Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: 23PJfDYJYZMQ1vcvYlORuuD+tEzjSlXjndss/nT/D6g=
Subject key identifier: 00:56:C2:03:FB:94:FB:BE:AF:AC:34:15:80:B0:B8:75:A9:1B:05:47
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 0191FAEDBED80225D459DDFADD7D33739819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 97
Signing time: Mon 16 Sep 2024 13:02:50 +0000
Manifest this update: Mon 16 Sep 2024 13:02:50 +0000
Manifest next update: Tue 17 Sep 2024 13:02:50 +0000
Files and hashes: 1: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: k39KP8zmmcBLDBfM2DNGP1JdaoEIBL0eQYVM86eldok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:ed:be:d8:02:25:d4:59:dd:fa:dd:7d:33:73:98:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Sep 16 13:02:50 2024 GMT
Not After : Sep 17 13:02:50 2024 GMT
Subject: CN=0056c203fb94fbbeafac341580b0b875a91b0547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:a2:a5:23:00:61:5f:67:78:ef:a4:19:05:
d8:14:8b:de:13:9a:22:5a:a0:63:8b:07:7e:ac:69:
0a:b3:e0:a5:aa:67:b6:40:96:b8:41:49:0d:17:06:
00:ae:7e:0c:89:b8:10:d0:47:f4:bd:2a:46:cf:3a:
64:4d:de:48:0b:54:b7:5e:73:90:87:59:10:24:da:
e3:1a:00:6f:48:f3:45:34:41:14:cd:e4:a3:86:98:
5e:55:0a:95:b4:4b:56:94:c8:1f:17:ec:21:8d:16:
9c:c8:a8:f7:0f:d7:a7:14:0c:07:58:6a:af:cd:02:
a5:a2:b6:c9:8d:14:3b:ef:4b:a2:09:d7:09:6b:83:
93:19:2c:d5:47:97:10:fd:f1:48:5d:56:63:5a:59:
eb:6d:b2:27:93:cc:a1:27:db:0c:ee:b1:6b:2f:1a:
c6:5a:ee:4b:67:fc:35:13:01:16:50:28:df:23:82:
86:10:96:43:e1:3b:89:13:3a:fd:ac:f5:bd:15:87:
21:ab:6d:ba:69:6a:37:91:dd:b4:22:e7:2d:a7:93:
ec:3a:73:fc:7a:30:70:5c:4b:bb:7b:e6:b3:bc:27:
ed:28:a0:03:70:1b:e7:a0:97:fe:7b:1e:60:95:53:
1c:7a:95:8c:9a:18:cb:77:61:3a:05:a6:87:38:a0:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:56:C2:03:FB:94:FB:BE:AF:AC:34:15:80:B0:B8:75:A9:1B:05:47
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:be:cc:27:44:a6:3c:ba:d5:5c:4a:76:83:c5:29:64:45:84:
d5:8c:5c:fe:a2:24:ce:98:d9:de:33:41:d5:44:6e:97:09:06:
1a:6a:85:33:30:e8:99:66:43:43:54:86:18:59:35:03:0f:ba:
dd:b1:6e:89:d5:a0:5a:f4:ef:91:86:a8:66:b2:04:c3:55:76:
c9:98:87:fc:f7:64:3e:17:b3:98:25:34:84:f3:64:2b:30:5e:
1c:21:bf:12:4b:1f:e2:54:f9:17:b6:d2:79:ed:8d:cb:8d:f0:
56:2a:8d:e8:a6:c7:a1:22:20:84:27:af:14:79:52:e6:33:23:
2e:f3:ff:63:da:88:e6:d5:49:58:7f:92:e8:f9:00:2b:9f:23:
dd:06:a8:72:f9:b0:c8:2f:6f:98:fe:84:f6:e6:12:f1:0b:2b:
05:73:04:29:f1:67:10:54:7d:09:6c:78:0e:82:fd:39:b8:0f:
08:b7:9b:d0:ef:91:0c:6d:c9:91:ad:5b:00:6a:ac:68:76:ff:
cf:3c:83:fb:89:20:3e:e1:2c:d1:4a:a4:2b:e0:10:4e:fd:57:
e6:4d:2d:5e:a6:4b:ef:06:90:bf:07:c5:32:78:80:b5:06:e4:
ae:15:e2:69:41:7f:9b:2c:9d:15:16:5e:24:36:02:cd:47:f2:
2d:07:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:43 2024 by rpki-client on console-ams.rpki-client.org