Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: PGNyOgTcl2m/NZCqsJb1aq0JGBFqr8ovmVB1y12DV9k=
Subject key identifier: B7:BE:1F:3F:0B:BD:E2:0D:FA:A0:43:88:14:FC:F7:BE:E2:0E:C5:20
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 6AC398897CC8D121AD8CD5F193F291963B3C5D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: DE
Signing time: Fri 17 May 2024 14:10:13 +0000
Manifest this update: Fri 17 May 2024 14:05:13 +0000
Manifest next update: Sat 18 May 2024 14:33:13 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: URrp/4Ja9lCgTfjUioctP7AKxc1fbG4X7VRYuMiUhkc=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5/xue1t7Vp0t9BDsTl1B+IiUGePh3wUDZ/Dncr6ArKI=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: Q3QiqxUuMSp7WUu02mA+KyUsM0fons3AJE9l+1oNWeY=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c3:98:89:7c:c8:d1:21:ad:8c:d5:f1:93:f2:91:96:3b:3c:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: May 17 14:05:13 2024 GMT
Not After : May 18 14:33:13 2024 GMT
Subject: CN=B7BE1F3F0BBDE20DFAA0438814FCF7BEE20EC520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:ac:7b:82:1a:c8:4b:96:1c:5d:b0:51:ab:
15:48:7e:65:4c:cd:74:3c:81:67:13:a3:66:13:da:
2b:37:81:40:ba:75:45:5c:c3:16:37:d4:9e:0d:ba:
11:08:cf:46:31:0d:a5:c2:d0:b6:2c:24:22:08:08:
42:eb:37:6d:ca:b3:b4:95:4c:ad:69:33:4e:01:7c:
44:7f:27:70:f1:09:12:8a:ff:2c:82:d4:5b:38:80:
c1:7c:a2:2f:79:4e:a4:5e:59:56:ee:7d:28:56:a7:
eb:25:37:5e:2b:25:19:56:77:e8:d6:6b:f6:03:bd:
e8:94:52:51:3d:d0:de:27:49:37:61:5f:5c:1d:c7:
e9:c1:4c:58:75:9b:83:2a:50:75:28:3c:c4:03:71:
3e:f0:b6:93:32:38:1b:d6:a5:7e:c3:f9:0b:36:71:
53:22:c1:4a:a8:86:f8:d7:8b:20:73:b0:7c:73:08:
a9:ce:95:8a:99:12:a3:21:55:c2:63:f9:b1:df:57:
49:7f:24:9b:aa:b1:a3:80:56:3b:9c:4a:3f:9d:63:
80:57:14:1a:4b:b7:f9:f6:bd:75:d2:61:93:d4:b0:
c8:20:5e:3b:20:ad:2f:90:04:5f:b2:0d:e2:72:e3:
99:d8:e2:12:c1:ed:9c:57:04:bc:83:e1:47:81:c3:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:1F:3F:0B:BD:E2:0D:FA:A0:43:88:14:FC:F7:BE:E2:0E:C5:20
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:a0:7d:73:4e:20:7b:b0:e0:58:bb:8a:f6:58:df:ce:f2:
59:26:6f:b4:76:00:13:b8:aa:33:34:64:d5:7e:e4:fd:aa:64:
f4:60:7c:33:68:5c:75:bf:e1:72:15:c3:8c:49:94:e2:0e:55:
34:a9:0c:a1:11:e2:a4:c5:a1:a0:44:34:0e:b2:da:48:69:89:
e4:6d:6f:bc:0f:75:9e:20:14:ca:67:bc:18:64:bd:e5:25:1d:
ab:db:79:8b:0d:c9:86:f4:0d:22:43:6b:15:12:31:92:90:5b:
08:45:60:b4:f9:c8:0b:a2:d9:03:e6:4a:ac:56:fb:b3:44:cc:
cc:c2:07:d9:9f:23:5a:10:e3:6b:e5:59:e8:41:6f:1e:53:16:
c5:dc:3e:57:da:bd:7f:23:e1:c4:a7:d6:d3:d7:1b:3b:57:0f:
a1:74:dc:d1:be:ba:8d:31:37:09:18:9b:a8:24:d0:31:b0:50:
06:39:23:a7:c7:0e:17:ac:2b:7c:ae:2c:a1:73:7d:08:aa:e8:
7e:58:8b:e8:88:ba:c1:58:dd:cd:4b:44:1c:46:8a:ac:9e:2f:
7a:f8:7f:6e:bc:ef:a5:cb:4f:cb:9c:fe:0b:3f:26:c4:e8:5e:
34:82:c9:45:35:9c:88:d9:09:e5:37:1b:4c:51:50:db:5b:11:
7f:01:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:36:41 2024 by rpki-client on console-fra.rpki-client.org