Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: raweAhhq7yrtb7u3tSX3YPhn/1EG+LvVJud1IRe3+p8=
Subject key identifier: 82:24:DC:FB:77:E0:36:CF:08:04:BC:68:D2:BD:9A:59:97:47:EA:59
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 018F96BC9C929997C1133CDC483874E29BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 013B
Signing time: Mon 20 May 2024 16:01:34 +0000
Manifest this update: Mon 20 May 2024 16:01:34 +0000
Manifest next update: Tue 21 May 2024 16:01:34 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: DkJN2iS+dYNSVhu7gAyHcwqesUK1xZ5iTY/lieTQER8=)
2: HxomCw7KMpLSNlaOoR5KVHZ6MC8.roa (hash: tJ+FyzrF7rtTWakgFWAf/GYc9dzEQ00b5tcl1gK7jkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bc:9c:92:99:97:c1:13:3c:dc:48:38:74:e2:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: May 20 16:01:34 2024 GMT
Not After : May 21 16:01:34 2024 GMT
Subject: CN=8224dcfb77e036cf0804bc68d2bd9a599747ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:9a:11:9a:60:60:5b:b9:33:fd:27:7a:dc:
9f:b3:0a:0c:e5:a7:99:6c:8d:93:1d:8f:4d:a3:41:
85:53:a1:a0:12:ff:7e:38:62:70:73:cb:7a:28:e6:
07:26:b5:16:f1:0a:eb:71:a1:19:51:ef:0c:a7:b5:
63:33:13:84:d7:28:67:21:5d:f5:09:ec:3c:18:e0:
d1:96:cc:51:b9:20:01:2a:83:db:53:92:fb:4b:43:
37:dc:68:15:f7:1b:9f:c7:c2:43:53:82:c2:48:79:
54:5f:4a:a9:66:74:0f:13:fb:90:23:d3:c8:d6:e6:
bb:40:93:28:31:6e:85:c9:2d:94:a2:ad:d0:65:a3:
be:0f:0b:28:57:90:66:b4:55:52:17:17:e8:d1:d8:
54:e9:d1:6e:ea:f1:98:e4:d3:45:1a:8b:94:ec:e0:
87:58:99:20:78:db:01:56:ae:f1:86:7e:58:f1:33:
94:5c:7c:6d:24:1b:de:50:f9:c8:15:12:61:26:52:
12:83:5c:4e:32:2c:39:ca:e5:07:18:4a:a6:b0:1e:
14:8b:7e:f7:32:4a:71:29:45:e1:7b:c0:47:d3:82:
5a:6b:c6:2b:f9:2c:ca:e0:9a:15:77:43:7f:58:e3:
97:46:28:13:9b:88:87:e6:91:0d:5d:3d:5f:54:cb:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:DC:FB:77:E0:36:CF:08:04:BC:68:D2:BD:9A:59:97:47:EA:59
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:07:b9:de:a1:3f:42:75:55:50:3e:51:da:cc:8e:78:24:
ef:e8:fc:cd:9a:03:2e:64:19:85:8d:7f:71:59:27:9a:5a:1c:
df:c7:40:b7:4d:25:69:d8:c5:4b:ab:2f:25:54:80:eb:4a:25:
21:5e:fb:0a:ee:c6:cb:a7:64:14:23:d6:04:ee:7d:f9:32:05:
55:d7:54:21:60:ba:7d:84:7f:b9:89:15:14:3a:10:b7:38:89:
16:f2:cc:61:bc:15:8e:8a:91:ca:59:2d:11:08:26:5d:5f:2d:
15:3b:94:68:b4:c2:65:ae:45:c1:00:88:f5:e2:d8:b2:25:f3:
5d:f2:5c:24:e0:3b:f5:30:ee:93:cf:b7:39:8c:dd:48:76:d5:
2e:7f:2e:85:e5:d2:95:fa:bb:f8:9e:ed:ae:17:d5:1d:94:47:
db:f5:0f:dd:0b:4b:ce:33:2d:43:e1:02:7a:56:91:8c:b6:0f:
c1:9b:d7:0c:65:dd:89:6a:34:40:9c:e2:4c:1d:c5:25:27:48:
a5:c1:42:26:50:07:2f:f7:c1:76:36:8e:73:e2:6a:84:52:0c:
73:d7:84:c9:05:78:06:d3:3e:ad:57:bb:d4:94:11:92:39:23:
09:d5:18:67:39:9c:a7:96:1d:02:c8:1c:05:3e:91:4a:b3:7e:
52:b8:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:20:59 2024 by rpki-client on console-fra.rpki-client.org