Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: mCxA61Zy8aNo+KUofnD5ulgmw53VoDsPNCaH6s4lSOg=
Subject key identifier: 8E:50:65:A8:6F:C4:80:0F:2E:91:88:F1:5F:0A:6D:8B:35:B4:C9:68
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 018F1FDBA10A03AA0890CD81E376DC84B009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1143
Signing time: Sat 27 Apr 2024 14:00:38 +0000
Manifest this update: Sat 27 Apr 2024 14:00:38 +0000
Manifest next update: Sun 28 Apr 2024 14:00:38 +0000
Files and hashes: 1: 0xQvjuoWhziCewvlKMKdeMZCcJs.roa (hash: QINLyrSdDMRy1xP5bKPZHxop+1UxPPtKD/rIRytHL48=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: B+BqkfgdQBQ4bRAA0WpdsKJnXRkBMK411bISarJ/6YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:db:a1:0a:03:aa:08:90:cd:81:e3:76:dc:84:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Apr 27 14:00:38 2024 GMT
Not After : Apr 28 14:00:38 2024 GMT
Subject: CN=8e5065a86fc4800f2e9188f15f0a6d8b35b4c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:71:ba:ac:3d:2e:21:b6:d8:92:11:aa:4f:
de:49:b9:9e:31:6f:7f:4b:df:68:a0:a8:c5:ba:d0:
22:fc:13:95:ed:36:6e:1c:eb:f0:81:9f:d5:34:2f:
68:35:0b:e4:c9:21:be:d9:36:4e:d3:d8:d2:d4:ac:
9b:b8:6d:12:db:b8:af:96:2d:ea:c0:26:5a:b0:35:
52:18:7e:6b:b1:b2:8f:69:bd:a2:16:01:70:6a:53:
00:01:bb:84:11:ca:2f:0d:41:da:d2:90:18:d2:12:
93:0d:d3:1f:43:67:6b:52:1c:ab:2c:cd:c3:c8:68:
16:38:a9:35:5c:1d:fd:e8:e3:85:e7:bd:5e:01:ff:
2b:cc:3c:7b:7e:be:48:4e:ff:cb:0a:01:33:70:79:
02:18:fa:3d:c7:6e:3d:bc:14:d8:47:bf:9c:ed:63:
75:a3:41:a5:69:85:b2:8e:ef:7b:4b:70:97:48:b1:
c2:ae:2d:6d:78:6b:a3:64:aa:d3:b5:cb:1f:a3:93:
e8:a7:17:51:6b:a9:a4:6f:36:37:fd:39:68:5b:30:
f4:7b:51:ba:3c:60:90:c0:37:db:43:cf:4c:4d:3f:
e7:cd:74:9e:38:3a:a9:bd:55:ee:06:f4:24:d8:6f:
f0:51:e4:2b:e8:bb:6e:f6:5d:c9:0f:d2:51:a3:3a:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:65:A8:6F:C4:80:0F:2E:91:88:F1:5F:0A:6D:8B:35:B4:C9:68
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:7d:27:b9:88:f3:5b:02:a4:ef:cb:8e:e3:7b:b4:3e:e6:
ff:96:d5:dd:f1:25:ea:9b:a6:96:74:50:20:65:c5:49:7f:57:
37:30:bd:be:95:d1:f7:e5:dc:1e:cf:76:a1:b7:e5:c4:fd:77:
e3:e3:39:ca:19:90:aa:59:30:bb:95:3d:ff:77:45:9e:ee:f3:
15:f0:51:8b:a6:7e:a2:5b:c2:fc:ae:b9:3a:1b:a7:4e:3c:9e:
da:3b:6b:f8:b3:8b:1b:9e:7e:1d:08:3c:b5:f2:9a:32:88:2e:
24:2e:73:de:05:68:6a:16:eb:29:48:ad:da:97:06:73:78:30:
33:c7:d9:ed:19:23:74:9a:a7:b8:ea:73:48:23:d2:35:65:b9:
8d:bd:3a:b5:57:81:d7:df:5a:61:de:eb:bc:ce:5a:c5:d1:d3:
e4:72:e7:76:1e:70:fc:b4:fc:4a:f3:84:ab:a1:ad:14:31:2c:
b0:27:75:05:69:e1:85:b8:4b:cf:a8:f5:33:14:aa:91:ee:d4:
c7:49:4e:df:46:3b:9a:4e:ea:76:04:1c:6c:1e:ca:28:97:db:
98:76:b1:bd:2e:04:49:16:fb:3f:8d:94:b5:ec:01:ff:99:7f:
c3:8a:9c:98:b7:0e:91:5c:db:f7:73:6a:ef:13:ff:7e:63:97:
48:62:41:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8f26EKA6oIkM2B43bchLAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz
YmM1ZDkwHhcNMjQwNDI3MTQwMDM4WhcNMjQwNDI4MTQwMDM4WjAzMTEwLwYDVQQD
Eyg4ZTUwNjVhODZmYzQ4MDBmMmU5MTg4ZjE1ZjBhNmQ4YjM1YjRjOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrhxuqw9LiG22JIRqk/eSbmeMW9/
S99ooKjFutAi/BOV7TZuHOvwgZ/VNC9oNQvkySG+2TZO09jS1KybuG0S27ivli3q
wCZasDVSGH5rsbKPab2iFgFwalMAAbuEEcovDUHa0pAY0hKTDdMfQ2drUhyrLM3D
yGgWOKk1XB396OOF571eAf8rzDx7fr5ITv/LCgEzcHkCGPo9x249vBTYR7+c7WN1
o0GlaYWyju97S3CXSLHCri1teGujZKrTtcsfo5PopxdRa6mkbzY3/TloWzD0e1G6
PGCQwDfbQ89MTT/nzXSeODqpvVXuBvQk2G/wUeQr6Ltu9l3JD9JRozr3MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5QZahvxIAPLpGI8V8KbYs1tMloMB8GA1UdIwQY
MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt
YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz
LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXp9J7mI
81sCpO/LjuN7tD7m/5bV3fEl6pumlnRQIGXFSX9XNzC9vpXR9+XcHs92obflxP13
4+M5yhmQqlkwu5U9/3dFnu7zFfBRi6Z+olvC/K65OhunTjye2jtr+LOLG55+HQg8
tfKaMoguJC5z3gVoahbrKUit2pcGc3gwM8fZ7RkjdJqnuOpzSCPSNWW5jb06tVeB
199aYd7rvM5axdHT5HLndh5w/LT8SvOEq6GtFDEssCd1BWnhhbhLz6j1MxSqke7U
x0lO30Y7mk7qdgQcbB7KKJfbmHaxvS4ESRb7P42UtewB/5l/w4qcmLcOkVzb93Nq
7xP/fmOXSGJBpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 27 18:56:04 2024 by rpki-client on console-ams.rpki-client.org