Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: FRpXcP2Rbj7s2pxWDcg6TeMCesKya/xw5IZRvWJYZEk=
Subject key identifier: 75:64:A6:2F:72:D1:2E:34:56:A1:9B:B6:5B:D1:63:BF:70:27:03:46
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 019234DC9C1848D8D3E8F726F16E95AFA4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 12DA
Signing time: Fri 27 Sep 2024 19:02:06 +0000
Manifest this update: Fri 27 Sep 2024 19:02:06 +0000
Manifest next update: Sat 28 Sep 2024 19:02:06 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: Ga9NHbm2RfM+HL1AWdWHTPdqT6GgNDz2JgAfGUYYc1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:dc:9c:18:48:d8:d3:e8:f7:26:f1:6e:95:af:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Sep 27 19:02:06 2024 GMT
Not After : Sep 28 19:02:06 2024 GMT
Subject: CN=7564a62f72d12e3456a19bb65bd163bf70270346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:e7:af:95:25:de:35:f1:10:d1:a4:89:82:
66:4e:a0:9a:0f:91:cb:d6:2f:25:5e:4d:63:00:87:
50:44:68:96:0d:80:62:b9:92:1d:77:cb:e0:ab:47:
d4:d4:73:fe:cc:69:bc:00:42:e8:a5:38:b4:2c:f1:
9a:e8:72:a4:ef:b8:60:1b:79:28:b3:9d:1d:1b:10:
d5:32:c9:ec:75:66:c0:2b:83:9a:fd:6d:85:c6:9d:
85:b6:00:46:65:b4:4f:1f:cf:95:ae:b2:58:15:db:
05:04:76:9c:62:b4:34:fc:f6:28:aa:ce:07:04:73:
22:76:28:23:b3:2f:70:39:f3:1a:ea:2f:fb:d8:af:
4d:1f:d3:8f:7d:90:fc:bd:70:1f:c6:8b:a7:f2:88:
d6:f4:60:6c:7d:f9:f9:74:f6:44:2a:4b:b1:16:6a:
1c:c6:5e:b9:9d:26:14:7d:d8:bc:77:ff:08:02:c2:
e2:c7:84:0c:f6:e0:b9:a3:16:86:d2:bc:ee:3e:fa:
c8:a9:d1:4b:5c:94:a9:48:b9:a8:2c:d9:95:94:1b:
56:29:ab:9d:f6:2d:9d:c5:d2:3a:3a:77:bc:1e:31:
cf:52:b6:80:ce:d4:9a:f9:f4:83:45:83:b9:cf:62:
dd:14:44:34:9b:29:ab:95:19:32:da:1c:79:2a:68:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:A6:2F:72:D1:2E:34:56:A1:9B:B6:5B:D1:63:BF:70:27:03:46
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:d3:cc:be:ad:66:52:f7:b4:37:c2:a7:5f:bd:ca:79:8e:
21:0e:0f:0f:41:5c:24:37:69:61:7f:ee:58:9f:79:37:e9:c1:
ec:1f:99:39:3c:06:fd:4b:0e:2a:96:a6:93:b9:f2:06:89:58:
ea:ff:ed:73:4b:b8:ec:0b:95:96:d6:c3:a6:04:53:bb:f7:bf:
1e:82:13:2e:e2:e5:ca:0c:3a:69:eb:84:44:e1:2a:76:06:3f:
06:87:97:f3:20:e2:4b:cc:9d:57:90:e1:fb:44:dc:13:f1:54:
5a:f4:86:69:13:87:3d:3e:2f:f4:45:4d:6e:44:f0:27:9b:3b:
4a:a4:04:88:ac:fc:f5:1b:e4:da:d2:79:d4:25:66:81:af:c3:
1e:cd:e2:14:17:0a:aa:51:33:54:25:fb:3a:2d:dd:c2:b6:8e:
b5:4d:a5:14:59:74:a8:c0:63:59:63:ce:35:f3:ce:54:9f:3e:
a2:bc:67:21:56:64:f4:88:29:cf:40:0a:57:70:61:ca:a0:1b:
9d:8a:0e:95:3e:99:4d:d8:a1:a0:22:41:b0:a4:6c:e8:7c:fa:
91:97:28:d7:eb:46:cd:74:08:d6:b8:3e:cf:a8:65:bf:3e:aa:
e1:a1:1d:1b:36:6f:df:cf:8b:c8:92:bb:dd:8a:f5:9a:ff:04:
ad:84:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:18:23 2024 by rpki-client on console-fra.rpki-client.org