Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: ZVhVN8E6tAvewKTaiS3DdyGY0SPXDy0ij0h03I7zByg=
Subject key identifier: 1F:AE:76:58:48:81:29:72:DC:14:45:42:14:E1:6A:B7:A1:6D:71:D2
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 0194BD855EB4D1082254220C21C91C8C3EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 04B3
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: GZYKGwQYvLER74K3t+GeiOvBK+yxVoWQJgN81kKCHlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:b4:d1:08:22:54:22:0c:21:c9:1c:8c:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=1fae765848812972dc14454214e16ab7a16d71d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:e2:a7:d2:44:e0:b2:c2:f7:3c:24:6e:05:
72:10:54:de:47:9f:f4:77:0a:68:66:9b:95:97:24:
94:bb:2a:22:6e:b1:74:f6:9e:e9:bc:03:65:ca:79:
92:57:eb:16:17:61:55:40:08:88:35:b6:77:5a:da:
6d:63:b5:7a:9c:e9:77:16:4a:f0:d1:5c:42:98:7f:
ea:01:19:0d:42:67:5d:a9:44:41:b9:50:7f:1f:17:
69:95:0b:86:3c:68:96:7b:e6:52:bd:35:cc:b4:a7:
89:35:c6:f0:82:81:85:bf:c3:45:03:88:37:99:75:
02:15:67:07:2a:cb:b1:40:93:f6:3c:06:2d:2d:49:
e8:34:1d:74:5b:6f:8b:58:b6:e9:27:91:dd:8c:ce:
fa:0f:77:5b:4a:e9:0b:3d:4d:61:44:30:02:5b:a5:
84:ef:bf:91:cc:22:e5:47:61:7e:fe:70:12:17:13:
ca:f0:b7:5e:d3:13:a7:35:1b:52:bb:5a:66:67:39:
58:24:7b:0f:26:88:c8:d7:87:ff:ce:78:7a:e3:61:
77:ca:51:64:6a:1b:fb:67:5a:2c:6a:68:dd:a5:f3:
58:e1:cf:02:0b:89:ab:f8:ff:e9:4d:1c:f0:9b:ce:
d3:65:a3:ef:4b:d2:80:fd:2c:59:46:65:38:79:ab:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:76:58:48:81:29:72:DC:14:45:42:14:E1:6A:B7:A1:6D:71:D2
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:68:30:bb:a5:0a:8c:7e:3f:e5:64:41:a0:91:14:56:7e:c2:
b9:24:9c:7f:ed:1b:f8:2a:7c:20:3e:d0:79:28:24:5c:a1:3e:
1d:02:da:0e:b7:b8:f9:c0:f4:12:90:1a:a4:50:ad:54:ca:33:
40:21:60:41:a8:9d:c4:b4:65:f7:6b:68:c4:6c:eb:d1:d5:5f:
7a:b9:2f:c1:2a:bf:67:d7:1a:77:59:9c:f2:82:fd:76:d0:e3:
a5:a0:23:54:2c:44:08:ad:cd:d8:d5:c6:0b:b2:f7:1b:ba:00:
a3:10:4e:d2:02:87:48:73:ff:8b:c2:e8:9b:11:bb:a0:6c:da:
52:55:a6:7f:43:c0:7c:e2:15:2e:1c:14:06:c1:3d:27:77:e8:
32:fc:38:14:ab:52:f0:df:c4:03:8d:3c:93:d3:8c:22:37:72:
e8:c3:c8:5b:b9:08:57:b5:64:d2:1f:2f:72:b5:67:46:56:f3:
1b:98:47:9b:56:d6:c3:e4:71:fd:6d:11:15:f4:98:e1:a3:bc:
3f:a0:ea:bb:82:db:0b:9d:d0:3b:42:ad:28:67:ea:80:c6:51:
c9:52:01:6a:48:5a:b5:66:f7:52:59:d4:02:4a:e5:b6:8e:d7:
fb:30:fd:e1:2b:f5:e4:68:66:e9:c0:ed:be:42:ce:26:90:59:
7c:58:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:12 2025 by rpki-client