Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
File: suECSE9zlyeGzMLfHEfCaCuLhco.mft (raw, json)
Hash identifier: Zn+kk10Gu0ds7R/73f4fmpt+G7bOWqaeeJiEEl0TxiM=
Subject key identifier: 78:A6:7C:5F:A2:58:FB:18:99:00:D0:13:0B:56:AB:FC:93:63:D0:FF
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 01963CC14954033B27FF75E3A9823C4B11F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
Manifest number: 07E3
Signing time: Wed 16 Apr 2025 04:00:22 +0000
Manifest this update: Wed 16 Apr 2025 04:00:22 +0000
Manifest next update: Thu 17 Apr 2025 04:00:22 +0000
Files and hashes: 1: 1bAxGY5qO4xV54QsH6dH5YqwKes.roa (hash: E42uV3NJLrPIE9xeD5wLXJwDkdw8IVRhghW/M8SKmks=)
2: suECSE9zlyeGzMLfHEfCaCuLhco.crl (hash: A37+9JaRv6hfMG46H8ESKqxrr8pYfK9Q58w73Y13Kbs=)
3: uMWx1DHDT7wOBd8ZkggNNPo73BU.roa (hash: br4w7Xpzo64W9mICZqFCzkiLrhiOHGcsEZ7bOFikDmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:49:54:03:3b:27:ff:75:e3:a9:82:3c:4b:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: Apr 16 04:00:22 2025 GMT
Not After : Apr 17 04:00:22 2025 GMT
Subject: CN=78a67c5fa258fb189900d0130b56abfc9363d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:e5:5d:ac:83:88:33:3e:7f:4f:1a:46:13:
21:37:09:fc:22:e6:fb:73:7b:d8:8a:05:49:5a:24:
70:55:a1:ac:ee:92:4e:14:16:7c:32:ea:62:95:e0:
c5:61:ab:b0:ea:97:5e:d6:7d:15:ba:37:3a:8c:f9:
b0:88:6c:50:60:06:04:30:b1:f0:d7:75:c1:ed:26:
fd:52:11:d0:dd:8d:52:71:20:f1:51:f1:05:aa:29:
6e:0b:66:1d:26:54:fb:cf:0f:dc:0b:e9:d5:5e:e8:
0e:ed:1c:fc:51:6f:f0:ff:e3:45:2a:f8:3a:a0:e6:
7c:21:5c:78:a7:e4:a3:3f:b7:ab:7b:76:e4:e1:24:
78:a4:d1:4e:b2:b7:25:76:3a:e8:97:23:a4:e3:e4:
4e:b3:84:0e:e6:e6:70:8d:66:8b:cf:71:9e:42:7e:
02:cc:4e:39:05:13:e7:09:72:9c:77:5e:e3:bc:7f:
22:78:1c:ae:db:8e:bd:6a:08:c0:36:72:02:ab:fa:
cf:fd:5b:fe:72:c5:3e:d0:ac:e8:f8:16:67:31:b1:
d2:0e:28:41:39:b7:3b:ce:13:a7:46:2e:1f:5c:19:
fa:06:ea:e1:88:c9:87:a9:32:b4:a7:c4:91:cb:5f:
66:27:4c:db:e7:04:67:7b:71:58:df:50:87:32:ca:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:7C:5F:A2:58:FB:18:99:00:D0:13:0B:56:AB:FC:93:63:D0:FF
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:ad:31:f4:08:c5:65:82:91:08:b2:a3:2a:06:48:8a:72:
87:34:7f:52:d5:95:06:7d:17:c3:0f:df:59:c0:61:7a:dc:ce:
67:c8:53:4c:6b:20:df:fc:be:58:58:ef:30:95:9e:c5:f8:68:
2a:7c:5b:90:9c:90:28:c5:93:89:28:6f:9f:ed:b0:bf:c0:bd:
38:54:13:c5:69:38:a4:32:b5:1a:e6:97:85:d7:2d:74:ed:14:
82:53:39:61:1c:75:64:2a:98:64:24:73:fc:98:2e:1b:32:1b:
f7:93:e8:f9:47:91:11:c1:60:5b:77:f4:07:fd:02:e0:fa:aa:
ca:57:44:be:43:f7:b2:0e:d6:b4:e2:02:57:a4:d8:f0:a0:7c:
2f:bc:d7:08:fb:cb:10:f2:83:36:b1:3e:a9:84:76:f6:49:d0:
02:d8:1b:28:62:03:61:5b:c7:a7:6b:da:96:6c:00:db:ec:8c:
c9:36:77:36:c6:1a:7c:c0:aa:df:56:87:13:01:75:9e:e9:7d:
4d:06:d7:53:eb:6e:c7:18:fc:20:aa:c3:12:19:0e:01:12:24:
88:5a:a6:b6:9d:b0:68:c8:d8:b7:90:4e:26:3a:66:38:c6:bd:
c2:46:47:a9:e7:cf:63:f2:64:aa:d4:49:95:8b:8d:15:5d:8c:
b0:a9:7a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8wUlUAzsn/3XjqYI8SxH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZTEwMjQ4NGY3Mzk3Mjc4NmNjYzJkZjFjNDdjMjY4MmI4
Yjg1Y2EwHhcNMjUwNDE2MDQwMDIyWhcNMjUwNDE3MDQwMDIyWjAzMTEwLwYDVQQD
Eyg3OGE2N2M1ZmEyNThmYjE4OTkwMGQwMTMwYjU2YWJmYzkzNjNkMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymzlXayDiDM+f08aRhMhNwn8Iub7
c3vYigVJWiRwVaGs7pJOFBZ8MupileDFYauw6pde1n0Vujc6jPmwiGxQYAYEMLHw
13XB7Sb9UhHQ3Y1ScSDxUfEFqiluC2YdJlT7zw/cC+nVXugO7Rz8UW/w/+NFKvg6
oOZ8IVx4p+SjP7ere3bk4SR4pNFOsrcldjrolyOk4+ROs4QO5uZwjWaLz3GeQn4C
zE45BRPnCXKcd17jvH8ieByu2469agjANnICq/rP/Vv+csU+0Kzo+BZnMbHSDihB
Obc7zhOnRi4fXBn6BurhiMmHqTK0p8SRy19mJ0zb5wRne3FY31CHMsoMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHimfF+iWPsYmQDQEwtWq/yTY9D/MB8GA1UdIwQY
MBaAFLLhAkhPc5cnhszC3xxHwmgri4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMt
NDU5N2UxNDdjMTQwLzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YjE4YjUtZGEwMi00ZTk3LWIwMTMtNDU5N2UxNDdjMTQw
LzEvc3VFQ1NFOXpseWVHek1MZkhFZkNhQ3VMaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3StMfQI
xWWCkQiyoyoGSIpyhzR/UtWVBn0Xww/fWcBhetzOZ8hTTGsg3/y+WFjvMJWexfho
KnxbkJyQKMWTiShvn+2wv8C9OFQTxWk4pDK1GuaXhdctdO0UglM5YRx1ZCqYZCRz
/JguGzIb95Po+UeREcFgW3f0B/0C4PqqyldEvkP3sg7WtOICV6TY8KB8L7zXCPvL
EPKDNrE+qYR29knQAtgbKGIDYVvHp2valmwA2+yMyTZ3NsYafMCq31aHEwF1nul9
TQbXU+tuxxj8IKrDEhkOARIkiFqmtp2waMjYt5BOJjpmOMa9wkZHqefPY/JkqtRJ
lYuNFV2MsKl60w==
-----END CERTIFICATE-----
Generated at Mon May 12 14:41:44 2025 by rpki-client