Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
File: doLdOwLxwpVedAMvV4kT9s6WMCM.mft (raw, json)
Hash identifier: 4aZ5Ke93iE38Xv+4F0PuMuQVyHaYBI6i3lv1AnJmO88=
Subject key identifier: 94:D2:3A:99:8B:2C:E3:FC:2E:D4:7B:19:78:3A:AA:F3:B2:02:F3:1C
Authority key identifier: 76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
Certificate issuer: /CN=7682dd3b02f1c2955e74032f578913f6ce963023
Certificate serial: 018F94CF85CFE3BAD1DEF21D95A2B11CC002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
Manifest number: 0873
Signing time: Mon 20 May 2024 07:02:59 +0000
Manifest this update: Mon 20 May 2024 07:02:59 +0000
Manifest next update: Tue 21 May 2024 07:02:59 +0000
Files and hashes: 1: doLdOwLxwpVedAMvV4kT9s6WMCM.crl (hash: S8YDwGE3XDj5k7x4Cs+VDXVb9ASO3Wd6Y8mLBo2iMeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:cf:85:cf:e3:ba:d1:de:f2:1d:95:a2:b1:1c:c0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7682dd3b02f1c2955e74032f578913f6ce963023
Validity
Not Before: May 20 07:02:59 2024 GMT
Not After : May 21 07:02:59 2024 GMT
Subject: CN=94d23a998b2ce3fc2ed47b19783aaaf3b202f31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:69:17:23:77:e1:73:44:01:48:0a:05:ba:
41:c2:01:2b:2d:6c:54:db:b5:b6:7f:81:93:e0:0a:
ae:cc:b8:23:94:df:11:05:17:97:9a:2e:95:66:17:
b8:b9:5f:88:d9:67:f4:12:70:e9:ee:25:55:fd:e7:
1b:86:4b:7f:0e:43:90:36:49:ba:6a:70:fc:40:7a:
15:ab:f2:b7:9e:9f:53:89:b9:f4:64:cc:ef:95:01:
12:66:2d:d3:f3:ab:be:17:dc:f0:00:55:c6:5e:87:
2a:15:01:67:92:f0:f7:0c:85:1f:79:4c:22:f5:ff:
88:77:1d:46:b7:2a:03:66:38:86:d7:ca:25:31:58:
6d:3c:a5:4e:91:27:41:1a:01:32:19:71:6c:36:a1:
d2:86:d5:94:f6:da:dc:38:82:43:33:77:35:e4:b6:
25:69:a3:0a:54:a0:24:1a:db:77:e3:08:db:f3:c8:
a6:87:4b:62:fb:24:8d:75:b9:69:96:02:b5:d0:41:
c7:4e:73:69:72:49:ec:93:1c:bd:5a:a9:16:c6:03:
65:15:21:05:6a:14:c4:c0:15:de:a4:62:45:59:83:
46:99:5a:26:d1:22:ec:25:23:d4:e1:54:e1:d1:bb:
30:4b:9a:77:88:b5:06:90:b9:cc:f2:a8:8a:98:8a:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:3A:99:8B:2C:E3:FC:2E:D4:7B:19:78:3A:AA:F3:B2:02:F3:1C
X509v3 Authority Key Identifier:
keyid:76:82:DD:3B:02:F1:C2:95:5E:74:03:2F:57:89:13:F6:CE:96:30:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doLdOwLxwpVedAMvV4kT9s6WMCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0d750f-221b-45f3-acf9-d3f128baf249/1/doLdOwLxwpVedAMvV4kT9s6WMCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9a:52:f2:7b:e7:d1:9f:83:c3:ab:f9:1a:55:1a:6a:e6:36:
65:8e:22:3f:d1:24:e9:e1:40:79:38:1e:bd:a5:3f:84:e3:76:
e5:c7:36:0e:9c:f6:6a:b2:0c:bd:4c:b5:0c:b7:2a:03:d3:f4:
f5:77:fa:71:83:5b:ef:42:df:b2:4e:33:bf:a6:6f:f0:11:96:
7d:99:3d:eb:4b:94:c3:ed:87:dc:0d:99:13:d2:fe:6c:72:0b:
a9:ac:79:4d:13:82:ce:01:49:33:32:94:aa:1f:2c:36:e9:26:
30:77:26:53:c9:d1:47:83:2a:dc:54:34:6a:e0:c9:d2:1e:a0:
19:c7:52:a5:55:90:0a:bf:2d:c1:13:ae:ea:3f:f6:d5:fe:85:
08:a9:9f:49:71:60:2a:80:94:c6:77:09:4f:ca:8a:f7:b1:5b:
7b:e3:3f:a4:29:e9:0f:c4:ce:b5:67:5f:70:d8:38:9a:ca:ef:
70:5a:ca:d8:1b:26:85:f3:d5:f1:f0:79:0c:44:70:54:b7:7d:
07:d4:0c:e5:23:2d:49:83:fb:ea:85:5e:dc:06:5f:e4:42:a4:
cf:d2:7f:11:9d:00:d8:aa:fd:12:52:6c:90:78:39:a9:c9:3d:
d1:52:bb:64:c0:f5:76:97:0d:70:a8:e6:d2:a1:0a:b7:13:d0:
45:e7:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:16:16 2024 by rpki-client on console-ams.rpki-client.org