Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: wyVIjH7Qlm4ad3K4q7y9Ay/W9xMf5+0d2rsuPXQwkBo=
Subject key identifier: AC:FC:0A:DE:A6:A4:C3:6D:4F:32:89:61:3D:CF:25:B8:26:40:0B:F2
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 018F486A20C7F70A6F21B2EFBC78AB4C5A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 0621
Signing time: Sun 05 May 2024 11:01:05 +0000
Manifest this update: Sun 05 May 2024 11:01:05 +0000
Manifest next update: Mon 06 May 2024 11:01:05 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: f5T9JOkjz1OZOQ4KIBe0RfNI2Aoe8GBj/kAcsAUG+sA=)
2: w_CLE4RLmQ4-2SRCSTyWlV47FNI.roa (hash: iilazLZDPwjlK/yYdA4v/Fz6/OOiRGkrqogz7Nk4k3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:6a:20:c7:f7:0a:6f:21:b2:ef:bc:78:ab:4c:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: May 5 11:01:05 2024 GMT
Not After : May 6 11:01:05 2024 GMT
Subject: CN=acfc0adea6a4c36d4f3289613dcf25b826400bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:fd:4b:44:80:86:0f:7e:75:1f:c2:96:67:
a5:e6:eb:ef:3b:53:64:cb:0e:b7:ab:c2:4a:75:19:
96:9d:5e:ba:d9:af:e6:20:05:4e:d9:09:d4:b9:ce:
33:55:aa:c8:75:f6:0e:6f:f2:70:6f:69:fd:08:c6:
46:77:5d:5c:a8:47:ba:e3:36:81:5e:78:ff:86:fb:
a8:06:82:f3:06:b0:58:6b:24:3f:1e:b2:74:b8:d6:
95:e7:7d:f3:24:c3:c8:af:d6:0d:3e:76:21:72:e4:
57:7d:62:d3:d1:cb:10:77:7a:6d:08:f5:af:a5:c7:
06:ef:ba:4f:27:f3:25:10:0a:37:70:3f:37:46:b4:
73:e1:75:6e:e9:f0:20:d4:ba:f7:46:d9:54:58:a5:
af:fd:61:cb:08:73:82:18:8f:29:ab:c9:9d:9f:f3:
7c:04:bb:5c:26:41:e2:43:f2:99:7a:61:07:a1:8b:
1b:51:84:16:18:55:04:ae:98:1f:00:47:9c:c2:1d:
88:0d:36:0a:1e:7c:dd:be:86:e1:72:4b:69:e0:08:
71:f1:e7:52:77:16:8b:b7:5b:f6:42:41:14:bc:e7:
6e:85:b9:8d:cb:63:31:cd:a8:d1:19:83:fd:dc:ac:
cb:a6:e5:94:2d:a3:25:a7:70:c8:32:f2:6d:6a:3a:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:0A:DE:A6:A4:C3:6D:4F:32:89:61:3D:CF:25:B8:26:40:0B:F2
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:25:97:9d:12:37:69:37:b8:2d:63:19:82:5d:0b:be:09:3a:
6c:ac:5c:3e:c1:25:ab:5f:fb:f8:ec:b9:dd:93:f5:0a:3d:02:
fa:96:ce:7d:89:49:9e:78:e9:5c:e8:35:c8:e0:2a:5d:5e:80:
1a:80:fd:36:47:ee:6b:ab:1d:49:7e:ee:5d:12:a8:50:53:f9:
ce:18:6a:db:28:c7:91:00:89:69:bc:ea:bb:eb:75:45:14:cf:
69:fa:b1:50:bd:ec:35:4c:b8:03:78:a4:af:2b:75:19:00:75:
be:9b:99:81:14:0e:3c:6b:13:ca:f9:09:f5:fb:da:11:b6:eb:
4a:76:7a:44:2c:e0:71:42:e2:bf:d7:d0:39:b8:63:f8:08:4b:
02:8e:a2:6c:17:46:c2:6d:26:86:81:9a:9c:5c:13:30:a8:8e:
0e:85:41:65:bf:eb:7a:8d:07:63:75:04:f8:6b:17:79:6d:6f:
16:39:47:16:86:32:4b:00:b8:0b:80:e1:db:42:16:03:a3:1c:
d3:54:c4:62:ee:06:6a:73:6c:bd:42:1c:03:1b:52:38:0b:83:
2a:71:27:48:98:e5:c7:73:c6:48:26:dc:36:20:d2:e9:ea:8b:
0a:80:34:7a:b0:48:5d:28:7e:cc:3d:3c:01:09:10:97:2f:7b:
45:84:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:07:57 2024 by rpki-client on console-ams.rpki-client.org