da:9a:e8:47:15:a8:34:5a:05:7c:25:f3:
18:e0:b1:01:1e:d9:ab:fd:d1:6e:40:34:ae:5a:4f:71:8f:aa:
67:64:48:f5:3e:1b:a2:93:27:07:95:d6:7d:9f:aa:ef:06:25:
ed:a0:57:90:d3:71:b3:c1:08:85:24:a5:76:16:04:e5:ed:d4:
3d:3a:50:43:09:72:e3:a7:54:73:68:07:b4:dc:be:ae:2c:35:
38:5e:54:f4:7a:b5:72:d5:ab:5c:9b:b3:b8:b2:2b:44:99:b4:
48:81:1d:e8:00:3a:49:a0:97:0e:11:4b:79:92:18:b9:39:61:
bf:17:91:2a:50:68:76:d1:0a:d7:32:c5:66:8c:ba:75:65:2e:
9e:40:29:15:59:7f:07:0f:fc:09:a8:e2:a3:5c:75:52:23:5b:
46:2a:c0:51:03:7f:f4:3f:3d:dc:54:83:47:c7:7b:be:5b:3b:
91:0e:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:31:52 2024 by rpki-client on console-ams.rpki-client.org