Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: BspC2OqWbPNT+WoURUg8T+ZOl3zN2AVm7MNRHgXduss=
Subject key identifier: 03:48:9E:1A:76:A3:11:A8:B7:EA:EC:43:B7:0D:18:8A:EB:E7:EE:CB
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 018F55143D428B5E368D85B25A88FEABC43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0893
Signing time: Tue 07 May 2024 22:02:20 +0000
Manifest this update: Tue 07 May 2024 22:02:20 +0000
Manifest next update: Wed 08 May 2024 22:02:20 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: ETnuCyhnfLvmgHb4oog6tF82Ju475escHk65Pt0gMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:55:14:3d:42:8b:5e:36:8d:85:b2:5a:88:fe:ab:c4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: May 7 22:02:20 2024 GMT
Not After : May 8 22:02:20 2024 GMT
Subject: CN=03489e1a76a311a8b7eaec43b70d188aebe7eecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:b0:0b:c6:d7:9a:26:a4:8f:b1:94:51:88:
79:41:50:f8:fa:0f:3f:55:97:d4:dd:87:a8:10:f5:
28:cb:a5:eb:15:0e:d2:34:11:f5:7a:7c:4b:cc:9d:
5f:62:80:ae:64:56:c9:aa:d5:6d:b3:2d:47:f1:c1:
c3:c0:18:46:bc:a6:3e:f0:57:55:9b:d4:e1:87:e5:
1c:3d:b4:13:9c:e2:7b:28:ab:9e:a6:11:43:3f:2e:
67:90:22:5c:45:3f:5f:64:ac:42:47:d2:cf:87:d5:
0e:6f:ae:d6:a9:ce:ff:2f:30:d6:6e:65:17:aa:4f:
9e:00:32:07:69:f7:61:80:b7:b6:78:9a:70:f7:5e:
44:e2:c0:a3:46:09:1d:ee:7e:db:03:f2:b3:60:1c:
ae:9a:86:fe:8a:b8:8f:f7:a7:ad:2c:8f:b3:29:43:
3b:91:a0:ef:4a:c6:3f:cc:d1:1a:54:52:0e:b0:2f:
35:05:a4:98:ce:7b:ea:5a:c4:c9:bd:e2:bf:c0:8d:
07:29:3a:53:54:b0:8e:63:69:4d:0d:8c:8f:e0:08:
f0:3a:d9:8e:30:f0:6d:11:3b:0e:5b:da:61:9e:aa:
75:15:81:ac:4d:d9:ed:ea:bb:79:ab:39:96:a8:c9:
d2:b8:87:77:1c:12:43:ea:1a:67:61:f5:3f:b4:af:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:9E:1A:76:A3:11:A8:B7:EA:EC:43:B7:0D:18:8A:EB:E7:EE:CB
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:76:cb:a9:32:90:b7:35:56:d1:f2:55:7f:fb:18:3d:f5:eb:
46:f8:5d:55:a7:eb:b1:11:f6:fd:e6:a0:4f:ff:1c:f1:8c:23:
68:4a:8a:98:8e:27:7b:3d:21:cc:22:ff:1f:3a:6a:34:64:39:
84:24:c2:a3:33:ff:9f:75:a3:2c:46:ee:7b:97:7d:f7:df:59:
88:61:b0:58:0d:9b:14:f2:b3:d2:78:7d:34:0e:dc:d4:fb:b8:
c1:7a:fd:4e:de:92:47:a3:db:0b:05:63:3e:e1:e0:b3:c8:93:
cd:ab:30:84:e3:30:1f:42:63:8a:70:e3:da:e8:45:a3:8b:2d:
48:cc:54:c7:aa:f9:17:28:bc:4d:54:86:3d:26:f0:d5:c3:29:
9a:a9:7e:2a:53:cd:28:08:29:16:31:20:d8:2b:e0:50:7d:b3:
e4:e2:89:53:47:ad:c9:92:09:8d:fa:78:6e:21:eb:a0:fd:aa:
77:71:da:f4:af:41:f1:9a:69:61:b2:c9:76:4d:b0:16:2f:72:
7f:2e:e7:44:ab:a2:75:28:01:e5:e3:1a:16:fe:d2:42:cf:26:
14:ad:4a:0a:37:10:7a:d3:49:b1:e5:4d:65:6c:1f:9e:81:13:
ec:28:65:7f:1d:fb:73:e7:ff:87:af:e6:e7:81:95:3f:97:2f:
32:35:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:28:10 2024 by rpki-client on console-fra.rpki-client.org