Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: T9c0EPIGtamMlFrb1nbe2LOQWHhWk52aTOjupuctNrE=
Subject key identifier: A3:6D:E1:E8:42:57:E2:F8:52:AC:F3:18:6D:87:A1:FE:93:B7:E4:A2
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 018F8892533623CB2A30246034D28BB2EE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 036E
Signing time: Fri 17 May 2024 22:00:41 +0000
Manifest this update: Fri 17 May 2024 22:00:41 +0000
Manifest next update: Sat 18 May 2024 22:00:41 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: SIkE8e3P9elW+CaoA6PPlroqXt8Orf6NJrMP7T5TmA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:53:36:23:cb:2a:30:24:60:34:d2:8b:b2:ee:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: May 17 22:00:41 2024 GMT
Not After : May 18 22:00:41 2024 GMT
Subject: CN=a36de1e84257e2f852acf3186d87a1fe93b7e4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:51:9c:31:8f:1a:d8:55:65:21:d4:86:fc:
b3:3a:5a:f3:3e:e7:1d:71:04:9e:a8:a6:84:94:2c:
40:fb:01:2c:ef:b9:d1:9e:cd:3f:d7:b4:1e:bd:3e:
60:d8:f2:4e:98:8e:c8:3a:d2:bb:1d:59:89:f1:42:
d6:bf:25:b1:96:38:a4:c2:03:27:b7:94:b3:85:ff:
06:1e:66:98:2f:05:53:17:0f:bf:3c:f2:23:e7:5f:
ce:30:1a:0f:40:7d:b1:0a:fa:5a:ba:e8:69:e0:73:
78:ce:20:f1:bf:06:d5:6a:64:29:8c:b1:1e:55:92:
b2:14:e3:c9:04:04:a7:63:93:49:b8:56:a9:43:80:
d1:0e:7b:5e:99:16:be:7c:25:bb:fe:5b:f3:87:e5:
ee:7e:1f:c6:fc:b3:0e:3c:2c:32:c3:d0:61:ec:dd:
5b:a9:03:88:1b:f0:9f:3d:4e:6f:c6:5c:5f:e1:d5:
55:7d:81:32:b7:21:0f:51:8f:a2:ce:ae:cb:2f:a3:
a8:3a:e1:7a:aa:e2:d3:d5:d8:20:c6:cd:f9:1f:9f:
66:b3:5e:4c:d5:de:bb:2d:0f:55:81:53:67:9f:c5:
10:e1:b0:de:81:b3:d5:9a:70:9f:48:e7:8b:6e:3d:
da:e0:af:26:48:1c:4e:97:69:c7:36:f7:3a:07:da:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:E1:E8:42:57:E2:F8:52:AC:F3:18:6D:87:A1:FE:93:B7:E4:A2
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fc:e8:2e:a6:e4:de:b8:1a:0f:85:a5:a5:e1:06:a0:48:b4:
e7:24:4a:78:2f:32:d8:7f:b7:08:6a:a0:c2:92:79:ba:85:dd:
d1:1b:1c:fd:b7:40:32:0e:2a:ce:ab:5f:8d:94:4d:d7:72:56:
2a:9b:5b:01:2e:bb:b6:06:da:9c:1f:05:c1:33:11:66:b1:cf:
14:5a:90:b0:45:fa:f2:25:1b:12:88:1c:0d:21:ac:60:f0:eb:
a4:61:ce:88:16:12:16:84:25:bf:e3:a6:c4:a9:c4:a2:d0:e4:
13:56:7b:5b:76:e7:4e:ca:2b:77:a4:c2:a9:e4:ba:7e:d0:e8:
b3:c2:77:a7:dd:f7:06:84:fb:24:f8:0a:ee:b8:82:df:ce:33:
83:28:0c:66:fd:db:66:ba:a4:d2:81:1d:de:b1:fe:04:a1:21:
e6:64:e1:0c:8a:f2:43:fb:b3:5b:36:f3:e6:2c:eb:61:27:1c:
7b:22:0e:cc:4e:0c:cf:4f:ad:87:1f:07:7a:2e:53:9a:7d:f6:
42:59:98:7d:e3:cc:7c:a6:6d:37:6e:65:ac:0d:20:40:a6:a0:
3e:5b:27:df:0c:9a:c7:2a:a6:90:5e:12:c5:2f:d2:02:6b:82:
bc:91:18:7c:c6:a4:6d:6c:11:81:62:3b:98:55:e0:11:e7:c5:
a4:c0:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:07 2024 by rpki-client on console-fra.rpki-client.org