Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
File: C1SAW-1aDw81rXLTAvMxbI1AYyY.mft (raw, json)
Hash identifier: xYRG9pDw/aVQyGGt9NBPqjgBZbmQex9nk/jRi1u4xJ0=
Subject key identifier: 49:51:7A:EE:1B:CC:D5:47:B6:E6:BE:3E:1F:9F:04:D0:84:C3:FA:BD
Authority key identifier: 0B:54:80:5B:ED:5A:0F:0F:35:AD:72:D3:02:F3:31:6C:8D:40:63:26
Certificate issuer: /CN=0b54805bed5a0f0f35ad72d302f3316c8d406326
Certificate serial: 018F2DCE11B82E2B6E7A8AD96A523ABD9381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1SAW-1aDw81rXLTAvMxbI1AYyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
Manifest number: 058A
Signing time: Tue 30 Apr 2024 07:00:30 +0000
Manifest this update: Tue 30 Apr 2024 07:00:30 +0000
Manifest next update: Wed 01 May 2024 07:00:30 +0000
Files and hashes: 1: C1SAW-1aDw81rXLTAvMxbI1AYyY.crl (hash: YcnOJTzg5dVYGPvaxc+Zceg63cbNtKXpiVW6AB7Flbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1SAW-1aDw81rXLTAvMxbI1AYyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:ce:11:b8:2e:2b:6e:7a:8a:d9:6a:52:3a:bd:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b54805bed5a0f0f35ad72d302f3316c8d406326
Validity
Not Before: Apr 30 07:00:30 2024 GMT
Not After : May 1 07:00:30 2024 GMT
Subject: CN=49517aee1bccd547b6e6be3e1f9f04d084c3fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:23:b0:3f:bf:79:92:0f:3e:6d:1f:51:19:
00:9c:0e:71:1f:bf:8c:d0:5f:48:a1:a8:10:77:ef:
30:e3:aa:41:0a:ac:3e:b3:6b:a8:90:91:93:ec:09:
9e:f6:b3:8d:08:f5:56:3f:b8:a5:1c:5a:81:62:d3:
cf:05:7d:69:98:70:74:65:a1:45:bc:6b:85:a7:d4:
2b:49:bc:47:81:ae:6d:c6:95:de:48:b8:32:01:9d:
67:98:0f:52:9b:9f:65:5f:3e:f0:ac:74:9a:dc:e0:
1c:d7:36:b1:b3:9b:a4:a6:42:83:67:1d:b2:a0:e3:
c2:4e:cf:f0:59:36:b7:98:ec:4c:82:fc:c5:11:d8:
6b:5a:64:5a:ee:35:fc:60:c5:fc:0e:97:9f:98:ff:
9f:0f:2b:5d:0e:1b:af:5a:6b:68:07:30:ee:0f:d5:
3b:97:33:f9:94:0d:7a:24:8f:64:f7:9a:51:79:01:
a4:0d:fd:ee:a4:1a:84:f5:93:82:b9:58:5c:c9:ea:
50:5b:48:2e:ab:69:87:11:4c:5b:be:dc:d0:e9:fa:
b4:62:88:dd:e9:02:fd:e9:83:05:11:c5:d4:6f:d5:
ea:3c:15:de:f4:51:15:53:5e:d9:98:5e:bb:71:a0:
b8:40:13:01:69:5b:c1:9b:1d:79:56:f2:19:46:b1:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:7A:EE:1B:CC:D5:47:B6:E6:BE:3E:1F:9F:04:D0:84:C3:FA:BD
X509v3 Authority Key Identifier:
keyid:0B:54:80:5B:ED:5A:0F:0F:35:AD:72:D3:02:F3:31:6C:8D:40:63:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1SAW-1aDw81rXLTAvMxbI1AYyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3560d6-b507-4905-abec-ba8bb39bb955/1/C1SAW-1aDw81rXLTAvMxbI1AYyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a0:b9:01:17:d9:43:de:93:27:7e:d4:3e:ac:f4:66:99:2f:
de:80:92:f0:dc:ec:6d:e3:11:d8:8e:84:90:5d:b4:43:30:e6:
a9:a8:68:dc:f6:5a:b8:96:59:36:6b:89:a7:b9:5e:96:83:68:
5c:5c:2c:2f:c3:2d:04:6d:80:9f:2b:d4:94:93:db:0b:e1:c0:
03:24:4f:c0:a8:54:88:e3:f5:52:32:7a:8b:f7:f6:54:dc:5b:
c3:db:6b:2b:13:db:a3:90:32:de:ae:bc:a3:05:30:71:4e:db:
22:6a:33:01:f8:cd:bd:fd:4b:a8:27:c7:df:4d:8b:f1:09:50:
d6:75:65:c2:f0:09:4a:a3:6b:7e:63:55:0a:3d:45:44:48:1b:
bc:47:53:6d:a8:3e:c8:04:35:61:89:fa:9e:b8:fb:78:c9:ef:
3a:da:57:4e:d2:e0:ce:2b:52:25:e2:83:4d:f6:2f:ac:a9:19:
d7:a5:25:20:80:e9:b4:98:38:1f:82:f2:aa:0f:4c:bf:30:8b:
02:30:ce:c7:ed:8e:ab:7b:54:f6:37:4e:70:37:46:e7:0f:74:
ae:50:a1:88:2f:c2:52:29:38:3a:e9:3c:06:c4:b8:22:a7:57:
36:7d:16:27:48:a9:d8:9b:76:0e:98:fb:87:32:96:1f:ee:61:
9a:76:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:37:03 2024 by rpki-client on console-fra.rpki-client.org