Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: 8EAQ++NABGM5Dg5w5MTnFR8K9uKDTKeNlJrSVFtcXVI=
Subject key identifier: C2:2C:01:D1:1C:4B:14:F7:9D:22:94:C5:E8:66:83:80:3F:BC:C0:45
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 018F4C1086F4788E14ABFECF0E67BF2C7D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 044A
Signing time: Mon 06 May 2024 04:01:42 +0000
Manifest this update: Mon 06 May 2024 04:01:42 +0000
Manifest next update: Tue 07 May 2024 04:01:42 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: ec2M8Af7EwyEziHNuMHgW/hwwXPRcUQKwYT+d2ssids=)
2: Rar_D51RKjRXOdqruNYK4DGVtvs.roa (hash: zy+1ZLCf+pNtJdxg4Ob/Rqd01hVTLWIo1rdOxXP+0Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:10:86:f4:78:8e:14:ab:fe:cf:0e:67:bf:2c:7d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: May 6 04:01:42 2024 GMT
Not After : May 7 04:01:42 2024 GMT
Subject: CN=c22c01d11c4b14f79d2294c5e86683803fbcc045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:58:ee:7a:70:8b:a7:7e:c3:b0:1a:26:e5:
ff:5c:78:37:80:24:77:72:36:bc:41:b2:a0:d9:2c:
f2:ed:ca:b4:88:b6:3b:aa:88:1a:15:cd:60:eb:2c:
f7:6c:b0:d9:17:f0:65:c0:f4:7b:2e:85:7d:06:8c:
bd:5e:a0:b6:1a:6a:a3:fc:8e:38:57:f2:9a:7b:0d:
2f:4d:a8:35:f8:13:b6:91:23:46:11:61:68:9e:91:
f7:69:b4:0b:8d:98:d3:e1:bd:ed:b2:f2:37:5f:97:
91:9d:69:89:02:8c:0a:62:cf:91:82:0f:df:6e:ab:
ab:62:88:63:c1:df:0f:85:8a:02:83:ba:02:d8:63:
1e:d1:03:58:79:fe:aa:29:ad:23:81:63:b2:9f:49:
0c:c8:a3:4c:d9:b6:08:79:ef:02:d5:39:cb:20:62:
a5:14:a4:03:44:4b:c3:c3:59:a3:c0:59:d1:e8:37:
13:52:3f:7b:f4:58:82:cc:3d:42:7d:15:39:cf:91:
84:b2:1d:e3:87:e8:03:63:8f:83:de:bc:17:69:11:
5d:37:27:f1:d8:99:04:b0:f0:24:fa:74:0f:81:1a:
9f:2b:53:2c:c4:8c:e0:59:16:0e:a7:05:37:20:82:
d8:73:0e:9a:0d:61:5e:aa:3f:42:47:dc:a7:42:73:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2C:01:D1:1C:4B:14:F7:9D:22:94:C5:E8:66:83:80:3F:BC:C0:45
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:30:9f:15:10:f5:99:5d:f6:59:2b:1c:08:d5:b5:a9:af:
95:88:74:23:83:55:65:64:42:91:f7:95:73:95:e0:e9:e8:4e:
7c:b5:07:44:95:5e:ff:4e:3e:ea:02:a3:c0:16:16:97:dc:cb:
82:90:58:b0:08:da:30:07:8d:08:a2:ad:a3:07:8b:10:f4:1e:
36:27:a0:61:bc:5d:dd:e3:6e:20:b3:d6:8b:bb:b1:f0:2a:b8:
ec:e6:e5:23:d5:9d:47:00:d3:a7:c2:34:50:aa:ee:6e:9c:d6:
12:67:eb:8c:a1:82:a9:17:32:f7:30:45:1b:9a:21:5a:c6:20:
62:ca:51:06:c4:8d:5c:7e:aa:0d:85:48:e6:b4:d5:6f:f3:b0:
6f:3a:e2:07:64:b4:74:20:fd:1f:9c:3a:53:70:eb:b7:35:b0:
5f:50:71:27:7a:98:46:41:42:e4:3c:e0:5e:9e:87:8f:ec:d2:
e0:cc:89:d2:70:ce:be:f9:e2:14:47:7c:cb:a8:65:ff:1d:5e:
35:f0:bf:a7:be:ca:ed:40:be:97:3a:54:4b:40:08:ee:ef:12:
ee:a9:68:4a:78:25:c6:58:6e:65:89:6b:07:4c:84:a7:77:0c:
ae:f7:ee:0a:6e:3f:50:0f:8e:20:75:a5:de:4a:23:45:46:15:
68:ea:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:02:02 2024 by rpki-client on console-ams.rpki-client.org