Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: KMWBNot5+4wjQNga1buqVhGyPmXVzl3uEwmGTZv1b6E=
Subject key identifier: C0:C1:12:7F:8C:EF:05:CE:65:8F:BA:1A:EF:94:19:8F:F2:A8:C9:77
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 018F86DA4CCE768D987D79C7E4E6D0C44F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 0C49
Signing time: Fri 17 May 2024 14:00:04 +0000
Manifest this update: Fri 17 May 2024 14:00:04 +0000
Manifest next update: Sat 18 May 2024 14:00:04 +0000
Files and hashes: 1: BDnSGUInTFrE6OaHAZPkbwtzcCk.roa (hash: QdeSxk5Xp418LO3vqLRWMUsoYBaCIEd/OWoaBbHcMJk=)
2: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 0y2BfqhncbWQK/0SKpFbGmGUUtu8uUokD77W1qDwTpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:4c:ce:76:8d:98:7d:79:c7:e4:e6:d0:c4:4f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: May 17 14:00:04 2024 GMT
Not After : May 18 14:00:04 2024 GMT
Subject: CN=c0c1127f8cef05ce658fba1aef94198ff2a8c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bc:35:d9:22:ca:a0:e5:b0:aa:0d:26:d5:3f:
65:fc:b8:c4:2b:31:31:db:61:45:3c:ae:0e:02:c4:
4d:11:b4:4f:f1:30:fb:46:f3:35:46:11:48:53:94:
0d:33:f4:8b:db:d1:9c:9d:17:8c:1d:e5:9a:0a:94:
9a:2f:21:5f:06:bd:a2:cb:e1:ef:ec:40:92:7e:54:
aa:27:e6:10:11:26:8a:5f:8b:08:39:d0:d5:f1:88:
fe:96:d2:99:bc:5a:c3:98:8e:ae:4f:7b:8f:26:5c:
49:51:00:6f:c9:2c:15:b9:5f:65:10:f1:43:98:88:
83:86:c1:ea:65:54:e5:5e:91:88:60:44:b3:43:3c:
58:a7:0f:5b:b2:be:86:95:4c:22:6c:c4:31:8e:b0:
4b:57:2c:7e:28:42:37:17:da:d3:bc:cc:e5:d0:64:
3a:d6:05:4e:f4:8e:30:db:e0:98:a5:55:f0:a5:d2:
86:b2:f3:9f:9b:4b:66:1a:18:ae:28:6b:0d:26:ce:
93:b0:e7:ac:a4:7d:d2:ed:01:74:cf:c3:5f:d2:65:
7e:cd:7b:ea:a6:91:25:30:dc:04:48:e1:5b:2c:47:
e1:5b:45:aa:d6:27:44:da:e2:6d:96:d7:fd:b4:d6:
05:f2:12:b1:8b:c3:ab:5d:88:a6:75:74:b8:15:39:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:12:7F:8C:EF:05:CE:65:8F:BA:1A:EF:94:19:8F:F2:A8:C9:77
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:f8:99:39:d8:21:f2:e4:1f:3e:17:05:f2:24:da:f1:54:
63:ce:40:27:a3:06:0f:03:b2:54:9f:dd:41:fc:e4:5e:4e:8a:
e3:0d:9f:a4:59:c8:36:67:ac:28:e3:2b:c1:e5:f5:bb:3b:59:
e9:c6:b0:16:b7:d0:a0:80:58:7e:6b:d8:8a:c9:ac:88:0c:07:
b5:d9:a4:82:6f:95:f0:19:aa:0b:50:13:c5:c0:70:9f:1f:54:
25:a2:7c:0a:66:dc:fe:32:c5:b5:d5:a4:48:74:a7:2d:9d:2c:
12:db:e0:00:4c:01:42:7f:f7:f4:a8:5f:8e:e9:90:cc:47:75:
9f:89:d7:f6:68:27:58:73:82:01:97:1c:7d:f6:d9:c0:ab:39:
84:de:f4:e0:4f:35:d6:b7:f0:33:90:ca:b7:e2:eb:75:2a:78:
e6:21:02:94:fa:f8:6d:9d:c7:80:a4:83:27:1b:05:3b:92:d5:
13:cf:fd:b6:a2:38:66:05:14:16:ca:1f:94:18:1d:9e:c0:ae:
1d:86:8e:d9:6e:84:a6:74:1b:70:36:26:5c:8d:fa:97:1e:a5:
49:86:9b:47:c5:26:47:da:39:45:90:9b:25:1c:d4:dd:b5:db:
45:c9:5c:68:2a:ed:7a:db:20:0b:c3:5c:eb:ef:33:e2:e2:80:
8b:a6:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:06 2024 by rpki-client on console-fra.rpki-client.org