Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
File: UoPLS4EObFkudHmvpCEY91XH-H4.mft (raw, json)
Hash identifier: +C9NCEbJRsZin38dMks35nOovAxlDA2Bo4kT+tqXKRc=
Subject key identifier: 1E:36:54:12:2A:A0:55:1A:C4:1D:EE:35:06:35:D4:8E:A3:E5:88:F8
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Certificate issuer: /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial: 0194BC04E9E7F248F5EE28774D23D7CDF623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
Manifest number: 03C0
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (hash: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=)
2: UoPLS4EObFkudHmvpCEY91XH-H4.crl (hash: pTPtEH+LIhSnPiCYQR197HCKhVsF4npnrjd/GqOQa5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:e7:f2:48:f5:ee:28:77:4d:23:d7:cd:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=1e3654122aa0551ac41dee350635d48ea3e588f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:39:4e:80:57:d9:d1:65:af:da:28:e6:15:
a5:7a:d2:c6:e7:cb:10:d5:4d:4a:8d:72:68:10:7c:
8b:c8:8c:c6:7c:2c:bd:71:06:f1:33:3e:6c:3c:24:
6a:41:74:5b:5e:ab:38:19:48:10:ae:42:0b:c7:64:
af:51:bd:f7:a1:a3:12:2f:dc:e4:b2:b1:82:9a:7f:
e7:94:3d:f2:b5:4f:6c:30:82:12:82:99:75:22:4c:
0a:42:bb:11:ee:33:4d:a0:62:15:ad:8f:fa:02:1e:
4c:48:ef:ae:8f:25:2f:e4:33:73:ae:45:a8:15:38:
6c:b0:60:74:e6:63:33:1f:a8:c0:23:3c:dc:c8:b5:
33:e5:33:9a:64:24:1b:73:91:68:d5:83:20:ab:4c:
d2:f4:30:06:7f:20:77:be:c5:2e:ae:b4:62:88:fd:
37:1b:ef:ae:65:99:ee:88:a0:f5:46:0a:24:b9:52:
c8:86:f9:9d:34:40:5f:32:b5:a6:4c:2e:9a:a1:f6:
c1:b3:fd:f5:35:fd:fe:92:13:60:cc:a4:f9:32:07:
d1:7b:dc:e7:89:e2:20:e1:08:32:56:ed:54:49:b6:
2b:c9:89:57:68:e2:1f:e6:fe:db:c5:29:a9:fe:93:
ab:bb:ee:43:0b:95:f2:cf:ae:45:d2:5e:8f:a8:5d:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:54:12:2A:A0:55:1A:C4:1D:EE:35:06:35:D4:8E:A3:E5:88:F8
X509v3 Authority Key Identifier:
keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:ae:78:d1:c5:22:fc:45:52:2b:2a:b3:d2:49:5e:b0:54:
8c:5e:e2:63:55:8c:d6:65:df:6b:df:d2:50:23:6b:d7:84:41:
23:bc:91:4e:ec:bc:8d:b0:52:34:f0:b3:7b:f8:63:48:f9:40:
9c:bd:a6:41:a3:4b:71:ff:29:46:65:78:95:4e:81:25:7c:86:
08:a4:c3:c4:c2:64:ea:3b:62:11:2e:6d:f5:21:b4:c0:58:c2:
d3:64:a8:8e:4d:9b:5a:1b:e9:0c:e4:be:67:17:15:a4:77:ab:
2b:bc:82:4e:e0:dc:cf:19:0c:4b:6e:41:e2:d6:34:35:eb:d9:
1c:d2:ee:86:90:4c:1b:75:a9:c4:6d:00:b8:78:5b:35:86:ea:
83:68:d5:e7:b3:45:a5:2f:3f:f5:21:fa:eb:f3:39:c4:58:2a:
44:88:fa:fc:9a:01:a9:81:34:f2:61:6f:0e:13:be:01:c8:32:
3e:51:f9:33:ee:e6:f2:4a:8c:6c:2f:60:26:3b:b2:26:f8:95:
23:54:ab:41:22:8e:42:06:14:df:f8:8a:31:ae:36:3f:51:9b:
21:6d:3a:4a:46:53:e2:d4:ab:63:df:6c:9f:08:c2:de:64:24:
10:cb:5d:32:df:2d:96:fa:91:19:93:4d:06:b3:02:d9:f1:53:
27:04:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:47 2025 by rpki-client