Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: jQ6s5WQpEz2KMDTJ95MSIFOkX3theVBWPkhCgYOunqs=
Subject key identifier: BF:75:07:CA:AD:69:91:CC:5E:88:B4:C5:61:2B:41:96:D8:86:95:9C
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 018F4A21F4C9753B9BF5AEBCB5D2C6461860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1157
Signing time: Sun 05 May 2024 19:01:30 +0000
Manifest this update: Sun 05 May 2024 19:01:30 +0000
Manifest next update: Mon 06 May 2024 19:01:30 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: 64M5wHbj4axyuYmmKukvvSh8cAg0C/TvMFe+yDf2nBc=)
2: InxReL7uJlPszmJ-svuoM4a5NxE.roa (hash: HVWUl84d23dPqIR0rkHwTHtI0+vKvKlpIOWa57FLaXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:21:f4:c9:75:3b:9b:f5:ae:bc:b5:d2:c6:46:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: May 5 19:01:30 2024 GMT
Not After : May 6 19:01:30 2024 GMT
Subject: CN=bf7507caad6991cc5e88b4c5612b4196d886959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:40:af:a8:72:37:91:47:a5:4d:80:09:85:
5e:41:bc:1c:45:f4:e3:c0:df:2b:59:61:fa:a3:a8:
d6:f7:15:31:81:96:9a:39:15:d0:5e:b5:d5:0a:36:
ba:9e:68:49:70:d9:74:65:4a:66:8c:d6:63:b7:30:
47:35:d1:79:59:a1:d0:74:6b:2b:40:0c:c0:a4:84:
0a:4f:fc:08:3d:7b:9b:0c:c6:8a:2e:ce:70:d1:fc:
0d:32:6f:cd:8a:44:9d:2d:ef:de:b9:a8:92:8e:66:
b1:e3:43:94:4f:a5:88:c4:d1:f3:21:04:42:cc:d8:
bf:c9:3c:db:2a:11:11:28:a1:16:6f:d8:9c:46:c3:
5d:19:2c:3c:37:b3:ce:c8:9e:c1:3a:1e:0e:68:cd:
6c:fd:93:95:53:10:d1:27:3b:18:ca:b4:e1:00:11:
de:1f:05:88:a6:9c:10:d8:25:e6:08:4f:33:e0:61:
29:84:7f:d6:c9:37:06:cd:9f:5d:e5:26:79:f4:b3:
e9:a8:95:79:31:5f:f8:01:87:df:c8:bc:59:83:cc:
e9:d6:77:53:2a:7a:88:d1:12:29:76:51:07:39:5e:
61:2b:14:f0:b8:64:bb:17:81:68:4a:01:e6:a1:c6:
a6:ec:a1:e1:1f:ca:61:75:7c:4b:1f:d4:a9:30:e8:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:07:CA:AD:69:91:CC:5E:88:B4:C5:61:2B:41:96:D8:86:95:9C
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:2b:67:95:a9:0d:33:af:14:73:9c:58:57:f3:5e:41:81:
5d:96:35:f6:2f:c9:0d:12:19:2d:a0:75:e3:69:47:7e:d4:dd:
2e:0d:ef:9d:c0:21:7d:d5:ae:0b:68:fe:92:81:81:4d:8c:af:
b9:10:d6:69:33:0a:71:0e:2b:a5:e6:ab:03:85:fd:bb:c7:6b:
a4:7a:1e:f5:ab:9c:74:03:af:3a:69:26:d0:9e:17:b6:f1:7f:
6a:63:c4:41:27:e9:ee:ec:fd:9b:62:50:22:62:83:c1:89:3e:
7d:e0:fe:38:a0:34:ec:99:8b:f7:88:1f:97:5d:b0:fb:a2:ab:
a3:86:aa:4e:e6:68:29:78:8e:02:8e:d0:d4:14:75:a8:9b:7a:
5c:43:fa:7b:c6:b5:de:c6:c9:c3:27:e0:7f:e8:0b:22:46:89:
bf:32:5f:e4:be:1a:0c:ef:c2:7e:1f:45:79:a8:34:f1:03:93:
6b:60:73:e6:e6:99:d5:31:10:f6:d6:35:33:8c:38:b7:f8:24:
a2:c0:c3:71:48:b5:52:c1:f2:04:24:3f:61:8c:db:54:f3:68:
eb:3a:f9:d4:91:66:eb:2b:47:7f:a5:62:8f:0a:29:a9:9b:f0:
29:de:f2:3c:1a:bb:ef:14:ae:06:22:b3:5f:c6:5b:ca:fc:cb:
2f:e0:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:30:14 2024 by rpki-client on console-ams.rpki-client.org