Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
File: Upvm9FzWQYii0KNkSnL06EKmOmk.mft (raw, json)
Hash identifier: GKeZXZ524ORTdeG8SlwKEoZspH2rnSKnwG3d7ys6ZjI=
Subject key identifier: DD:20:45:56:8B:DE:C0:34:81:05:EF:9E:EE:22:0B:D0:52:6D:A8:40
Authority key identifier: 52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
Certificate issuer: /CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Certificate serial: 018FF3DC30929A8C1FF0EC0120BB8F8F7548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
Manifest number: 5F
Signing time: Fri 07 Jun 2024 18:00:44 +0000
Manifest this update: Fri 07 Jun 2024 18:00:44 +0000
Manifest next update: Sat 08 Jun 2024 18:00:44 +0000
Files and hashes: 1: Upvm9FzWQYii0KNkSnL06EKmOmk.crl (hash: rz0GM8OlUCeyg8hA3fug3amOpsWAMGhW3vSbcKSRVGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f3:dc:30:92:9a:8c:1f:f0:ec:01:20:bb:8f:8f:75:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Validity
Not Before: Jun 7 18:00:44 2024 GMT
Not After : Jun 8 18:00:44 2024 GMT
Subject: CN=dd2045568bdec0348105ef9eee220bd0526da840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:4d:52:2e:5d:3f:6c:49:e1:6a:11:d7:32:
93:78:be:0b:91:cd:21:f0:86:97:36:bd:89:f3:51:
1f:04:6c:ab:e7:09:1d:e4:f5:f6:cc:27:a2:61:20:
66:f3:8d:5b:aa:29:d1:97:a5:60:ce:51:a1:6c:20:
c6:1d:16:1a:b5:21:79:e7:da:3a:0b:3b:b1:c6:cb:
ec:72:4e:72:19:dd:8e:1e:bf:f2:82:d5:fe:1c:c7:
e0:67:8c:00:5e:54:06:ba:e5:dd:78:18:40:61:fd:
0c:dd:80:e0:92:f6:5d:1b:91:97:76:74:50:98:79:
4a:93:ae:eb:f7:51:7f:8a:49:75:32:ca:e3:cf:07:
06:82:07:dc:97:fb:fd:ad:57:06:e0:ff:6a:3d:b6:
be:cf:80:ca:eb:78:31:0b:ab:8c:51:9c:a5:bc:d4:
c0:84:d7:80:c4:9d:40:0b:46:f7:2f:6b:d8:4a:19:
30:8e:2e:e3:1c:b5:62:1a:68:29:5a:80:fc:82:f3:
9a:bf:ee:cd:fd:54:72:05:33:5f:2c:ee:46:a6:f6:
d9:7e:24:eb:b6:ad:ba:a8:d4:9a:63:0f:93:aa:78:
98:d5:33:8b:d8:70:06:47:a5:a5:cf:54:1d:5c:41:
12:95:a4:da:19:ab:8e:c4:e2:59:e4:80:6f:2e:c6:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:45:56:8B:DE:C0:34:81:05:EF:9E:EE:22:0B:D0:52:6D:A8:40
X509v3 Authority Key Identifier:
keyid:52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:20:ee:23:d9:e8:a8:77:7a:fc:f8:5d:57:80:59:e3:1f:
2f:8a:b1:e0:11:2e:5c:44:50:6a:d9:c8:18:8b:3f:49:b1:40:
f4:ab:10:37:bd:61:76:94:c7:5d:72:90:23:e5:59:d3:76:24:
a0:81:57:1f:47:ed:c2:51:c5:f3:77:67:73:1c:48:b0:e4:2f:
9c:e1:a4:ef:6c:54:e2:1d:89:ba:02:6b:52:b1:b7:54:22:61:
46:ab:96:b6:df:cf:bf:20:ef:65:12:75:d1:36:d4:f5:a3:95:
5b:04:2a:c8:58:77:b8:af:66:da:f5:09:ae:27:3a:cf:0d:9d:
be:8b:32:2c:12:a0:4f:3a:bf:97:8e:4e:3d:8e:20:73:97:25:
61:21:9f:0c:dd:90:72:1b:02:5f:f4:a8:91:89:45:99:96:59:
25:46:e7:7a:a3:9e:17:a8:29:de:58:9e:4e:1d:07:15:d6:d0:
13:75:1f:c6:c7:66:63:4d:c0:64:a4:a5:49:54:88:50:0b:d1:
e2:b7:c8:a0:1d:1a:93:ad:b5:4e:aa:5b:dd:ad:e9:ed:65:37:
2a:06:9c:ba:57:df:8e:6a:8b:99:4c:d9:2e:21:0b:04:49:03:
bc:05:1e:95:93:b3:86:87:ec:f2:02:f4:28:d4:cd:70:7b:f1:
0a:07:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:40:14 2024 by rpki-client on console-ams.rpki-client.org