Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
File: hFMo2_ilOEKLLl4BiFhQFctYu0o.mft (raw, json)
Hash identifier: s170ET+p43pHjki1V/d7nQXaj9+3NzdbFQ8Ij0mWovg=
Subject key identifier: 79:21:D0:29:00:F2:DB:A7:0E:5A:6F:E7:30:8D:D7:00:BB:AB:66:27
Authority key identifier: 84:53:28:DB:F8:A5:38:42:8B:2E:5E:01:88:58:50:15:CB:58:BB:4A
Certificate issuer: /CN=845328dbf8a538428b2e5e0188585015cb58bb4a
Certificate serial: 019095A8FD98F0A508386A3C5678B12048FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
Manifest number: 0308
Signing time: Tue 09 Jul 2024 04:03:18 +0000
Manifest this update: Tue 09 Jul 2024 04:03:18 +0000
Manifest next update: Wed 10 Jul 2024 04:03:18 +0000
Files and hashes: 1: hFMo2_ilOEKLLl4BiFhQFctYu0o.crl (hash: HRId7OXRHHwgwcJACx9P09fZCWaxoLDWPF/U9xk0hMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jul 2024 04:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:a8:fd:98:f0:a5:08:38:6a:3c:56:78:b1:20:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845328dbf8a538428b2e5e0188585015cb58bb4a
Validity
Not Before: Jul 9 04:03:18 2024 GMT
Not After : Jul 10 04:03:18 2024 GMT
Subject: CN=7921d02900f2dba70e5a6fe7308dd700bbab6627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:ca:4a:de:87:f8:2b:a4:97:f5:93:b9:79:
8f:25:19:63:46:ea:30:01:a2:ae:32:2f:c8:98:30:
b9:07:74:45:aa:e3:5f:86:47:17:ba:41:d6:6a:cf:
fa:10:a1:4a:d7:07:73:08:ae:d0:cf:41:ca:ed:14:
d6:2a:47:be:fc:a7:8a:aa:28:af:d4:32:2e:bd:e3:
88:ca:a0:d7:7f:83:43:fa:c8:39:5f:69:23:af:e0:
48:7f:60:37:53:17:08:9b:0e:ac:77:55:b4:81:93:
9f:c3:6f:7e:a5:79:97:be:f5:8b:bc:e7:72:f4:66:
b9:5d:dc:91:98:b3:09:ae:b2:d2:f3:1a:90:41:c2:
c5:c0:86:61:0d:8f:ef:03:d0:32:a7:36:84:10:5f:
a1:68:71:fd:83:f5:c0:e7:b1:89:1a:66:4c:12:6e:
6c:9f:fa:cf:e2:f5:3c:fa:80:90:29:bf:e1:19:5a:
b4:a0:d8:ab:cd:d3:da:d5:f9:d6:cc:fc:97:42:ac:
01:2a:b5:17:07:d0:43:f3:61:2a:ce:30:bb:40:a8:
81:80:d2:8d:ee:fb:c3:97:ec:28:0c:73:c7:4c:2f:
19:36:93:f9:f3:eb:d4:e0:62:32:5f:8f:b3:b2:d5:
c5:96:8a:6c:41:b2:20:c8:42:78:9f:ac:3e:95:06:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:D0:29:00:F2:DB:A7:0E:5A:6F:E7:30:8D:D7:00:BB:AB:66:27
X509v3 Authority Key Identifier:
keyid:84:53:28:DB:F8:A5:38:42:8B:2E:5E:01:88:58:50:15:CB:58:BB:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFMo2_ilOEKLLl4BiFhQFctYu0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c7280a-715c-4278-a5b8-99cbfb429aef/1/hFMo2_ilOEKLLl4BiFhQFctYu0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e1:17:cc:a0:80:1d:92:0a:4d:2c:0b:29:64:a6:f7:96:e6:
63:4c:8d:fe:d3:01:7f:03:37:54:f0:4c:d7:77:6a:da:6d:ff:
a3:53:11:88:fb:4b:a5:62:ac:87:f2:4e:94:90:cb:22:f8:29:
0b:aa:06:03:95:81:ec:3d:b2:c2:d1:b0:c6:8f:6b:a0:41:c2:
3d:e1:08:93:55:b5:27:ee:e8:41:a1:75:f8:63:bd:ba:f8:3d:
b7:09:39:5f:77:d4:d0:09:29:49:10:5c:70:6b:e6:52:cf:e8:
80:e4:2c:b2:d0:ce:35:d0:7a:11:cc:3d:57:ff:f5:7b:a0:3c:
08:0a:f4:b1:fe:34:ac:e0:12:df:cb:66:80:cf:0d:ef:9d:60:
af:84:4d:88:6c:fd:24:07:bc:15:c0:4a:52:ce:11:5d:e9:35:
52:19:5d:4e:0a:0a:bd:18:5e:f0:c8:e5:9b:aa:c2:b1:46:4e:
48:9f:ac:a5:83:2d:58:80:fb:30:0f:42:e6:32:5f:0f:13:1d:
b7:74:6c:a9:70:15:ed:cd:4e:04:df:e1:7c:bc:cb:71:22:76:
56:e9:b7:35:b9:14:00:f8:fe:5c:2f:9f:c1:75:8e:8c:7d:48:
9f:9b:b2:61:29:ec:85:34:35:49:eb:38:f8:be:fc:29:f8:3f:
59:5b:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:35:03 2024 by rpki-client on console.sobornost.net