Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: jp3uVNeZVsnrHi56JnzpaQpwvtFZoser0Yr9+hJE+gI=
Subject key identifier: 2A:FA:8B:BD:33:CC:99:37:8E:BA:6C:F6:87:5E:32:82:D8:93:A5:4A
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 018F87B60AEAC9E989756516EDEC18B226B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0458
Signing time: Fri 17 May 2024 18:00:05 +0000
Manifest this update: Fri 17 May 2024 18:00:05 +0000
Manifest next update: Sat 18 May 2024 18:00:05 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: CL9pgwcjROtDWYM2bMTplBnopd9dnOTA90Nk+XtekBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:0a:ea:c9:e9:89:75:65:16:ed:ec:18:b2:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: May 17 18:00:05 2024 GMT
Not After : May 18 18:00:05 2024 GMT
Subject: CN=2afa8bbd33cc99378eba6cf6875e3282d893a54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:14:f9:c5:b2:56:4c:9f:68:93:54:bd:93:
b6:fa:de:4f:d0:f7:51:40:38:9c:8a:1b:e6:e9:55:
48:97:63:8c:1d:3c:ee:51:ae:54:01:cc:28:92:b9:
ac:c2:e8:ea:93:bc:84:7e:8d:9b:ab:16:ea:ad:1b:
24:c1:e0:1e:8c:bc:37:3c:09:e0:c1:8c:5d:66:8f:
85:dc:e5:38:ec:16:c4:e6:08:e1:59:9f:ca:81:f7:
99:a9:0d:1c:f4:bd:aa:17:0c:33:75:4c:60:1e:5a:
ac:c1:6f:fe:7c:4a:39:30:44:a4:77:8b:67:b3:2f:
a5:cb:03:88:d3:94:b6:5c:a5:b3:47:4c:fe:59:fe:
fe:72:71:7b:7e:4d:91:49:19:a5:19:37:fe:77:47:
56:be:b4:db:97:1a:4d:54:7b:7f:6c:38:c2:6c:9a:
80:3b:b1:4a:b3:21:d4:5d:5b:55:3a:49:a5:3c:e1:
56:8f:52:93:94:34:d6:a1:ae:34:50:95:4f:a1:2b:
a6:1c:c0:11:d8:e5:38:7a:32:2d:29:ed:a0:1e:d9:
24:77:f9:af:8d:4d:5d:89:af:ed:45:78:39:d6:90:
82:e6:c0:a5:3d:3c:90:6d:a2:8c:f7:1b:13:7e:fc:
2d:46:e8:5b:69:60:b9:0d:5f:ae:79:32:b8:c3:9d:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:8B:BD:33:CC:99:37:8E:BA:6C:F6:87:5E:32:82:D8:93:A5:4A
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:f3:d7:fc:55:bb:ad:eb:a4:7e:b8:c1:e5:82:a1:aa:6f:
f3:77:82:91:1c:c2:bd:36:0e:ad:21:1a:24:f9:83:99:c4:e8:
3f:4b:67:a8:3f:7e:b6:5f:23:1b:07:35:1c:c7:51:7a:b1:bb:
f6:7b:a8:48:1b:20:55:7c:b2:d6:9e:91:b7:0c:65:75:6c:d1:
ae:d9:90:98:c2:27:a8:d4:98:64:27:1d:53:ac:d3:f7:5a:45:
34:30:81:df:2a:b1:a0:99:5b:33:48:65:44:b8:fe:f8:79:6b:
67:40:65:0c:09:ad:7a:5d:7f:62:9e:97:11:1a:ee:69:25:a3:
e3:23:37:83:ea:8a:0f:8b:93:7e:fb:dc:b0:f3:01:13:3c:c6:
a6:b1:9d:ea:7c:e5:52:a1:1e:43:48:b8:ec:09:a9:12:07:36:
93:ee:91:be:f2:2f:25:f8:b2:73:5f:c1:fc:e4:03:89:93:34:
1a:c2:ee:0e:f8:63:98:2f:d9:63:35:64:a2:81:82:82:1b:1f:
8d:49:ee:b4:44:bb:92:cb:db:5e:24:6d:01:c9:c1:5c:27:8b:
2b:59:5a:d6:c8:12:95:98:a2:d9:e2:45:2e:d8:27:9a:24:47:
a6:6c:98:3f:12:3d:8c:03:65:b0:d1:77:52:65:42:19:3a:b9:
c8:88:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:34 2024 by rpki-client on console-fra.rpki-client.org