Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: b4/ciNbisFgR5diwby+qeAccK73qCuBd4FPnJZTpLf4=
Subject key identifier: 08:8A:C3:28:55:48:9B:0A:66:F8:7C:82:C2:35:B4:DC:89:68:79:0F
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 0194BC04F49D94856EEB407641AABAAEDF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 11E9
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: UT9PvHzUY9DCvb1Mc7ROoJomkr3kqj6p1jJl/TWNXsI=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f4:9d:94:85:6e:eb:40:76:41:aa:ba:ae:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=088ac32855489b0a66f87c82c235b4dc8968790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:f6:cf:5c:d9:52:40:d4:c5:14:2e:49:5f:
e5:09:5a:a1:41:74:3f:2c:16:5b:f7:8a:51:2d:36:
81:b1:f1:45:f8:98:42:2b:4e:e9:2b:ae:b5:85:41:
8a:e7:d6:78:30:29:88:d2:59:3c:99:74:0d:bf:a0:
7e:f0:e7:0c:40:3a:05:77:e3:07:3a:2d:7c:cc:b5:
1d:78:bb:5f:e8:60:41:a2:7d:95:60:da:a9:aa:bc:
82:ac:00:a5:93:bf:b6:b2:56:eb:e9:f7:17:17:8e:
5f:d5:92:37:be:03:1f:14:60:68:76:53:3e:70:8b:
2a:05:b9:67:c9:10:40:ba:3f:0d:0e:53:df:9a:ff:
ef:ac:c2:16:1f:cd:7f:37:cc:7e:78:e9:6a:10:4a:
4f:74:bb:b3:ee:1c:4b:f7:06:24:f4:82:78:06:d2:
cb:d7:82:b2:d9:27:62:71:90:6b:2e:e6:ef:44:25:
84:05:14:8f:83:4e:1f:8a:4d:21:32:42:48:60:b1:
cd:40:3f:bd:88:7c:16:ad:f1:5c:f1:9f:1a:d9:5e:
fb:9a:5a:ad:96:d3:77:b9:64:1d:67:da:09:3f:41:
2a:55:e5:15:ea:05:1b:04:c5:86:1f:a8:2b:05:0b:
e6:09:44:74:63:d8:2b:67:d7:f0:4b:fc:38:98:9b:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:C3:28:55:48:9B:0A:66:F8:7C:82:C2:35:B4:DC:89:68:79:0F
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5a:7c:6b:38:4b:b2:ce:99:7d:15:0d:55:9d:b3:c0:35:a6:
a3:90:53:c1:94:fa:e9:c7:d0:a3:a7:64:e6:7c:7c:a2:da:9a:
5b:34:0d:05:58:45:c4:29:6f:8f:1c:28:84:52:2c:23:50:e4:
d2:db:ab:ce:2a:c4:0e:a5:13:09:6b:ab:48:00:2a:88:8a:bb:
16:58:55:3e:09:24:27:07:95:a1:4a:91:d1:b1:de:72:20:92:
10:da:12:c3:a9:cb:14:1b:db:a8:d5:f8:99:3b:f2:76:e1:b1:
a2:91:cf:54:b5:34:3f:1f:98:46:ac:cb:d7:c2:79:74:88:e0:
6f:3d:ae:9c:e0:bb:1c:ca:f6:9e:a3:6d:34:4d:d5:c3:28:08:
8e:98:8a:c3:c7:1c:a6:c9:f7:a3:7e:7d:df:5b:15:b1:db:c7:
cd:fe:60:c2:3c:e4:ac:4b:de:f7:3e:02:6a:73:28:30:23:bf:
49:f6:0d:5c:c8:c4:8b:46:6b:40:95:54:3c:f7:f2:1f:08:42:
75:5c:0a:da:79:44:f0:33:5a:9b:7a:e4:ad:63:9e:88:eb:fe:
a1:e9:43:9e:92:09:09:1f:e9:3a:f6:1e:6b:3c:0b:d7:7b:f2:
f5:b2:46:02:15:97:42:f4:71:94:78:84:03:db:27:d6:44:e2:
61:5f:d2:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPSdlIVu60B2Qaq6rt8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EygwODhhYzMyODU1NDg5YjBhNjZmODdjODJjMjM1YjRkYzg5Njg3OTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswL2z1zZUkDUxRQuSV/lCVqhQXQ/
LBZb94pRLTaBsfFF+JhCK07pK661hUGK59Z4MCmI0lk8mXQNv6B+8OcMQDoFd+MH
Oi18zLUdeLtf6GBBon2VYNqpqryCrAClk7+2slbr6fcXF45f1ZI3vgMfFGBodlM+
cIsqBblnyRBAuj8NDlPfmv/vrMIWH81/N8x+eOlqEEpPdLuz7hxL9wYk9IJ4BtLL
14Ky2SdicZBrLubvRCWEBRSPg04fik0hMkJIYLHNQD+9iHwWrfFc8Z8a2V77mlqt
ltN3uWQdZ9oJP0EqVeUV6gUbBMWGH6grBQvmCUR0Y9grZ9fwS/w4mJvCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiKwyhVSJsKZvh8gsI1tNyJaHkPMB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlp8azhL
ss6ZfRUNVZ2zwDWmo5BTwZT66cfQo6dk5nx8otqaWzQNBVhFxClvjxwohFIsI1Dk
0turzirEDqUTCWurSAAqiIq7FlhVPgkkJweVoUqR0bHeciCSENoSw6nLFBvbqNX4
mTvyduGxopHPVLU0Px+YRqzL18J5dIjgbz2unOC7HMr2nqNtNE3VwygIjpiKw8cc
psn3o35931sVsdvHzf5gwjzkrEve9z4CanMoMCO/SfYNXMjEi0ZrQJVUPPfyHwhC
dVwK2nlE8DNam3rkrWOeiOv+oelDnpIJCR/pOvYeazwL13vy9bJGAhWXQvRxlHiE
A9sn1kTiYV/SVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:47 2025 by rpki-client