Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: lWaFSO/ZYVczafjeG2ddmjoj06qE01hPIBun642+fBY=
Subject key identifier: E8:FE:37:49:64:3C:D9:46:96:2A:4C:02:ED:6C:D9:27:6C:D4:EA:06
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 018F874A7FF863EB6F69E6F41C5FD78F6C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 0441
Signing time: Fri 17 May 2024 16:02:37 +0000
Manifest this update: Fri 17 May 2024 16:02:37 +0000
Manifest next update: Sat 18 May 2024 16:02:37 +0000
Files and hashes: 1: DB4wjBrwL2eZkVrmW1g38rjMqpw.roa (hash: NThAzVn94D7QV7ccQk/9DFSXn/42WWXrBGFCNqEdMdk=)
2: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: 3kl9Qe7jzx02tNPrncJ5gza3zGVBqD4Jkho88N8JW5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:7f:f8:63:eb:6f:69:e6:f4:1c:5f:d7:8f:6c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: May 17 16:02:37 2024 GMT
Not After : May 18 16:02:37 2024 GMT
Subject: CN=e8fe3749643cd946962a4c02ed6cd9276cd4ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:a0:2b:25:93:80:8f:ee:8a:b6:3e:c2:31:
1c:8b:ec:09:41:fe:94:d9:27:08:94:18:77:bb:99:
2c:74:e7:bc:36:3e:6e:2d:95:6f:9a:81:af:d1:4a:
1f:d1:f2:ca:0e:1f:f9:84:1d:bf:1a:67:61:3b:dd:
c0:aa:2d:1d:e2:3c:06:df:c6:47:cb:27:8c:7d:5f:
d5:1f:ca:c1:0c:e1:ef:4a:9d:25:30:07:3d:d3:28:
35:d8:12:ac:d6:ae:5a:23:e9:9e:24:5f:23:07:98:
c0:82:9a:ed:07:1e:79:66:e9:74:ea:41:68:c5:ec:
89:ce:76:fc:6e:61:fa:ee:60:b8:23:3a:7f:2c:eb:
8e:3e:a0:44:1d:0b:af:ff:f4:2d:5a:20:c5:aa:b6:
77:95:db:d9:70:74:d5:f5:1d:a5:77:54:e5:b0:f6:
42:0b:30:23:29:ef:9e:6b:17:fb:31:0f:c8:13:71:
a3:99:c1:b2:43:db:1c:77:d4:52:be:d5:0d:72:93:
26:84:3a:1c:4e:66:aa:56:66:f2:8d:65:e9:3b:2c:
b2:42:82:41:34:3a:89:8e:77:c5:39:ed:d5:40:33:
7b:67:b3:30:f3:e2:28:f2:38:1b:78:a6:d1:a8:78:
6e:07:44:3c:0d:7f:31:f3:dd:2a:6f:93:9d:a8:9d:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:37:49:64:3C:D9:46:96:2A:4C:02:ED:6C:D9:27:6C:D4:EA:06
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e8:40:ca:0f:0f:b4:2f:79:80:fc:16:f5:99:e0:b3:6e:92:
46:fe:24:7b:56:dc:34:f3:87:67:92:89:10:26:7c:ac:ed:ee:
d5:fc:af:cf:a0:e9:72:1a:a2:f4:e2:a8:99:a0:52:51:4c:fb:
de:fa:16:f8:2e:6b:b1:7e:e7:3b:1b:46:19:c0:ac:e0:e0:f9:
3b:d2:13:e6:0e:42:aa:23:b6:c6:51:38:ca:8d:e6:6b:43:63:
fc:52:61:21:2d:37:63:cb:93:d9:6f:02:a5:d1:a2:69:5d:78:
51:a4:12:d9:38:f6:36:5a:b2:45:a7:d8:7d:93:78:30:b2:5c:
67:04:37:1d:fa:a3:bc:dc:4b:69:a0:0a:a3:3c:e7:45:0f:ac:
b3:73:7a:0e:75:13:79:0d:4c:26:6d:32:0a:27:bc:65:12:1b:
71:64:35:c4:29:06:1a:47:80:de:c8:c9:14:ae:7d:bd:90:03:
bc:43:bd:5e:84:e5:d8:40:7e:92:11:bc:b5:c1:d6:d0:9e:a3:
ac:8a:7c:05:e5:f5:70:e8:2a:9c:45:ae:4b:26:70:40:66:40:
b6:f6:a8:a0:f9:30:d0:2f:68:ca:ef:eb:ac:fb:3a:4a:cb:f9:
93:56:dd:ea:1a:2d:00:47:80:8e:df:08:eb:3e:e9:6a:ba:8d:
cc:d9:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:07 2024 by rpki-client on console-ams.rpki-client.org