Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: 89+GCgWx27f1BO3hYher3YJPwkj0+rhPrqPMxiGvR1E=
Subject key identifier: F1:52:5E:35:05:CC:BD:26:92:13:DC:07:E1:A0:9D:CB:37:27:B4:2F
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 018F87EDB4A6EEEC72B2FB54CED239328090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 19:00:53 +0000
Manifest this update: Fri 17 May 2024 19:00:53 +0000
Manifest next update: Sat 18 May 2024 19:00:53 +0000
Files and hashes: 1: DDoR1Bxm2_7weQCrkIong79V_tY.roa (hash: cHXZUwBfkBKUiMjVuNHF/dqHisOiLxuglK7a26HBsQQ=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: PgUdD67dwVSw7A4BS5aOYIvEVCtfbFGYsdJeZuEsNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:b4:a6:ee:ec:72:b2:fb:54:ce:d2:39:32:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: May 17 19:00:53 2024 GMT
Not After : May 18 19:00:53 2024 GMT
Subject: CN=f1525e3505ccbd269213dc07e1a09dcb3727b42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:3c:76:ff:df:3c:8d:39:5e:58:b1:3e:b1:
78:70:fe:46:90:c4:71:6b:d2:c3:07:33:d1:b3:4f:
5b:e9:6a:d0:34:92:56:be:3a:ab:dd:02:ea:8a:76:
09:cf:de:5a:fd:07:62:c6:06:89:d0:b9:73:d4:4f:
ec:dc:f8:37:4a:cd:48:3b:3f:36:55:a3:19:e1:4a:
e7:27:a4:4e:c6:b2:24:b4:af:d6:d3:75:26:93:11:
9f:31:ec:6b:96:28:b8:40:6b:c0:52:91:6a:aa:3a:
69:da:7c:f8:5a:fe:9a:df:ab:ff:d1:df:9d:7b:ae:
d4:4d:bc:45:5c:a3:42:28:b9:95:1c:88:7a:9e:97:
e1:bf:a8:17:22:2e:95:42:17:84:1c:f3:fb:ce:c7:
69:9b:c6:af:15:ed:bb:fc:52:f2:a2:96:19:45:ed:
31:a1:a4:bf:31:d2:0e:f4:03:ad:5d:bd:47:19:4e:
09:c3:c4:d4:05:d2:6b:46:95:c0:2d:a1:2b:fc:e0:
8f:5e:00:8e:6d:e0:77:1f:2b:5e:c4:54:bd:60:30:
70:00:17:59:84:d2:94:8d:a2:5e:22:4e:45:8c:3c:
5c:b2:ad:1b:e5:df:7e:4e:f9:97:93:3a:15:09:76:
06:8f:1d:a4:d5:8a:8b:9d:e8:4b:92:10:8c:a6:b0:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:5E:35:05:CC:BD:26:92:13:DC:07:E1:A0:9D:CB:37:27:B4:2F
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:98:23:46:58:3f:42:eb:91:cd:04:96:be:65:5d:ed:7e:
45:ef:e6:86:34:16:f0:e3:df:d3:8c:b3:79:f7:14:d3:88:73:
ce:42:65:e3:be:7a:12:11:e9:a0:c3:11:5f:79:47:8c:ae:f5:
2d:52:61:40:2b:f0:fb:ca:c5:86:5b:fa:df:3e:5c:c3:7b:0b:
c1:d5:e0:8a:f6:b7:58:15:72:6e:9a:1d:d2:95:9e:7d:25:0a:
12:6e:59:3a:8d:33:27:79:68:6a:cb:ee:5c:c5:56:92:05:d5:
db:5f:58:44:05:80:59:00:70:43:dd:31:25:bb:ca:2a:12:ce:
c8:ae:2b:51:44:d1:a2:74:83:f0:03:9a:ee:25:60:41:9a:4d:
40:ae:ad:c5:5a:7a:1f:c5:53:ea:f2:0a:3f:c6:79:1d:3c:61:
8a:90:ce:84:1a:6e:aa:6f:04:f8:ef:11:73:8b:73:1f:ae:57:
44:5f:1c:54:c2:cb:d1:d3:20:fa:ea:2d:40:f9:67:c8:2d:81:
cb:c3:53:d7:35:cc:1c:9d:a9:36:53:ef:1d:1c:bd:49:9a:49:
ab:a4:4e:87:57:44:5d:77:74:d5:7d:51:cb:d7:02:1f:78:98:
7c:35:d0:a4:bb:8b:ea:e4:bc:ec:34:38:8e:8f:73:12:21:cc:
c3:57:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:15 2024 by rpki-client on console-fra.rpki-client.org