Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: 1OKzpDUSQFAnsJh8XPfJQUQYXzgc43emDcVBEblsHNU=
Subject key identifier: D8:44:EF:31:43:75:3D:6E:04:91:53:FA:3B:DF:2F:7E:74:A1:C4:6E
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 018F4B6E1A65D73B527ADB09FD670FC55B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 041F
Signing time: Mon 06 May 2024 01:04:17 +0000
Manifest this update: Mon 06 May 2024 01:04:17 +0000
Manifest next update: Tue 07 May 2024 01:04:17 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: ap8t92mO6sOflXPe2FWIwZgb/ld0wows7qkX0auQ8KY=)
2: oN6kb2kIiU1t4AdUjDkQRQgSQi8.roa (hash: dcfzmRyTpZesrwMrZo4a7l6uEK+4sy/t7gOhDuQDBHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:6e:1a:65:d7:3b:52:7a:db:09:fd:67:0f:c5:5b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: May 6 01:04:17 2024 GMT
Not After : May 7 01:04:17 2024 GMT
Subject: CN=d844ef3143753d6e049153fa3bdf2f7e74a1c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:df:a0:6b:8d:ca:36:99:75:52:70:7f:08:
e1:5d:48:46:45:c4:44:d2:c0:b9:7a:d6:56:50:ef:
c5:55:df:a1:86:5a:e2:2c:3f:b5:fe:a4:5d:1a:4b:
52:ab:23:8d:1c:2b:85:08:7b:70:e8:36:b1:02:8a:
09:56:69:26:68:4d:f5:b8:e4:fa:c8:2d:4c:be:16:
a3:db:bf:47:df:55:cb:9e:84:0c:a6:cb:95:f5:d8:
ac:85:da:1e:94:42:96:b4:40:f4:60:07:99:8c:dc:
1b:d2:78:e8:07:62:2e:c9:71:e0:9b:f5:10:a9:9a:
4b:46:2a:a2:61:0c:b4:2e:8d:d1:57:59:49:7a:e1:
70:41:15:eb:f6:92:ed:c7:96:82:4a:da:be:9e:26:
36:07:a5:1f:de:28:91:0c:f0:8d:e5:6b:5e:0c:9b:
05:77:6c:da:0c:0d:25:42:1c:5f:d5:1d:57:b1:56:
cd:bf:99:d7:56:09:a3:01:fa:51:ce:eb:9a:7d:cc:
32:a6:3b:62:95:d1:0c:d7:79:77:d7:42:49:5d:19:
cc:89:d1:96:42:37:2a:36:9c:88:e1:cd:fe:e2:0e:
2a:ac:ad:5b:eb:33:77:59:20:9d:95:e9:2a:09:c2:
48:1f:e7:24:8a:0e:00:ac:a4:1e:d9:dc:a4:31:9e:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:EF:31:43:75:3D:6E:04:91:53:FA:3B:DF:2F:7E:74:A1:C4:6E
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:2c:bc:32:28:c7:ce:c1:84:26:38:85:9f:29:0a:93:19:
74:2b:a1:ce:6a:d7:91:af:2f:02:89:18:25:54:c5:11:20:d9:
9c:23:86:84:f3:a7:9e:75:15:43:bf:f0:b5:16:75:66:15:14:
44:67:41:91:7b:35:c0:7d:f1:6e:d4:61:49:fb:20:ff:3b:fb:
64:bb:e4:f5:62:d6:b5:72:c7:d5:74:a9:8d:ae:08:24:1e:a8:
2b:3b:45:84:3a:42:90:be:cc:76:54:38:e2:13:f1:86:f8:4a:
52:27:d6:13:7f:37:48:24:19:e9:a6:e8:18:c3:c2:c5:45:ab:
55:72:3d:18:cc:92:2b:25:d5:5c:e1:f5:b1:ed:60:51:1d:e9:
e7:cc:c4:64:05:6e:7d:92:ff:94:8c:c7:30:a1:75:b5:d6:55:
3e:cf:f4:98:02:e7:fc:ac:b0:7c:f0:61:e3:5c:13:38:21:cd:
98:f1:f9:54:1a:4a:76:3f:c3:d0:7d:35:60:16:08:52:d7:38:
43:f0:90:c5:9d:33:a4:3b:0b:36:02:2a:b7:00:42:2f:b4:54:
a4:be:27:9f:e2:c8:f5:74:f4:c6:d7:9f:0f:96:f2:af:58:ab:
91:cd:a8:ef:b8:a9:db:77:b1:d9:bf:a1:a6:fb:2a:99:bd:09:
bd:fc:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:43:58 2024 by rpki-client on console-ams.rpki-client.org