Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: 5Ieag3mIcS8fit9l1JVRJGA7+MQIbPQdhym63J6Xkbc=
Subject key identifier: 02:8E:95:E1:81:9C:B1:41:16:2C:79:15:EE:28:33:5E:7F:5C:E3:D6
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 018F381BCC1CDA7524BC1B9D3706CBD2D161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 114B
Signing time: Thu 02 May 2024 07:01:36 +0000
Manifest this update: Thu 02 May 2024 07:01:36 +0000
Manifest next update: Fri 03 May 2024 07:01:36 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: jsExPSpwgvo7hxmP0r/Jx+MV5dd7nj0T6mUu9PE7blk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:1b:cc:1c:da:75:24:bc:1b:9d:37:06:cb:d2:d1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: May 2 07:01:36 2024 GMT
Not After : May 3 07:01:36 2024 GMT
Subject: CN=028e95e1819cb141162c7915ee28335e7f5ce3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:41:b3:44:0f:3a:c9:7f:98:3f:25:b1:00:
f2:32:af:f4:34:22:4c:22:08:4f:26:1c:07:62:2a:
0c:d5:36:5b:f9:15:7c:ff:d9:4a:df:a7:fc:60:e0:
ae:3f:89:d3:c4:97:f5:c7:12:e6:e0:0d:f4:84:42:
40:ef:89:4a:28:d8:da:85:cb:5d:63:2f:78:4b:83:
7a:80:e9:aa:4d:38:5d:fd:82:3e:fc:f4:dd:62:da:
78:0b:10:88:c2:06:ea:9b:02:b5:7e:1c:17:9b:f6:
52:eb:18:83:69:1d:51:d1:59:d8:46:b6:bc:57:bc:
3e:7f:44:1e:64:c3:cb:77:2e:eb:e3:d9:12:7a:6d:
7b:87:90:ab:d2:d6:e3:7d:79:be:c7:29:13:d4:8a:
29:af:2f:6a:f2:a5:d4:48:01:44:c7:33:10:7e:4a:
c2:9a:ee:50:cb:84:63:c5:e9:3a:b9:73:6f:9c:86:
56:c8:01:dc:52:7d:41:d4:a0:d1:06:32:d0:d1:26:
89:13:4e:52:af:cf:db:6f:60:43:54:c6:7e:2b:f4:
87:1c:db:4a:a5:3b:f2:4f:6b:5a:19:3b:6f:ba:29:
61:d9:8e:7c:1e:b4:26:d9:f2:4f:63:4a:b9:c0:39:
2f:9f:32:e9:31:02:df:a1:c6:12:15:d6:d6:b1:ed:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:95:E1:81:9C:B1:41:16:2C:79:15:EE:28:33:5E:7F:5C:E3:D6
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:81:5c:02:1b:e9:17:fb:4f:51:94:35:90:b4:7b:ec:eb:f6:
cb:38:6b:7c:54:07:9c:d3:69:71:14:c8:55:63:78:58:62:36:
77:cc:c3:9e:12:93:74:58:69:40:dd:87:c7:d9:04:18:e3:19:
3f:49:37:17:0e:0c:05:ac:02:9b:bf:58:d4:e8:ea:df:3a:0d:
02:c4:c8:cb:1e:e1:41:df:9f:04:7a:bb:c9:d1:b7:c0:6d:db:
16:5a:19:74:e5:1e:de:9f:76:9f:7c:c7:76:43:e1:e7:5f:99:
de:17:92:91:66:39:3c:c0:8a:87:d5:cb:7f:23:77:c8:7a:34:
c6:27:72:ec:4a:8f:c5:13:5c:16:56:5d:e9:0e:2c:3c:9b:3b:
4c:ee:ef:0e:33:ee:1e:df:35:aa:fb:60:25:e3:a5:6d:aa:50:
bc:90:cf:dc:55:ec:9b:58:b0:68:f3:66:fc:c6:29:e6:0a:3c:
35:b1:41:9b:da:ed:d0:b8:87:d1:87:0e:70:90:3b:b4:63:29:
67:78:c1:e3:e4:60:03:d4:83:e7:2b:8c:3c:18:3e:82:bb:74:
00:c0:73:a8:8c:6b:9e:f4:05:31:ba:fc:06:8f:ae:e9:63:5b:
a7:3d:5f:fd:8b:db:a3:5d:8d:38:40:fb:1b:cd:75:57:ca:91:
b1:9f:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:37:05 2024 by rpki-client on console-fra.rpki-client.org