Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
File: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft (raw, json)
Hash identifier: 2F0hyw5XUTHCkm8nBPi1e2ArlJxPMIN543ZhgEDan5Y=
Subject key identifier: B2:BA:64:3F:4B:EF:2A:6E:B2:C2:53:82:FE:5E:EF:B3:C1:93:3B:B5
Authority key identifier: 2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
Certificate issuer: /CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Certificate serial: 01886B6306F9EA265630152134911D72AF09
Authority info access: rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
Manifest number: 19BC
Signing time: Tue 30 May 2023 06:40:24 +0000
Manifest this update: Tue 30 May 2023 06:40:24 +0000
Manifest next update: Wed 31 May 2023 06:40:24 +0000
Files and hashes: 1: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl (hash: UDtXP2CturT/HY8X8lIGRv1RIsKkS03ePXUnCXfBCjU=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: MQXBk2P8bCnJqq++nRttaN+qQSh7JCWf9eLwsE4U6uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 May 2023 06:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:63:06:f9:ea:26:56:30:15:21:34:91:1d:72:af:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Validity
Not Before: May 30 06:40:24 2023 GMT
Not After : May 31 06:40:24 2023 GMT
Subject: CN=b2ba643f4bef2a6eb2c25382fe5eefb3c1933bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:e3:35:98:9e:e0:ee:d1:a6:a1:f1:5a:39:
c4:94:e7:82:3b:f9:e3:87:70:de:bd:b6:c9:7f:3c:
1b:67:5c:2c:16:9c:1e:dc:ce:23:c2:28:58:50:d5:
13:2e:9f:2d:5b:0c:81:d7:95:d1:44:a6:0e:5e:4e:
48:a0:69:22:84:62:74:c5:af:fe:60:6a:3a:c2:72:
61:66:ee:ed:19:db:a4:f5:fe:c4:9c:3a:c9:ba:0b:
6a:6f:a0:ed:d1:a5:06:11:87:f6:a6:a2:40:37:2e:
a5:28:2e:80:ff:ca:34:3c:21:0a:64:10:fd:3b:fe:
70:9a:22:66:74:f3:51:d6:2e:0e:9c:a9:dd:cb:ba:
49:32:9a:86:b4:ef:ee:e2:49:b6:88:9c:2c:86:a3:
61:f1:87:90:3e:da:b2:0d:e5:6a:6e:b4:8e:97:ba:
61:dd:38:7b:da:62:2f:77:01:31:f1:4b:ed:f9:88:
20:39:27:ec:b9:99:2f:e4:dd:3e:22:17:de:d3:9d:
b4:6b:4a:a0:0a:f6:a5:1f:bc:f9:a7:05:43:68:d8:
79:32:5e:eb:72:ae:6a:8f:4c:bf:09:ae:e4:45:b0:
ff:c4:d3:e5:04:93:23:79:34:42:ee:bb:db:30:e8:
c5:f2:a6:06:0b:74:41:4a:7b:86:b8:af:7c:45:48:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:64:3F:4B:EF:2A:6E:B2:C2:53:82:FE:5E:EF:B3:C1:93:3B:B5
X509v3 Authority Key Identifier:
keyid:2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:aa:46:d2:f4:d9:ca:f6:5e:30:5c:ea:0a:70:97:97:36:0d:
1a:87:3b:13:1a:69:b6:0f:78:1b:e8:9a:3e:ea:24:da:d0:47:
2a:4e:21:e4:34:02:bf:2c:ca:62:f8:4e:d6:2a:7e:12:63:2e:
a9:5b:07:32:af:74:d4:b1:f5:fa:5d:07:31:ab:a1:0d:d1:37:
7d:d1:b6:57:d2:aa:64:35:ac:aa:cc:1d:ad:a8:28:63:31:0d:
b8:f1:9b:84:eb:aa:09:82:8f:44:ec:52:11:c6:24:be:2c:70:
22:c5:26:0b:9d:bb:65:1a:4d:af:1c:dc:1d:dc:03:46:c3:a7:
88:ef:eb:9b:95:9c:da:7c:38:3e:b8:6c:38:d0:36:c8:e6:f4:
54:2b:13:9a:db:03:ad:ca:ce:27:3b:66:40:2f:a9:3d:af:ba:
f4:c6:4e:e4:6f:51:a0:e4:6a:8a:c6:72:b6:9e:84:56:7b:fb:
93:32:e7:12:53:7b:15:4c:a3:e2:d5:77:6a:c8:7f:a1:64:82:
dd:c7:41:34:11:77:37:e1:fd:63:6b:08:20:bd:03:84:03:c9:
c8:a7:92:fa:61:b0:14:b9:19:5c:7f:d0:c4:84:0d:c3:3c:df:
43:76:10:7b:8e:53:ae:9b:b0:56:6a:7f:52:a5:5e:aa:46:a6:
8d:09:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 30 07:36:48 2023 by rpki-client on console-ams.rpki-client.org