Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
File: PuzUyqmjpXcV49XWa8zXGFr-QNo.mft (raw, json)
Hash identifier: 4d8RbVFGFx4/oLazhPJGrST7/tJ00yZRl+PFdskURco=
Subject key identifier: D4:44:AA:ED:B5:BE:99:8C:53:C9:20:44:11:A3:0A:D4:60:F6:D3:81
Authority key identifier: 3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA
Certificate issuer: /CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
Certificate serial: 0194BBCF015A128BC64C4BDEBD98F506B57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: GTSqn8ohuN-MHhN18mr9Itlt7ao.roa (hash: lFLyLMK3dWhD600oT7fgmI5ccuGsQ2tgFOCCKMH2dCM=)
2: PuzUyqmjpXcV49XWa8zXGFr-QNo.crl (hash: /A2wjklo4ZswpkVjkZQZqor3+gcs6ofAQWJ4DBaKvDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:5a:12:8b:c6:4c:4b:de:bd:98:f5:06:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=d444aaedb5be998c53c9204411a30ad460f6d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:d1:4e:20:57:ca:d7:48:93:37:c4:88:10:
fa:02:9a:00:9b:a6:aa:f8:79:b0:8f:2f:79:c7:9f:
af:54:66:d8:54:d6:28:5c:b5:ad:95:f7:b1:c7:77:
e3:9d:62:0c:20:6f:fd:87:5d:b0:a3:20:e1:21:1d:
d0:de:72:9f:c1:87:dc:a3:14:42:a9:04:03:90:6e:
d6:52:a1:a1:f7:52:d9:69:05:d9:88:aa:1f:0a:b4:
80:1a:a4:6d:a2:c8:39:98:b6:df:68:7a:63:35:f4:
b8:ed:43:23:ca:43:5a:cd:a4:4d:33:66:93:0c:0d:
3d:ac:7d:7b:6c:e9:a7:43:7c:67:2c:d9:48:f5:3b:
09:91:22:ed:30:c2:07:23:a5:9c:98:f4:d8:2e:07:
f0:16:1b:dc:a5:12:c8:3e:01:cf:f2:f9:01:05:45:
cd:97:d1:72:c7:99:39:b5:30:9f:64:fe:54:4d:c0:
aa:bb:78:92:e5:dc:11:e3:33:d9:03:2b:dc:db:37:
d1:b9:b2:9c:b7:6a:97:af:d0:f1:68:68:04:5d:88:
ca:38:bc:9e:3c:dc:fa:14:e9:eb:16:32:77:62:38:
49:ae:30:4c:b5:07:97:9f:12:8f:96:94:42:81:88:
f1:ed:7d:e5:6e:3f:1b:10:56:ba:28:79:04:9f:ae:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:AA:ED:B5:BE:99:8C:53:C9:20:44:11:A3:0A:D4:60:F6:D3:81
X509v3 Authority Key Identifier:
keyid:3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:02:c2:40:23:7c:8d:57:cf:83:8b:12:29:0f:a0:d0:96:80:
c9:b4:5f:c7:f8:e1:a3:f7:1d:0d:79:77:ed:96:50:4a:7f:12:
6c:bc:b3:41:b7:8d:6f:89:26:85:4a:40:80:5b:4c:d5:ca:7c:
d2:8d:d6:36:9b:8e:70:a7:28:72:a2:3e:a7:21:e5:d0:6e:61:
ae:61:5f:d7:3e:c9:79:39:cd:56:bd:05:80:ba:ab:c8:70:11:
43:7f:82:dc:bf:19:b9:35:36:4e:03:6e:15:e3:78:66:82:79:
39:44:f2:f2:68:3f:d8:d1:39:a2:98:cd:1b:ec:66:8b:20:c1:
bd:a6:2d:ca:c8:50:54:36:a5:b1:57:02:fc:88:22:20:6d:ee:
28:78:4a:1f:7e:3a:f4:41:8c:92:89:18:58:06:9c:a9:c2:0a:
e3:1e:84:50:1c:c3:6d:b4:d3:d7:93:7f:49:d1:52:78:8e:8a:
ce:c7:5d:73:99:72:f5:6f:78:5b:cb:d7:f0:aa:5c:a3:ee:3e:
d6:8f:a2:cf:64:b3:85:f7:79:3b:49:99:49:6f:11:9c:d1:76:
4b:bc:f1:30:6c:3f:80:95:69:e3:57:a4:38:44:a9:0e:cf:7e:
41:4e:4f:4b:ab:50:59:eb:e7:a6:49:bc:7a:cf:a2:c6:6d:ea:
c4:02:df:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwFaEovGTEvevZj1BrV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZWNkNGNhYTlhM2E1NzcxNWUzZDVkNjZiY2NkNzE4NWFm
ZTQwZGEwHhcNMjUwMTMxMTAwMTMzWhcNMjUwMjAxMTAwMTMzWjAzMTEwLwYDVQQD
EyhkNDQ0YWFlZGI1YmU5OThjNTNjOTIwNDQxMWEzMGFkNDYwZjZkMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrrRTiBXytdIkzfEiBD6ApoAm6aq
+Hmwjy95x5+vVGbYVNYoXLWtlfexx3fjnWIMIG/9h12woyDhIR3Q3nKfwYfcoxRC
qQQDkG7WUqGh91LZaQXZiKofCrSAGqRtosg5mLbfaHpjNfS47UMjykNazaRNM2aT
DA09rH17bOmnQ3xnLNlI9TsJkSLtMMIHI6WcmPTYLgfwFhvcpRLIPgHP8vkBBUXN
l9Fyx5k5tTCfZP5UTcCqu3iS5dwR4zPZAyvc2zfRubKct2qXr9DxaGgEXYjKOLye
PNz6FOnrFjJ3YjhJrjBMtQeXnxKPlpRCgYjx7X3lbj8bEFa6KHkEn67QSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNREqu21vpmMU8kgRBGjCtRg9tOBMB8GA1UdIwQY
MBaAFD7s1Mqpo6V3FePV1mvM1xha/kDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNjQ1YjItYWYyZS00YzBkLTk4MTIt
NjllZWM1YjRiNTA1LzEvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNjQ1YjItYWYyZS00YzBkLTk4MTItNjllZWM1YjRiNTA1
LzEvUHV6VXlxbWpwWGNWNDlYV2E4elhHRnItUU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgLCQCN8
jVfPg4sSKQ+g0JaAybRfx/jho/cdDXl37ZZQSn8SbLyzQbeNb4kmhUpAgFtM1cp8
0o3WNpuOcKcocqI+pyHl0G5hrmFf1z7JeTnNVr0FgLqryHARQ3+C3L8ZuTU2TgNu
FeN4ZoJ5OUTy8mg/2NE5opjNG+xmiyDBvaYtyshQVDalsVcC/IgiIG3uKHhKH346
9EGMkokYWAacqcIK4x6EUBzDbbTT15N/SdFSeI6Kzsddc5ly9W94W8vX8Kpco+4+
1o+iz2Szhfd5O0mZSW8RnNF2S7zxMGw/gJVp41ekOESpDs9+QU5PS6tQWevnpkm8
es+ixm3qxALfzw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:41 2025 by rpki-client