Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: sJzMH2MJYqBYn96p1oKAfCQBl/fIzYRObBgyagicvyk=
Subject key identifier: FD:3A:74:02:88:77:EA:D6:CC:0A:05:08:20:DC:13:8C:73:37:5C:A7
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0191FB22EEA43187BF3AD0F0205E69619C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: CE
Signing time: Mon 16 Sep 2024 14:00:56 +0000
Manifest this update: Mon 16 Sep 2024 14:00:56 +0000
Manifest next update: Tue 17 Sep 2024 14:00:56 +0000
Files and hashes: 1: 9x6CeORey6i4-S-XbaQOw8ouC34.roa (hash: M9ky/86/O1AWg/i2UJgJKYGRfRgyL3NA/mHSt7QGkxE=)
2: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: 0YzvfBLksrRMDz9CsX+WUoxdBwjTXXJf+vqP/BAopes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:22:ee:a4:31:87:bf:3a:d0:f0:20:5e:69:61:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Sep 16 14:00:56 2024 GMT
Not After : Sep 17 14:00:56 2024 GMT
Subject: CN=fd3a74028877ead6cc0a050820dc138c73375ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:c1:88:aa:99:d2:de:78:40:97:24:62:91:
44:ea:75:e7:79:c5:7e:e5:c3:b3:87:4f:c1:9b:8e:
16:13:81:ef:e0:68:68:b2:bb:4c:fc:78:4c:ed:98:
17:92:23:8a:89:06:7e:fc:1f:1d:1d:26:59:66:a6:
69:65:4c:8f:7d:f3:44:f0:85:a1:df:e6:bd:6f:1f:
4c:b0:03:72:d1:f0:ac:7b:1d:02:1f:fb:d1:aa:8e:
fc:87:80:6c:cf:1c:76:20:ec:80:4e:f5:bf:e5:5c:
f3:04:01:b3:d6:9e:7f:f4:19:55:4c:37:aa:bd:89:
97:73:59:4c:a2:6a:ed:f8:4b:e3:60:a8:ef:53:19:
46:28:b5:f7:2a:20:86:fc:b2:ad:f2:49:24:a0:52:
1a:cf:b7:56:85:4c:3f:4c:cf:33:55:24:d7:5f:b1:
a9:40:cd:37:ab:11:13:d8:af:1c:bd:33:0c:dc:65:
e5:2a:a9:4c:cd:20:8f:d1:93:b6:62:26:e7:ad:6b:
76:a5:94:9d:b7:e7:6a:25:ac:8a:32:2f:87:ea:0b:
73:fd:c8:0c:81:ef:a4:28:79:cd:ad:20:9e:3f:cd:
d3:fe:53:fa:6f:2d:d1:c6:15:5e:2c:f4:9c:d5:87:
07:68:89:c8:44:86:06:dd:c7:a6:86:f5:af:cc:fe:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:74:02:88:77:EA:D6:CC:0A:05:08:20:DC:13:8C:73:37:5C:A7
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:55:24:2e:5c:a8:58:f2:3c:cf:ce:dd:73:1a:54:62:b6:
97:34:36:5d:6f:c3:b8:70:e8:5c:79:73:ef:98:6d:17:b1:e2:
63:be:27:25:b6:83:d5:e2:70:f7:ff:46:29:9f:f7:d5:c8:71:
f3:ed:c2:6e:48:df:65:01:bd:a8:f2:56:22:d1:34:b4:e4:54:
6c:e5:94:97:00:5e:07:a7:47:25:f6:24:34:1d:55:fd:f9:0a:
b5:6a:2c:42:69:a3:a3:55:71:9d:cd:c1:ca:01:32:79:8d:b4:
c9:aa:03:85:7a:1d:0a:60:5d:71:65:01:42:04:ed:49:64:ed:
8a:f7:20:a1:45:c5:a8:da:2d:0f:a0:ce:28:e9:f6:23:9a:22:
6f:b4:df:41:e2:3f:5e:7b:08:32:11:3b:bf:13:13:cd:67:e2:
2e:8e:ff:c9:5f:35:50:c0:b9:00:76:ee:13:65:d3:b9:ff:ff:
1c:ad:ca:2e:82:64:02:42:8d:7b:bc:ee:d8:c8:7c:a2:02:1e:
f8:a7:43:7c:8b:92:c7:bd:1e:8a:b0:ef:d3:fc:96:b5:ac:b7:
3d:c2:ac:1a:d4:49:1d:f3:18:d9:a8:52:5d:63:35:3a:43:7c:
5f:d9:30:d0:cc:8d:92:8b:a0:af:e9:c5:cb:3e:6b:c5:55:00:
c2:61:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:34:30 2024 by rpki-client on console-ams.rpki-client.org