Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File: TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier: y5KpPvDkqxOLD5tPj/ZSvZjzOGkbeoP9OEaUC5vPkcc=
Subject key identifier: D9:C0:AA:85:55:09:66:BF:1F:58:F3:16:87:4F:E3:3B:80:A2:9C:2C
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 018F874A6B8A25B6255915D5DEF59DC499A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:02:32 +0000
Manifest this update: Fri 17 May 2024 16:02:32 +0000
Manifest next update: Sat 18 May 2024 16:02:32 +0000
Files and hashes: 1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: V14YHQBd37vjC42EkYRy+S3WNtfOyB9Z5Yl8/+tw9c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:6b:8a:25:b6:25:59:15:d5:de:f5:9d:c4:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: May 17 16:02:32 2024 GMT
Not After : May 18 16:02:32 2024 GMT
Subject: CN=d9c0aa85550966bf1f58f316874fe33b80a29c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:19:e5:dd:db:a7:91:8c:82:b9:42:77:59:
fb:ee:b6:e0:bf:2c:08:d2:bc:96:1c:93:86:b2:b3:
85:cf:af:2d:ca:78:72:c9:3b:02:d9:15:1d:9f:fa:
63:d9:f0:dc:e6:0b:ab:b1:cc:f7:4f:fb:67:7b:b5:
54:52:9c:1e:18:9d:99:3c:7e:c5:9e:6e:b6:3d:3f:
a9:66:c9:e6:bc:ce:b2:b3:14:de:e7:0d:cb:ad:ab:
5e:f7:fe:73:18:b4:83:28:9e:6c:2d:5a:13:56:6e:
4b:da:49:0c:e2:a1:09:2f:66:41:ab:d5:b5:ae:f2:
d1:81:56:e7:ab:7a:4f:9a:76:49:7a:ae:81:80:8e:
d2:26:73:d4:64:f0:69:59:be:d9:3b:45:e0:a9:c1:
f2:c9:25:a3:93:3b:f4:75:a5:f5:6b:46:62:93:4e:
04:57:8e:0d:2c:48:c6:aa:64:be:0f:0e:bd:bb:69:
94:7b:a9:db:31:34:cb:01:6c:4d:a6:bc:2f:3a:a6:
19:b6:e4:71:08:7f:fb:a5:e7:bd:00:b7:cd:17:6a:
f8:30:75:95:fa:a8:f6:39:c0:cc:2b:77:12:e7:63:
b0:f5:ac:ff:18:ec:08:87:52:8f:fc:aa:ca:b5:da:
f2:ad:4f:53:22:ea:49:9c:04:41:17:72:f7:58:11:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:AA:85:55:09:66:BF:1F:58:F3:16:87:4F:E3:3B:80:A2:9C:2C
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:30:fd:aa:ea:18:5d:1d:e2:04:d5:9f:8f:ad:ec:69:ed:40:
d3:24:de:12:a4:d2:3a:3f:c9:18:96:83:fa:8a:93:ea:b6:52:
bc:7f:c5:cd:42:a1:f9:61:07:69:bc:0f:ee:80:01:b7:07:5f:
f4:61:a5:f3:ed:09:60:27:c3:34:cf:08:5d:87:ac:d2:18:b9:
39:df:89:de:9a:4b:34:70:72:f0:a9:0a:fb:22:d3:90:00:b6:
5e:54:25:01:fb:77:0f:d8:0b:bd:fe:43:31:49:ed:d6:e7:6c:
22:d6:fa:d3:90:6f:b8:90:04:45:35:30:a8:3d:26:46:87:5d:
ec:71:e2:38:ff:45:af:c2:17:95:e7:9f:d1:dd:7e:1a:27:86:
62:6a:90:69:cf:48:9f:98:65:22:0d:29:ec:51:4f:37:62:77:
53:9a:0d:1c:6a:e2:b1:91:4f:68:c3:a0:7d:aa:56:bc:d2:b7:
7d:8b:76:98:7a:58:f4:2c:82:c1:7f:ae:18:04:7a:d1:3f:2c:
77:b0:46:5c:31:72:80:88:75:b9:3e:12:c7:b6:9d:58:64:ae:
42:87:7b:50:70:25:cc:ce:85:a6:19:0c:b3:55:7f:4e:6b:11:
7d:a0:2e:81:cb:d9:1a:a9:b2:65:e4:04:d5:34:bc:09:59:6e:
5e:32:f2:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSmuKJbYlWRXV3vWdxJmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJkNDBhNTNiYjYwYjg2NzU5ZTZlYzBhNTIwNzMwMGI0
MWFmNzAwHhcNMjQwNTE3MTYwMjMyWhcNMjQwNTE4MTYwMjMyWjAzMTEwLwYDVQQD
EyhkOWMwYWE4NTU1MDk2NmJmMWY1OGYzMTY4NzRmZTMzYjgwYTI5YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrIZ5d3bp5GMgrlCd1n77rbgvywI
0ryWHJOGsrOFz68tynhyyTsC2RUdn/pj2fDc5gurscz3T/tne7VUUpweGJ2ZPH7F
nm62PT+pZsnmvM6ysxTe5w3Lrate9/5zGLSDKJ5sLVoTVm5L2kkM4qEJL2ZBq9W1
rvLRgVbnq3pPmnZJeq6BgI7SJnPUZPBpWb7ZO0XgqcHyySWjkzv0daX1a0Zik04E
V44NLEjGqmS+Dw69u2mUe6nbMTTLAWxNprwvOqYZtuRxCH/7pee9ALfNF2r4MHWV
+qj2OcDMK3cS52Ow9az/GOwIh1KP/KrKtdryrU9TIupJnARBF3L3WBFN6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnAqoVVCWa/H1jzFodP4zuAopwsMB8GA1UdIwQY
MBaAFE8y1ApTu2C4Z1nm7ApSBzALQa9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYt
YzZiZjJmZmI3MjUzLzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYtYzZiZjJmZmI3MjUz
LzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjD9quoY
XR3iBNWfj63sae1A0yTeEqTSOj/JGJaD+oqT6rZSvH/FzUKh+WEHabwP7oABtwdf
9GGl8+0JYCfDNM8IXYes0hi5Od+J3ppLNHBy8KkK+yLTkAC2XlQlAft3D9gLvf5D
MUnt1udsItb605BvuJAERTUwqD0mRodd7HHiOP9Fr8IXleef0d1+GieGYmqQac9I
n5hlIg0p7FFPN2J3U5oNHGrisZFPaMOgfapWvNK3fYt2mHpY9CyCwX+uGAR60T8s
d7BGXDFygIh1uT4Sx7adWGSuQod7UHAlzM6FphkMs1V/TmsRfaAugcvZGqmyZeQE
1TS8CVluXjLyCA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:56:34 2024 by rpki-client on console-ams.rpki-client.org