Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: QNG1u/TAfOdTycUAzO3jJOnOZpFvhNA0a723YwnDsus=
Subject key identifier: F7:BF:9C:53:33:79:FE:6C:50:27:D6:89:92:25:01:C0:73:D9:A9:74
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 018EF3DECEBE4CB7F26D49BFE5166548A07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 112C
Signing time: Fri 19 Apr 2024 01:00:49 +0000
Manifest this update: Fri 19 Apr 2024 01:00:49 +0000
Manifest next update: Sat 20 Apr 2024 01:00:49 +0000
Files and hashes: 1: 1_WLlox2SDo-pFfBeZxe1nV0UNg.roa (hash: eikqbQbNkZ1vTQoZZUb+mRRbTn+UqntTvkGGl1tQCBA=)
2: gKHzlzbsFKe4jwhtrp76m4rdTUg.roa (hash: /b2LKoj6hsE4fo2A5N/TKPouYgNF0RlxlnpIa1s7VIE=)
3: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: BkNdJM5gPtOos1pE7oLqOPT4Nt3W11qQPRVCsEneJ6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f3:de:ce:be:4c:b7:f2:6d:49:bf:e5:16:65:48:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Apr 19 01:00:49 2024 GMT
Not After : Apr 20 01:00:49 2024 GMT
Subject: CN=f7bf9c533379fe6c5027d689922501c073d9a974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:8c:2b:69:8e:e6:57:28:ec:70:dc:48:9b:
00:38:e5:73:37:34:b5:d2:d4:3f:c9:bb:84:fe:23:
76:cb:ee:83:82:15:7d:e7:cd:1e:10:2e:96:0b:50:
88:3e:51:c3:d1:83:fa:6d:b5:7a:24:cb:ab:67:6b:
fd:38:96:00:e9:b0:e7:f3:54:6b:42:e2:2c:5f:97:
38:3b:f0:9c:1d:94:17:f5:54:12:7f:3a:6a:b4:93:
c6:b3:65:44:22:6b:8e:c7:88:19:8c:84:2f:0e:20:
48:74:d6:18:ff:45:14:17:18:a8:80:b8:24:95:cd:
ec:9d:1d:78:0f:46:b1:0c:c0:f4:c6:18:92:37:8c:
61:78:46:41:19:83:cd:b1:02:c6:61:fd:40:6c:c2:
0f:97:c0:f2:46:c5:7e:5f:5d:33:f4:e9:5e:07:3f:
00:17:a1:13:06:99:a3:ad:95:a1:30:52:f2:2c:2b:
f4:81:22:0c:df:f4:40:e1:22:64:bd:54:81:d1:cd:
e1:e9:22:da:1d:1c:8e:09:1d:aa:89:13:3b:c4:bc:
b4:ce:a8:14:66:40:d3:05:2d:bb:8e:4f:e8:2e:7f:
51:5e:44:45:b5:cc:81:65:9b:df:ed:e6:42:41:fd:
be:9b:e2:ce:1e:70:05:97:e7:ae:0c:de:36:71:2c:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:9C:53:33:79:FE:6C:50:27:D6:89:92:25:01:C0:73:D9:A9:74
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0c:89:b4:2c:44:40:a0:78:82:d6:9e:0f:3a:76:d0:78:67:
65:a6:de:4d:1d:53:1f:bb:e4:b5:77:61:b4:db:0b:7f:6b:97:
42:92:f6:f4:03:94:68:13:36:3f:06:b7:6a:70:bf:38:da:b8:
07:29:89:23:e7:c5:a2:8d:22:30:6e:ca:d0:78:81:a4:41:a9:
35:80:8c:92:16:78:bc:03:d4:d2:c1:2f:a8:43:86:9d:d3:06:
3b:a9:8d:e3:7a:f3:41:07:af:c5:19:ae:5b:e9:82:85:d2:5b:
bf:18:1e:44:b1:1e:90:f9:c5:ee:22:7e:d5:1f:1c:a0:c4:91:
e0:9b:82:81:e8:4e:9b:f1:84:49:08:01:20:18:07:32:66:91:
f8:1d:d1:ed:ff:3f:5c:21:a9:47:49:21:5b:0c:64:b9:4a:c1:
dd:cd:1c:9f:6e:5e:2a:43:f4:fd:48:54:f7:ed:c2:d2:19:b5:
bf:bb:88:da:24:b0:c2:86:fc:8b:72:57:57:20:16:c5:ef:c9:
16:d6:65:6c:46:44:48:7a:48:01:c4:53:8d:bc:72:4c:d3:72:
ae:9d:f0:fa:c0:16:db:4c:f8:dd:9f:d1:9c:c5:41:35:1d:98:
be:1e:54:ff:be:26:64:4e:f5:73:2a:9b:9d:49:c3:29:b0:99:
a5:b7:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:13:19 2024 by rpki-client on console-ams.rpki-client.org