Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: 22Lwqq7x7ixMf05ndYHQisjcaDfDXpatk5bnASvdGQY=
Subject key identifier: DA:33:F6:4C:A7:EF:4A:19:7E:56:4F:CD:09:26:5D:7D:80:A9:C8:CF
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01935162A33A1E012129258EA10E848942E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 01:00:38 +0000
Manifest this update: Fri 22 Nov 2024 01:00:38 +0000
Manifest next update: Sat 23 Nov 2024 01:00:38 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: M5fZfQIZF+0SyQ0E1I93m8GVdmXhc4+eX/pQjBmgOrM=)
2: 6i-C8SR9qj7qt_wE_RP6sdQyUPc.roa (hash: jzxyzDRysu5EmBVMDSl9X3yotnuDuYD+8LTisxQIl/M=)
3: cNL39TTohO1gDo439pHRmpo-7LA.roa (hash: tBez5PjjsvkxwdfEdUBlqdtB2m1EFNsWezLblmDCynU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:a3:3a:1e:01:21:29:25:8e:a1:0e:84:89:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Nov 22 01:00:38 2024 GMT
Not After : Nov 23 01:00:38 2024 GMT
Subject: CN=da33f64ca7ef4a197e564fcd09265d7d80a9c8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:ce:2d:99:cd:7c:2e:50:41:33:62:1e:13:
f9:76:22:1e:d8:f5:41:39:b4:02:4c:e7:3b:c6:1d:
28:95:9d:ff:3a:a0:50:bf:04:6a:40:67:b5:07:ac:
bb:5e:94:a1:f9:41:1b:7d:7c:fb:74:de:2f:cb:6a:
4a:c4:e7:95:40:da:77:43:a5:3f:c5:12:ea:8b:4f:
6f:73:6d:23:8d:ec:a7:55:f1:21:67:3b:55:f7:83:
11:03:ec:39:fe:88:dc:b3:3d:cc:22:37:29:72:f8:
b3:38:04:26:6d:b6:1b:b6:67:22:fd:32:34:b7:2d:
91:ed:d8:6a:c8:16:34:14:f3:20:bd:90:d9:f6:73:
82:60:84:28:93:e2:2b:48:bf:c9:7a:46:67:40:23:
13:bf:a7:83:16:3b:c6:e6:3b:71:95:70:9c:df:67:
d4:1b:4f:57:32:c4:3a:46:6b:ed:1b:82:14:8b:d9:
7f:ca:cc:e7:71:06:b8:8f:b5:cd:b6:49:53:72:98:
53:12:d8:08:52:b7:78:8d:c5:e3:9b:a9:0a:16:85:
96:6d:fe:d2:0d:92:35:d5:8f:4b:df:32:72:24:b1:
9c:92:79:1d:7b:1c:60:37:3e:08:e8:a8:c9:d0:33:
23:f7:59:ed:2d:bc:1a:b1:ac:30:a3:4c:fa:59:59:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:33:F6:4C:A7:EF:4A:19:7E:56:4F:CD:09:26:5D:7D:80:A9:C8:CF
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:22:e6:46:0a:c9:ec:64:28:62:91:c2:ab:44:74:87:81:
04:a8:5a:89:1c:b6:6e:f0:ad:45:35:f0:25:b3:d2:3e:6d:c6:
4f:a0:cd:5b:50:08:ba:03:53:15:f9:7b:e2:fd:65:f6:af:ba:
a4:c1:ad:29:73:1a:82:1c:0f:24:ee:3b:79:ca:dd:24:e2:f6:
9e:1c:3b:ee:0a:28:92:3e:b7:a6:a8:86:bc:19:c9:c7:db:93:
52:2c:2e:3b:db:42:80:dd:f0:32:7c:6b:78:d8:be:c8:dc:e0:
78:be:37:94:44:63:f1:c6:7c:f4:62:c7:94:97:be:4b:78:59:
01:32:cf:1c:d7:c2:01:0b:3a:9e:42:b9:3d:97:c6:39:7b:ac:
39:76:64:40:1a:46:a9:94:ee:a6:3f:4a:fd:f8:b2:e4:72:20:
ea:99:2e:c8:d0:30:0c:10:68:9e:43:89:e7:b7:c5:37:8b:f2:
f8:1f:b0:98:ec:61:fc:50:74:4a:74:3e:57:5f:4a:00:7b:11:
3c:ce:68:90:7e:eb:db:b6:b7:7a:91:19:bd:fb:2a:e7:79:01:
af:44:39:c8:1a:d5:75:c1:f9:68:f4:c0:82:c3:fe:82:7f:36:
77:20:85:e8:5e:32:cd:fb:f6:aa:9e:25:a0:a4:f8:47:4f:a6:
c6:80:e6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYqM6HgEhKSWOoQ6EiULhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzAwYjk2ZTlhN2EwZjlkYjg5YmY1ZTE4MTE1YjEyYTNl
ZjE2OTIwHhcNMjQxMTIyMDEwMDM4WhcNMjQxMTIzMDEwMDM4WjAzMTEwLwYDVQQD
EyhkYTMzZjY0Y2E3ZWY0YTE5N2U1NjRmY2QwOTI2NWQ3ZDgwYTljOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+zOLZnNfC5QQTNiHhP5diIe2PVB
ObQCTOc7xh0olZ3/OqBQvwRqQGe1B6y7XpSh+UEbfXz7dN4vy2pKxOeVQNp3Q6U/
xRLqi09vc20jjeynVfEhZztV94MRA+w5/ojcsz3MIjcpcvizOAQmbbYbtmci/TI0
ty2R7dhqyBY0FPMgvZDZ9nOCYIQok+IrSL/JekZnQCMTv6eDFjvG5jtxlXCc32fU
G09XMsQ6RmvtG4IUi9l/yszncQa4j7XNtklTcphTEtgIUrd4jcXjm6kKFoWWbf7S
DZI11Y9L3zJyJLGcknkdexxgNz4I6KjJ0DMj91ntLbwasawwo0z6WVngawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoz9kyn70oZflZPzQkmXX2AqcjPMB8GA1UdIwQY
MBaAFNxwC5bpp6D524m/XhgRWxKj7xaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4Yzgt
NTI1MjMwZTIwNjgxLzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zY2VkZmUtMDI2Yy00ZDc4LWI4YzgtNTI1MjMwZTIwNjgx
LzEvM0hBTGx1bW5vUG5iaWI5ZUdCRmJFcVB2RnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+8i5kYK
yexkKGKRwqtEdIeBBKhaiRy2bvCtRTXwJbPSPm3GT6DNW1AIugNTFfl74v1l9q+6
pMGtKXMaghwPJO47ecrdJOL2nhw77gookj63pqiGvBnJx9uTUiwuO9tCgN3wMnxr
eNi+yNzgeL43lERj8cZ89GLHlJe+S3hZATLPHNfCAQs6nkK5PZfGOXusOXZkQBpG
qZTupj9K/fiy5HIg6pkuyNAwDBBonkOJ57fFN4vy+B+wmOxh/FB0SnQ+V19KAHsR
PM5okH7r27a3epEZvfsq53kBr0Q5yBrVdcH5aPTAgsP+gn82dyCF6F4yzfv2qp4l
oKT4R0+mxoDmlw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:59 2024 by rpki-client on console-fra.rpki-client.org