Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: zd4dbpSokATXn+ADLrtwW9bKJvn3rEtWgj7gug5KDBM=
Subject key identifier: AF:BC:9A:AF:75:04:28:59:6D:E7:71:2F:50:A4:6F:64:27:AF:17:0E
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 018F58F2CC710C391E1D4382BD3F0F77B9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0A86
Signing time: Wed 08 May 2024 16:04:18 +0000
Manifest this update: Wed 08 May 2024 16:04:18 +0000
Manifest next update: Thu 09 May 2024 16:04:18 +0000
Files and hashes: 1: 3gGTvD3kpiSLpcaa45pSwbMGVtY.roa (hash: 53IV3WRRtIko03rUb0qG9+kV4wu4bu7GsrM6x3bsXmk=)
2: HH2YmgmUKmvRJn8uUzAWMu-smWE.roa (hash: N5TwDjnrDjf5OgMO3RILNT04PtD5nx+LXYmunFICwRQ=)
3: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 74OZ0ZzFjtQotpUYeYOsMyXfuk5zX/J6MKRa6nqIJ24=)
4: hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa (hash: pVHCldhU3zg4Ogzn6onlOTM3SFC90nX67fU8YKk8BIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:f2:cc:71:0c:39:1e:1d:43:82:bd:3f:0f:77:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: May 8 16:04:18 2024 GMT
Not After : May 9 16:04:18 2024 GMT
Subject: CN=afbc9aaf750428596de7712f50a46f6427af170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:d3:89:89:7f:d5:01:db:0e:32:a6:a2:3d:
6a:37:b6:69:f8:ce:fe:c1:ce:65:bf:5c:99:73:ee:
cd:28:d9:89:5b:01:e2:11:b3:1d:ac:f8:5d:bd:15:
78:91:cb:b5:2f:33:25:f1:d4:a6:11:e8:2c:b3:97:
de:6b:f2:3c:de:91:37:7e:8f:9d:76:aa:05:6c:9a:
e4:92:10:ba:64:72:c3:8b:18:78:a9:5d:62:58:cb:
e3:b8:69:07:6e:bf:de:e2:fc:30:90:2b:65:1f:e5:
56:9c:05:4b:85:60:4d:a1:b7:df:88:8d:65:70:ee:
8a:60:8a:73:54:dc:79:f0:33:c4:49:47:0d:30:d4:
58:0f:17:76:35:a8:d7:f1:22:d8:27:ef:6b:e7:fa:
ec:8e:3b:73:b8:1e:55:75:c6:8d:d5:64:8d:fc:70:
18:3c:f7:e1:5f:44:d5:93:45:70:e2:b1:cd:92:92:
3a:66:73:d5:b4:8d:ca:90:5c:0e:cf:eb:5b:56:c9:
fb:b6:f9:54:d1:43:6e:56:b2:72:8d:4d:a9:28:a1:
34:02:46:02:d9:39:21:66:44:48:46:99:05:80:ce:
ca:23:e0:66:56:ce:53:e0:5e:98:a8:96:80:c6:b9:
30:c8:22:b9:3e:e2:56:36:86:56:5e:4b:a4:7e:75:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BC:9A:AF:75:04:28:59:6D:E7:71:2F:50:A4:6F:64:27:AF:17:0E
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:15:7c:df:f4:62:02:81:a1:9b:5d:9c:2d:2e:04:47:64:
94:da:6e:43:5d:d7:f9:63:0c:55:53:d2:ad:28:00:84:2b:3d:
60:d8:77:24:a6:b6:42:8b:be:dc:95:3e:1c:d7:95:a5:32:d1:
b8:07:14:25:0d:38:77:69:ba:b3:52:50:b0:30:9a:9c:97:7b:
ea:d8:cd:c7:a3:23:f8:aa:a2:b5:e9:36:7b:79:60:f4:7c:a6:
30:54:b6:61:69:6c:3e:c9:84:99:e8:8c:92:6f:fa:11:86:12:
30:e9:83:91:e7:a1:69:c1:21:5e:75:f6:a7:db:7b:dd:3a:69:
ae:68:7e:ca:70:ff:de:b5:61:99:41:f7:ec:28:cb:38:6c:22:
68:be:6b:8d:43:53:59:a2:d2:84:df:d6:bf:d1:d3:78:24:a1:
21:44:6d:8b:4d:91:b4:b9:ae:ca:77:c4:d4:04:eb:7a:e4:9c:
3d:4e:19:a8:bf:bb:32:da:bb:4a:2d:51:5e:0b:44:fa:3d:e4:
47:bc:a1:af:f9:eb:fc:7d:f6:6f:5b:1b:97:4f:ad:c3:7e:cf:
c4:27:9a:9f:6f:1d:fe:48:b0:17:de:e1:f7:9f:f1:e9:30:a2:
8d:b5:88:ff:21:db:3c:2a:f4:0e:5e:2f:b9:5e:a7:dc:d2:7b:
7f:11:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:00:42 2024 by rpki-client on console-ams.rpki-client.org