Manifest
$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
File: IBfMWA0nPFS6MGTNLNavObgEuIc.mft (raw, json)
Hash identifier: CB8FgdMMEYI6XxA62fSbh7//76nwRlfcdnGFCvo1SPI=
Subject key identifier: 4E:17:74:7A:FF:19:86:BF:7B:BE:78:32:F3:01:5C:37:25:05:7C:29
Authority key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Certificate issuer: /CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Certificate serial: 1551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
Subject info access: rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
Manifest number: 1539
Signing time: Tue 09 Jan 2024 14:19:50 +0000
Manifest this update: Tue 09 Jan 2024 14:19:50 +0000
Manifest next update: Tue 09 Jan 2024 20:19:50 +0000
Files and hashes: 1: AXG3AfXs41I9eJF3s5OA6mFKqUU.roa (hash: QqqUXTPh9+G5IjNwJWS1Skb8sRmwFk1SPF/OjhX+aKA=)
2: DyWZUPnQe8WhShqst8ELY4hCABE.roa (hash: egAvrin2NanTttrTLyijjrBAYT8BymV3HoCO670vYEQ=)
3: IBfMWA0nPFS6MGTNLNavObgEuIc.crl (hash: Ii0Mu4IodY5w7HskTPgpvfhXluBkVcncacO30Yz7xGI=)
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl
rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jan 2024 20:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5457 (0x1551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Validity
Not Before: Jan 9 14:19:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4E17747AFF1986BF7BBE7832F3015C3725057C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:91:68:25:7a:49:a3:44:be:17:c2:df:81:
d6:de:9b:90:97:44:d0:cf:eb:2a:dd:d6:8a:aa:64:
34:62:c1:ee:7f:03:3d:6e:ab:1d:77:3e:bb:47:bc:
47:b2:27:44:f5:24:44:1f:a3:43:bf:9d:1a:1f:98:
65:f2:36:19:82:b0:03:85:6f:6f:81:95:7c:bf:05:
a2:a2:33:6f:25:e8:36:11:64:cd:af:00:01:27:d2:
c2:62:6e:3b:40:de:7a:72:05:fa:16:f8:62:82:ed:
c8:4d:5c:34:c9:77:47:36:03:25:fc:14:ef:1b:81:
98:1e:db:ac:1e:2a:ec:af:3f:6c:48:82:68:11:2d:
c7:a0:11:0a:bb:25:59:6c:e5:af:01:97:f1:9d:34:
42:29:5f:f3:ca:b2:39:b1:54:18:6a:5e:e2:10:e5:
e2:5b:7c:b9:65:c1:3d:23:90:19:da:a8:05:a3:f9:
1c:f4:d2:0a:93:6c:9d:93:f2:55:e1:0c:ce:37:96:
53:e4:c6:ed:f0:17:62:05:2e:1b:a0:21:2f:a8:18:
e6:e8:db:e7:d0:86:43:f3:c3:37:07:19:f5:31:6c:
a8:0b:80:9a:71:66:98:1f:16:30:85:2e:30:ba:d6:
cc:3e:f5:fc:85:46:74:9a:fd:4f:33:64:40:e0:38:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:74:7A:FF:19:86:BF:7B:BE:78:32:F3:01:5C:37:25:05:7C:29
X509v3 Authority Key Identifier:
keyid:20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:d1:19:3e:1f:ed:81:eb:56:42:dc:fa:dc:24:9c:74:21:
b4:30:57:c5:bc:54:8e:79:f6:1b:2a:4d:21:1b:fc:ea:59:52:
d6:3d:83:d5:39:f6:92:55:76:0f:f6:18:32:e5:e6:d8:0c:af:
84:0f:06:68:6d:13:11:cc:b8:59:e2:6f:41:1d:55:71:59:02:
4b:f1:16:f2:7d:aa:c7:73:97:52:27:72:04:5b:ce:a6:0c:1d:
5c:83:79:81:0f:0d:07:9f:93:f4:d0:13:f7:da:43:62:ac:ad:
1e:cf:89:14:6e:35:61:e6:f9:02:be:54:1d:54:ba:31:76:e1:
e4:a3:b8:fd:ad:32:2e:6d:bb:65:09:7a:d3:18:65:8b:bc:e0:
74:3d:a1:c1:bb:e5:06:91:c8:e9:72:12:03:51:30:89:82:db:
f1:48:ec:85:ac:7a:a4:78:7f:53:c2:a6:22:09:6c:df:65:b4:
60:00:02:05:92:cf:87:a9:ef:9d:ad:b4:91:7a:34:ef:25:76:
68:c3:57:83:b7:fd:7c:7f:d0:b1:37:50:18:dd:5b:8e:a1:20:
64:f0:57:32:fb:4e:03:12:49:91:6f:0d:c7:71:5e:2e:1f:1c:
da:bd:b5:9d:b7:dc:df:e7:1d:73:f9:ad:67:56:e8:b7:37:9d:
fa:5f:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:03 2024 by rpki-client on console.sobornost.net