Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: 2I8/LzXH0+/R1D5FaTLsONLuflIhVVpa2rqXcB+ZdQY=
Subject key identifier: 1D:36:0C:2C:02:8A:B1:C0:77:9B:FF:44:61:32:6A:6F:E9:F7:14:1E
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 018F45A0D3FAAB27A3A58A6B657B92FFA97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 0D63
Signing time: Sat 04 May 2024 22:01:58 +0000
Manifest this update: Sat 04 May 2024 22:01:58 +0000
Manifest next update: Sun 05 May 2024 22:01:58 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: F9hZ0dsCTo3Hhk/FIFjc6LG5zPRpkUEnbhOhwRYnNjg=)
2: ubPZq0RYFzcdZ3bJVHAVmEaqwuo.roa (hash: ZF3xiIt+9VuJ42Wy7ZzO5fbaJtkizbxS0O/XurbNke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a0:d3:fa:ab:27:a3:a5:8a:6b:65:7b:92:ff:a9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: May 4 22:01:58 2024 GMT
Not After : May 5 22:01:58 2024 GMT
Subject: CN=1d360c2c028ab1c0779bff4461326a6fe9f7141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:ab:78:6b:0b:e3:09:fc:aa:30:69:99:01:
79:cb:6a:55:8e:d3:d5:9e:89:04:85:3d:7a:31:95:
8f:cc:aa:a1:93:4c:19:79:dc:2c:74:3d:80:bd:d2:
9a:77:3a:91:cf:19:b6:00:90:c1:bb:87:9a:00:34:
2b:98:22:b0:bc:b8:b8:a2:86:ea:27:f5:c5:01:fb:
0b:f9:b6:98:51:40:ed:f6:ee:fc:52:93:c6:b7:7d:
3a:a0:54:01:5b:e6:9b:cb:fa:8e:86:24:47:03:96:
97:eb:26:97:30:94:26:ad:30:68:00:c9:5a:3b:64:
db:93:fb:71:50:95:a9:14:89:28:fc:4b:1b:97:26:
a7:ce:5f:13:ef:a5:64:2c:ae:f6:33:08:2c:c3:26:
3c:54:a6:19:f3:23:cd:ab:59:6d:d9:ef:16:43:30:
e1:3a:82:7d:97:0c:82:b5:5b:bd:ff:bd:d5:96:9f:
66:64:ce:35:96:bc:f6:a7:5b:21:25:2d:53:09:8c:
0a:72:36:30:79:64:5e:ff:21:fb:eb:40:07:3f:33:
28:5a:b5:5e:40:64:e8:db:ee:a0:e6:57:8d:6e:71:
73:07:b2:c4:be:61:fe:0e:58:7c:e4:2b:62:00:a5:
ba:d4:a7:a4:28:ab:6e:42:a1:96:97:7b:cf:04:a9:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:0C:2C:02:8A:B1:C0:77:9B:FF:44:61:32:6A:6F:E9:F7:14:1E
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:69:db:3d:e5:96:91:00:77:f2:d7:f9:7c:4b:a0:4d:aa:
f9:58:cb:73:81:36:82:0e:b0:38:fe:01:d3:b9:a6:ef:0e:1b:
a8:c5:c9:25:ea:47:ed:74:dc:a2:0c:25:95:11:44:ae:7c:db:
a5:49:43:04:af:8d:39:95:da:6a:33:2b:f7:b7:0a:de:aa:e4:
dd:1a:1b:1e:9c:ab:2e:c5:ea:21:a0:84:aa:4d:e5:4a:84:d0:
50:09:4a:74:69:a6:fd:f5:13:d7:b5:5c:dd:98:58:02:22:cc:
e8:46:c1:19:8c:3a:96:1d:05:3a:9f:d6:31:f6:1d:25:51:d6:
73:0e:17:eb:49:a8:01:0d:60:69:63:c8:78:b1:ea:41:a4:80:
da:77:d3:60:ce:97:65:cc:42:5c:86:7e:60:69:42:ec:00:f8:
f5:e8:08:18:c7:ec:0d:28:f3:db:11:42:a7:ed:55:ab:71:c2:
99:48:ae:48:e0:e7:5a:c2:87:9f:86:a6:b9:b2:3a:f6:68:76:
7d:1d:50:db:d6:c8:52:20:0a:54:26:87:d5:52:29:f8:90:62:
8a:30:e0:80:a3:4a:88:72:e1:67:d5:87:9e:5d:56:fe:96:42:
58:fa:a9:65:96:14:d6:0a:18:f4:a2:9b:d9:c6:03:87:01:bd:
2a:bf:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:08:44 2024 by rpki-client on console-ams.rpki-client.org