Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
File: suECSE9zlyeGzMLfHEfCaCuLhco.mft (raw, json)
Hash identifier: pyOuoQJN4/LNNc9YbZCOz//N+6OrPPjA+1YNy1rippI=
Subject key identifier: B1:55:49:6E:53:FE:87:98:1C:BA:8E:72:0A:9B:55:F2:34:1F:5F:B6
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 0195E00FA3B79BD6CB29212F894B92F3DF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
Manifest number: 07B3
Signing time: Sat 29 Mar 2025 04:01:16 +0000
Manifest this update: Sat 29 Mar 2025 04:01:16 +0000
Manifest next update: Sun 30 Mar 2025 04:01:16 +0000
Files and hashes: 1: 1bAxGY5qO4xV54QsH6dH5YqwKes.roa (hash: E42uV3NJLrPIE9xeD5wLXJwDkdw8IVRhghW/M8SKmks=)
2: suECSE9zlyeGzMLfHEfCaCuLhco.crl (hash: k2JcBTAsrWZEoa5AIA8pAPlhIdgOILZo1J1u0QAqs9U=)
3: uMWx1DHDT7wOBd8ZkggNNPo73BU.roa (hash: br4w7Xpzo64W9mICZqFCzkiLrhiOHGcsEZ7bOFikDmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:a3:b7:9b:d6:cb:29:21:2f:89:4b:92:f3:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: Mar 29 04:01:16 2025 GMT
Not After : Mar 30 04:01:16 2025 GMT
Subject: CN=b155496e53fe87981cba8e720a9b55f2341f5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:63:91:71:4f:67:6d:1f:d6:02:65:11:91:
74:0f:20:bd:71:48:16:5f:70:71:f6:b6:6b:f0:f4:
77:4d:0e:f8:c4:12:db:93:10:8a:88:5d:f8:7c:f4:
1a:fb:ab:7d:0c:4b:7f:76:0b:5f:d9:c2:f7:6b:4c:
44:e0:5c:28:5f:9b:97:a8:06:8a:3b:41:e7:e7:d3:
82:59:92:02:e7:ec:1c:80:36:30:16:5a:07:d8:b0:
37:d5:e0:44:41:8e:48:8d:58:ff:73:e5:b7:60:8b:
55:02:0a:77:5f:eb:18:3c:3d:9d:99:07:4f:60:08:
ee:0b:07:26:47:73:8d:25:0c:de:b7:bf:4b:6b:65:
47:22:f6:2e:cf:51:fa:a9:d6:39:b0:7a:44:b8:be:
4c:bd:8b:6a:7b:ee:b3:59:a9:c5:92:50:5b:15:a2:
6e:2c:8e:8f:fc:55:2a:9c:9a:ff:bc:44:19:82:8b:
bb:9d:30:67:27:f4:a6:e1:e9:ba:bb:9a:55:8e:17:
f7:c3:30:83:1f:19:5e:c0:32:80:f3:8c:d2:03:e2:
3a:19:e3:49:86:2e:fd:60:fa:16:e2:60:97:6b:f4:
3d:3b:2b:ae:86:db:d5:32:3b:bf:7a:af:40:5a:14:
b4:fc:88:21:d9:3d:5a:0c:e4:c0:84:bb:1d:f0:96:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:49:6E:53:FE:87:98:1C:BA:8E:72:0A:9B:55:F2:34:1F:5F:B6
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:ed:49:0b:64:13:fa:76:a0:e6:75:02:e5:be:b9:8d:ac:
07:03:15:16:26:32:ea:6f:59:06:d8:88:0c:a1:f8:67:7e:cc:
c6:38:07:bc:cc:18:21:08:9a:b0:76:bf:bb:ce:c0:8d:9a:6f:
ab:de:52:65:48:fd:15:ef:a4:a7:b7:1f:f9:3a:51:5c:09:ac:
48:3d:c3:29:05:11:2e:6d:fd:5c:95:f5:fc:4f:7f:78:aa:a6:
58:63:ba:aa:42:09:53:1a:ef:24:6e:e6:9a:1f:30:03:44:99:
38:09:5a:ac:a1:75:59:f0:a8:38:1f:f0:02:25:5f:5b:30:54:
a9:4e:fc:20:a2:c0:27:be:ac:f3:25:28:a3:c8:d1:45:f2:52:
cb:93:2a:3e:3a:bf:02:58:48:ed:9f:59:9c:ae:69:db:6a:a7:
67:dd:c9:f0:03:07:6d:f5:16:d0:4c:9e:62:2a:98:96:4b:92:
5b:d7:58:a4:fe:17:ca:b6:6d:d6:94:2e:95:d9:24:f8:92:93:
47:dc:77:1c:ca:34:c2:0a:fe:4a:a0:64:96:01:7c:3a:84:84:
bb:27:bf:92:c0:ea:66:3c:7e:de:4d:54:ac:7a:e5:ad:2b:e8:
cd:7b:0e:65:ad:5e:59:b4:62:d9:ea:57:db:4e:dd:83:4c:fb:
b1:ac:6a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6O3m9bLKSEviUuS898ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTEwMjQ4NGY3Mzk3Mjc4NmNjYzJkZjFjNDdjMjY4MmI4
Yjg1Y2EwHhcNMjUwMzI5MDQwMTE2WhcNMjUwMzMwMDQwMTE2WjAzMTEwLwYDVQQD
EyhiMTU1NDk2ZTUzZmU4Nzk4MWNiYThlNzIwYTliNTVmMjM0MWY1ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ERjkXFPZ20f1gJlEZF0DyC9cUgW
X3Bx9rZr8PR3TQ74xBLbkxCKiF34fPQa+6t9DEt/dgtf2cL3a0xE4FwoX5uXqAaK
O0Hn59OCWZIC5+wcgDYwFloH2LA31eBEQY5IjVj/c+W3YItVAgp3X+sYPD2dmQdP
YAjuCwcmR3ONJQzet79La2VHIvYuz1H6qdY5sHpEuL5MvYtqe+6zWanFklBbFaJu
LI6P/FUqnJr/vEQZgou7nTBnJ/Sm4em6u5pVjhf3wzCDHxlewDKA84zSA+I6GeNJ
hi79YPoW4mCXa/Q9OyuuhtvVMju/eq9AWhS0/Igh2T1aDOTAhLsd8JbHswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFVSW5T/oeYHLqOcgqbVfI0H1+2MB8GA1UdIwQY
MBaAFLLhAkhPc5cnhszC3xxHwmgri4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMt
NDU5N2UxNDdjMTQwLzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMtNDU5N2UxNDdjMTQw
LzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSntSQtk
E/p2oOZ1AuW+uY2sBwMVFiYy6m9ZBtiIDKH4Z37MxjgHvMwYIQiasHa/u87AjZpv
q95SZUj9Fe+kp7cf+TpRXAmsSD3DKQURLm39XJX1/E9/eKqmWGO6qkIJUxrvJG7m
mh8wA0SZOAlarKF1WfCoOB/wAiVfWzBUqU78IKLAJ76s8yUoo8jRRfJSy5MqPjq/
AlhI7Z9ZnK5p22qnZ93J8AMHbfUW0EyeYiqYlkuSW9dYpP4XyrZt1pQuldkk+JKT
R9x3HMo0wgr+SqBklgF8OoSEuye/ksDqZjx+3k1UrHrlrSvozXsOZa1eWbRi2epX
207dg0z7saxq5g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:11 2025 by rpki-client