Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
File: jYzDMwiBzYyjntYJ_-GENySyqaw.mft (raw, json)
Hash identifier: m2hXbP2Zd3on5tsWhefU1nGTiPXoklNL/Bes9ofT+U4=
Subject key identifier: 36:13:2E:F2:9F:73:EB:71:04:46:59:EE:67:D9:20:7B:93:C8:FD:11
Authority key identifier: 8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
Certificate issuer: /CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Certificate serial: 018F8748D4FFFAF234F058960CB5FF2FC173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
Manifest number: 1175
Signing time: Fri 17 May 2024 16:00:48 +0000
Manifest this update: Fri 17 May 2024 16:00:48 +0000
Manifest next update: Sat 18 May 2024 16:00:48 +0000
Files and hashes: 1: jYzDMwiBzYyjntYJ_-GENySyqaw.crl (hash: OJ9swv1NmFwnEWNE8EtGl7X4IF+OeSrlUjSYVnxVfOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:d4:ff:fa:f2:34:f0:58:96:0c:b5:ff:2f:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8cc3330881cd8ca39ed609ffe1843724b2a9ac
Validity
Not Before: May 17 16:00:48 2024 GMT
Not After : May 18 16:00:48 2024 GMT
Subject: CN=36132ef29f73eb71044659ee67d9207b93c8fd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:c0:d3:bf:f9:31:77:54:a5:ce:3d:5f:1e:
2c:6f:05:59:04:eb:56:51:65:d3:8a:8b:15:5c:1c:
b0:13:6b:26:a3:65:ec:53:8e:32:a3:ce:01:6e:d9:
92:10:15:57:91:9c:08:d5:be:82:3c:0a:7a:68:5e:
7b:04:f3:81:ab:39:d6:61:af:2b:77:29:d9:e4:03:
8c:4e:de:3a:75:2d:b4:97:95:cb:b5:14:b2:e0:6a:
46:8b:77:be:63:f6:df:7b:a6:af:5e:63:91:40:92:
04:30:60:b4:89:17:d8:77:b5:35:fa:16:af:7f:8c:
0d:37:18:aa:dc:c6:8c:e0:1b:82:46:8d:62:15:8c:
1d:2f:f6:fc:0b:43:c6:a5:7f:da:72:1b:09:ce:9a:
89:d1:45:bd:2a:76:d9:32:7a:63:a2:83:d0:93:68:
1d:4d:76:7d:f3:d9:01:c0:c4:62:21:06:a0:f0:a0:
2d:a3:24:ec:20:5b:02:24:af:68:ce:da:61:84:41:
ac:d1:35:a1:a9:6a:d9:09:8f:61:d8:19:73:05:1f:
9e:42:32:9e:fd:3e:5a:00:4c:dd:fd:f8:37:f1:1c:
8a:4b:63:cc:4d:17:01:1a:4a:e2:c6:f8:0c:df:1d:
88:d5:e5:e6:3c:9d:fd:bd:71:93:75:26:72:75:34:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:2E:F2:9F:73:EB:71:04:46:59:EE:67:D9:20:7B:93:C8:FD:11
X509v3 Authority Key Identifier:
keyid:8D:8C:C3:33:08:81:CD:8C:A3:9E:D6:09:FF:E1:84:37:24:B2:A9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYzDMwiBzYyjntYJ_-GENySyqaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b9066-2ea7-4204-a84a-e3e8a98c2168/1/jYzDMwiBzYyjntYJ_-GENySyqaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8d:1b:05:0b:5b:90:82:0e:59:ce:c9:38:d5:9f:96:be:80:
48:eb:34:f7:61:8d:2f:94:01:66:36:e9:13:a5:65:74:47:db:
b1:ec:bf:38:35:22:1c:7d:5c:22:63:2f:3b:db:a3:ce:90:f6:
8b:3b:5d:88:24:28:d0:c0:22:9e:0c:d7:8c:0c:02:83:0b:dc:
30:01:8b:d7:be:ed:b3:b2:e3:9c:fb:17:12:0a:d1:e8:69:77:
bf:e8:9f:b5:ed:ef:d8:ce:55:ce:2d:8a:07:d1:3f:63:10:fd:
2d:86:65:02:50:a3:db:5d:48:78:c3:1c:53:22:34:db:4a:31:
13:43:59:a8:de:ec:f8:55:ed:b7:ef:44:15:d4:bf:a8:7c:36:
51:1c:6b:41:2a:d5:ca:4c:aa:d2:bb:8d:fd:c2:aa:80:17:d6:
16:cf:a1:97:ae:97:1f:8f:c4:30:e6:02:6a:f6:61:3c:f2:fb:
ab:ef:5a:4f:8b:c3:7c:7c:75:9e:a9:b1:b5:04:a5:a0:6a:de:
ff:e2:2a:0e:27:64:9d:33:70:e1:4b:f6:53:21:4a:a2:be:b0:
8c:4b:5d:ec:46:51:62:da:d3:34:ec:31:b9:3d:38:cc:11:b3:
c7:34:83:25:04:50:e0:0d:4e:8e:ae:37:ad:96:ec:99:29:dc:
de:c7:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:25 2024 by rpki-client on console-fra.rpki-client.org