Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: s4YU8mN8Xhg96KwFtjU54wHp6LpqmwNf9ReP9eTeoI8=
Subject key identifier: FA:0F:82:1A:4E:60:9B:DB:16:6D:11:6D:2D:58:22:11:80:0C:55:87
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 018F95DFA1A7036FF1C34F191F1673B6977C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 0EC4
Signing time: Mon 20 May 2024 12:00:12 +0000
Manifest this update: Mon 20 May 2024 12:00:12 +0000
Manifest next update: Tue 21 May 2024 12:00:12 +0000
Files and hashes: 1: F4ErRxrvapvTYjpetMhUHvAhh1k.roa (hash: tmIVIapfLiVcsDn31gcOTrsPYdK6raoMZ8Dzyl+h48A=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: pZmztVXvQc2h19z0Hk2X1IrR0tJ3YI4GtFsp+IbUpOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:df:a1:a7:03:6f:f1:c3:4f:19:1f:16:73:b6:97:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: May 20 12:00:12 2024 GMT
Not After : May 21 12:00:12 2024 GMT
Subject: CN=fa0f821a4e609bdb166d116d2d582211800c5587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:6c:5c:91:a3:c4:75:a5:82:48:71:eb:64:
1c:6a:37:5f:34:ef:38:70:23:11:43:31:6e:4d:0c:
f8:03:31:2b:6a:13:a8:5c:38:d9:e4:ad:34:4e:ad:
a8:a7:d5:7b:47:43:8e:21:7a:f4:db:98:bd:ec:78:
d0:f0:08:62:b2:4a:33:8b:76:96:14:b9:8b:ea:7c:
82:6d:ea:11:0a:1e:70:9f:81:1a:ae:8e:3d:95:54:
6c:3f:15:9c:ac:28:3a:a0:26:06:4a:ca:29:1f:f1:
ea:ac:f8:59:9d:48:60:d9:75:26:81:a5:b0:e0:d6:
7a:5d:8b:03:8a:03:f6:42:3a:a2:c9:a7:d3:84:0b:
06:61:cf:0f:88:23:9d:e1:32:5f:1a:74:d3:7a:28:
38:82:c9:8d:61:58:da:25:fa:df:d9:f0:cf:b0:8f:
32:f0:50:b4:1b:20:90:71:fe:47:38:c6:e8:cf:c3:
30:cc:7e:74:1a:0f:b2:3e:d9:e0:a3:2a:66:18:48:
fb:af:5e:57:4f:47:93:a5:cc:58:12:3b:6f:1c:8a:
ef:9f:44:fb:03:dc:0e:f4:cb:bb:ab:07:42:7e:83:
e4:e1:d4:17:ac:ce:06:f7:f4:46:9a:68:d5:57:94:
2d:12:a7:2b:70:8b:b1:6c:e2:3e:a9:80:9d:1c:f4:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:82:1A:4E:60:9B:DB:16:6D:11:6D:2D:58:22:11:80:0C:55:87
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cc:2b:7c:b9:6d:01:ca:26:d4:9f:2d:40:e1:da:52:ac:4e:
d5:45:1e:aa:a8:83:83:94:12:40:99:34:ba:68:6a:dd:8d:54:
c7:5f:db:65:28:3b:70:c8:93:98:90:a5:28:78:58:eb:f8:8e:
71:69:57:81:84:a7:7f:87:55:31:66:c6:89:e3:f2:ba:78:dc:
9a:0b:1d:46:e8:cb:89:a7:20:14:24:25:cc:78:c4:66:2a:6e:
2b:48:2b:bc:df:7f:c4:f9:07:ca:9f:84:55:a5:63:37:11:ba:
d5:3f:62:5b:48:8f:b6:6e:30:b4:86:05:44:15:2d:e7:59:52:
05:2f:e8:db:4b:85:09:a1:6d:59:2b:5a:93:af:a0:5d:9f:e8:
0f:20:ef:31:60:85:77:b4:5d:fa:55:a7:aa:3a:21:82:c5:49:
aa:a8:0d:69:26:83:1d:49:57:f4:60:13:09:3c:c4:31:59:b5:
48:6b:be:e7:04:e3:97:76:b0:b0:8a:9a:85:04:45:7c:08:ca:
3c:76:82:7b:ac:b7:f7:00:14:27:95:11:c3:05:e6:a7:50:c8:
ac:58:36:5e:8d:61:72:cd:c1:c1:89:47:84:ce:ff:03:c2:58:
34:62:94:d5:07:fb:85:56:c7:ff:6f:89:73:ed:5e:dc:2e:75:
bb:71:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:33:34 2024 by rpki-client on console-ams.rpki-client.org