Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: Enqy/fPST7vqAv4SNWAG+63RKWFBe2XBpL0hh85lOio=
Subject key identifier: 5B:87:51:9A:1C:CB:EB:9D:07:0D:62:38:81:B8:FE:0A:D5:A9:57:B2
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019051338B51059F1CB2120395F9F696FEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0AE1
Signing time: Tue 25 Jun 2024 21:00:50 +0000
Manifest this update: Tue 25 Jun 2024 21:00:50 +0000
Manifest next update: Wed 26 Jun 2024 21:00:50 +0000
Files and hashes: 1: 090iEnpedWdEk_mlgN_ffJmXwls.roa (hash: FsCLdR8Le/hijQeo/8q5V3Rc/iJoMndYhsuRTKhUKTo=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: NV64KQ7XlWAqnR7Hc/AlO2EZ/Ng+XvSxe3Pe/XQFVvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:33:8b:51:05:9f:1c:b2:12:03:95:f9:f6:96:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Jun 25 21:00:50 2024 GMT
Not After : Jun 26 21:00:50 2024 GMT
Subject: CN=5b87519a1ccbeb9d070d623881b8fe0ad5a957b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:42:53:93:5e:06:c9:21:93:1e:0f:13:7f:
de:a9:45:fd:80:2d:cb:df:ab:1a:6c:68:35:1d:5d:
58:5b:75:b0:36:b0:fc:d9:e1:19:f6:94:b1:75:de:
33:3d:5f:0d:38:37:c5:7f:9e:51:aa:e5:2d:4c:40:
b6:5c:6a:f7:79:56:98:8e:bb:54:fc:e9:50:8c:33:
8f:3f:04:fc:a7:7e:5d:2c:92:09:ad:0e:e8:bd:cf:
44:e3:69:d0:17:85:a3:7a:bc:a9:b8:4f:7c:ee:dd:
4f:f2:03:4a:30:48:35:d4:57:3e:f2:d7:f2:31:39:
e4:15:99:f9:50:02:f7:7f:83:51:97:8c:f6:2a:f3:
d6:ec:37:4b:9e:86:27:6e:2a:c3:f1:0f:94:79:b4:
65:63:3f:f9:c3:b2:4e:4d:3c:00:6a:2d:cd:c0:e9:
75:7f:71:31:eb:cf:fc:25:b5:31:89:f2:87:9a:5e:
a3:a0:c2:76:71:35:39:de:bb:d4:7e:20:f9:10:bd:
0a:e0:3b:48:e5:7d:d5:86:97:b9:dd:bd:12:49:19:
0a:b3:93:99:61:c3:32:8d:93:74:8b:40:04:2e:5a:
50:99:9a:f6:f2:ff:95:5c:97:ee:e9:ab:d7:3a:bf:
68:8e:db:c7:3f:b1:ca:41:8f:4a:91:7a:48:97:dd:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:51:9A:1C:CB:EB:9D:07:0D:62:38:81:B8:FE:0A:D5:A9:57:B2
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:de:ab:aa:79:b3:10:1f:b7:1c:aa:ec:0e:df:59:e0:b7:
77:fd:47:8f:92:3d:ae:5e:53:1e:c0:0e:84:9a:b5:d7:7e:e4:
f3:73:ee:02:39:7a:88:00:5a:3e:ec:b6:10:a1:d4:31:c3:b5:
45:78:bc:20:71:52:f4:66:c3:a8:b1:d5:cc:56:ab:fe:8e:1d:
28:5d:84:20:87:df:76:23:cd:76:55:bd:dc:5b:51:7f:96:ad:
bf:ec:2a:a9:c4:be:78:0b:54:e5:1c:85:2c:be:59:11:9a:f4:
a0:7d:fc:44:2f:bb:fc:4c:75:81:4a:44:15:73:1b:aa:d2:14:
ce:2b:62:ea:d4:83:7d:07:38:a5:3b:e1:76:db:bd:37:8d:53:
f7:23:95:df:7e:70:d7:02:e3:9a:6a:02:26:11:96:9b:b1:bd:
69:e4:f9:76:3b:19:04:af:a2:1e:c9:9c:8e:7f:ac:93:b1:6a:
fc:52:75:f2:47:10:60:58:ba:9d:04:b7:bf:39:06:fe:3e:ef:
d2:68:1f:30:4d:14:b9:96:d9:92:f8:56:37:57:1d:79:99:fb:
d1:cc:5a:15:91:91:cc:30:7a:33:13:86:ea:bb:7a:09:9b:3f:
56:b9:08:71:90:f5:fd:a5:61:a7:85:0e:24:36:f0:97:d9:cf:
8c:30:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 01:14:32 2024 by rpki-client on console-fra.rpki-client.org