Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: ePRyDGLStsWzleWEx4ypSlw3zjhdFQbL2gjlHcANki4=
Subject key identifier: 56:25:B2:43:9D:40:0C:6F:73:0E:92:27:11:DB:13:E2:F2:52:65:8A
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 0194BD85BD2B8F6382BDDAED9FAC1A4E1298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: MxEwZcpXwCuwxPupwGEgmGFKM79BBNAPP0mV9n5YTfc=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bd:2b:8f:63:82:bd:da:ed:9f:ac:1a:4e:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=5625b2439d400c6f730e922711db13e2f252658a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:bf:2f:fa:55:6c:71:e8:e3:dc:c4:65:51:
b1:ec:93:42:f3:ad:6a:62:2a:43:ad:2d:57:d4:85:
bb:58:36:20:19:a0:79:87:f3:97:08:fc:93:c8:63:
8c:a1:3f:81:fd:38:bb:92:19:93:1a:ba:6e:f6:33:
16:85:fa:e4:d8:b3:88:66:17:0a:2c:a7:a4:6e:a9:
d1:2d:42:9b:72:05:b1:fe:fc:69:f2:1f:1c:4f:bc:
bc:55:98:57:76:6d:ea:9c:f4:3f:5e:c3:35:79:17:
a5:c4:ad:4a:cf:11:2f:c8:b6:de:1b:34:d7:9b:6c:
c0:59:84:e3:9e:aa:a1:33:ed:a2:ac:2c:18:87:da:
10:14:cf:5d:7a:60:77:11:a8:76:bb:b7:8d:3a:95:
62:b1:01:b4:7f:28:50:b9:70:e8:0c:37:a4:ac:1b:
3f:f5:5c:2b:8c:a3:a2:51:99:ef:b0:58:32:3f:dd:
1b:2a:ab:15:24:5d:e7:c5:7f:85:11:b5:7b:02:23:
55:ef:60:8e:63:bc:7f:ca:89:8c:fc:75:ed:d8:91:
57:41:cf:56:bd:37:4f:1f:9d:b5:e0:6e:bc:74:ff:
34:4c:e7:9a:93:0a:84:a8:06:bc:b4:bc:b3:1a:24:
0d:98:52:90:63:f1:51:20:33:e2:80:52:3f:f4:2e:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:B2:43:9D:40:0C:6F:73:0E:92:27:11:DB:13:E2:F2:52:65:8A
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:3f:56:91:cd:53:6f:8e:9c:e3:e6:16:08:a1:a9:0f:5c:
70:69:98:85:8b:ee:a5:d3:40:e8:5e:ef:6b:8e:17:d3:c0:76:
94:db:20:27:8c:de:c2:cf:15:f0:aa:5d:55:70:8a:50:64:22:
f0:8f:bc:f5:fb:63:ec:25:cf:b4:33:4b:b5:30:0f:37:da:64:
36:cb:85:a5:83:a4:79:04:82:0f:e9:60:0f:ec:f8:a4:27:8b:
da:39:c9:fe:d8:cd:16:d6:28:8a:06:2a:c7:b5:04:77:19:da:
bd:3e:c0:d8:8e:48:22:ac:48:64:99:51:c6:46:7a:58:f0:5e:
d2:54:3b:c9:86:1b:27:0d:c7:4c:35:23:41:93:c7:2b:cd:ce:
dd:39:83:1f:8f:c4:15:e9:b8:95:0e:72:47:45:b1:a2:82:c6:
02:a8:70:92:f3:ea:c9:23:0b:f8:f8:d6:f0:09:c4:90:63:c3:
b0:a9:bc:97:0c:5a:14:5b:b5:d8:77:f2:32:cd:0e:81:04:3e:
73:f4:98:f6:5a:4c:e1:1f:2a:3f:c6:2a:64:92:38:58:46:c2:
87:7e:aa:05:82:67:01:94:ba:34:00:8b:8d:63:fe:fe:bd:57:
b0:86:7c:90:e6:cf:03:cb:99:fa:6d:c6:25:37:df:d1:cd:93:
c9:d0:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:39 2025 by rpki-client