Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: dd+1I80Z4PNC2NsvcL7ClZefs8Pxhmk0kkryUmX778Q=
Subject key identifier: AB:33:AF:BC:F3:CC:32:AC:0A:81:FF:44:47:BF:C4:AF:E8:DE:86:C6
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 018F874A5A4104605F17B10DC696B52C4F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 16:02:27 +0000
Manifest this update: Fri 17 May 2024 16:02:27 +0000
Manifest next update: Sat 18 May 2024 16:02:27 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: gt7402ddEE9/BvR5N+G6rsqhl3pWEvJxKBGAtQ+AinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:5a:41:04:60:5f:17:b1:0d:c6:96:b5:2c:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: May 17 16:02:27 2024 GMT
Not After : May 18 16:02:27 2024 GMT
Subject: CN=ab33afbcf3cc32ac0a81ff4447bfc4afe8de86c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:00:21:9c:2d:dd:8f:3c:54:6b:15:de:58:
1a:f4:6a:f6:43:a2:62:ea:39:20:d7:4c:fd:2a:ec:
90:93:13:29:33:8f:7b:d4:f3:fb:94:8b:07:35:ac:
0e:d9:75:dc:2a:4c:3c:bf:2a:2f:d8:8f:04:f6:37:
cf:69:25:d9:42:dc:6e:10:5d:13:5f:60:e2:46:9d:
6e:21:8d:cb:84:01:00:d1:99:c6:38:c3:30:76:c4:
83:33:50:dc:bc:c8:24:58:a6:72:2c:40:f6:d6:c2:
42:bc:58:c8:e0:01:f1:91:e7:da:aa:ae:94:9e:4b:
b3:65:74:96:ee:6c:fc:44:f8:d5:55:b6:f5:f6:8f:
93:f2:5e:94:ee:d9:37:f3:97:af:c9:00:b7:9b:48:
b5:94:d1:9c:8c:ca:cd:89:ec:ce:44:85:6b:69:15:
3c:df:71:d6:ca:46:6e:df:50:af:a7:5f:a5:0e:81:
68:f6:56:6d:a8:d4:be:59:63:7a:66:d1:38:fd:36:
9d:35:d2:cc:d4:a0:b3:8e:d2:50:16:aa:9f:dc:d8:
83:e1:86:2a:18:98:29:9c:12:5c:b4:8c:8b:b3:96:
f0:12:ef:2b:fa:aa:1a:f8:71:33:cd:b5:21:f7:87:
ea:59:4b:d9:55:45:10:62:c1:dd:de:ec:83:43:d5:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:AF:BC:F3:CC:32:AC:0A:81:FF:44:47:BF:C4:AF:E8:DE:86:C6
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:ca:48:bf:f8:5a:7d:23:9c:da:9e:07:66:e5:1e:15:a7:
44:02:f8:19:88:fc:af:ee:56:b0:b9:28:60:f1:f5:8b:9c:0d:
a5:9d:6e:7b:f7:97:34:85:d0:43:55:15:77:40:5a:fb:da:b4:
9e:1b:65:31:32:2a:5a:42:48:f5:74:74:80:ec:a6:7b:16:3a:
35:8d:56:26:a0:1c:0d:c5:f9:ff:97:f7:1e:b7:4b:2b:a6:f7:
df:5a:1f:97:a0:dc:cc:e9:e9:66:5d:50:c4:a9:f9:8b:50:d2:
0a:a0:c1:69:32:90:c9:08:ea:f1:24:bd:5e:b5:d3:79:63:ba:
de:76:e9:81:ea:c1:38:8a:6e:10:58:c2:38:f0:05:ce:2f:5d:
4a:b5:ab:1a:b5:df:9b:8c:5b:cd:27:57:76:5f:a6:7c:6c:6c:
df:81:4a:56:a9:83:06:9f:6b:0b:96:2e:f6:25:88:9b:1e:b2:
94:1d:5e:78:73:46:38:53:0a:60:96:fe:c8:80:46:81:9f:2b:
28:e3:70:dc:ad:cf:95:e7:90:34:76:18:56:3c:9e:76:31:68:
f4:cb:ec:75:25:ca:11:1a:04:77:fe:bf:41:6e:d3:b9:d1:4e:
1b:e7:98:02:a8:06:85:e2:8b:09:07:b8:9f:cf:05:01:2f:07:
21:09:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:46 2024 by rpki-client on console-ams.rpki-client.org