Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
File: suECSE9zlyeGzMLfHEfCaCuLhco.mft (raw, json)
Hash identifier: qWasXb5aKxMzbrPpeVVdPvQlgBSOoVr3nK60t0pZFjo=
Subject key identifier: 87:76:1F:79:1A:B8:59:38:D5:78:8E:8D:A4:F6:53:9A:B5:03:94:81
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 0194BC72BE6062DB6107F178842A80A2A26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
Manifest number: 071C
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 1bAxGY5qO4xV54QsH6dH5YqwKes.roa (hash: E42uV3NJLrPIE9xeD5wLXJwDkdw8IVRhghW/M8SKmks=)
2: suECSE9zlyeGzMLfHEfCaCuLhco.crl (hash: r22c5p/H/MwJD9yJJT7MUkn15Tk2VnKYkrGrws01dt8=)
3: uMWx1DHDT7wOBd8ZkggNNPo73BU.roa (hash: br4w7Xpzo64W9mICZqFCzkiLrhiOHGcsEZ7bOFikDmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:60:62:db:61:07:f1:78:84:2a:80:a2:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=87761f791ab85938d5788e8da4f6539ab5039481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:ee:79:21:34:f9:1e:d8:e3:b8:84:7b:c0:
8c:f1:e6:f1:8a:6c:9e:79:35:9c:d0:d1:df:8d:3b:
c4:7e:3a:00:a9:7c:66:9f:73:5f:e6:34:e8:05:7d:
b2:01:59:3b:6a:45:e0:08:03:ca:bd:80:ac:1b:55:
47:e5:be:f6:f7:d5:40:47:23:dd:8c:32:39:f8:46:
18:9a:22:f9:d3:fc:54:51:be:41:be:f1:17:29:79:
92:ef:b3:36:ac:83:d5:5b:06:69:a3:b4:3b:54:ff:
2f:11:ca:b6:9d:b5:f9:45:f9:4c:c2:d8:f8:f2:f5:
ad:12:05:7c:d1:97:ca:1d:e7:6b:34:5f:5d:71:48:
bb:34:ba:8d:25:99:98:11:97:51:95:96:84:96:41:
b2:48:78:0f:ca:7a:b7:46:c2:fe:29:bd:3d:ba:56:
b0:ee:12:f7:2c:66:7a:b9:e6:2f:67:52:6a:a4:57:
1c:05:55:65:c4:46:e7:86:e7:92:00:76:92:ef:c5:
ec:28:ae:b4:2f:a2:5f:f4:25:a6:79:c9:43:89:a3:
4c:c8:52:37:b1:82:25:d9:9b:21:5e:b3:b6:65:47:
42:6e:73:62:b6:14:33:2f:1f:88:4b:ff:ac:6a:9a:
de:98:c6:82:9a:21:01:ea:ba:3b:8f:64:eb:59:71:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:1F:79:1A:B8:59:38:D5:78:8E:8D:A4:F6:53:9A:B5:03:94:81
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6b:1c:52:1b:81:21:e8:11:e6:5f:63:eb:35:78:68:01:04:
da:1f:da:46:90:05:6f:ce:c7:d9:74:4b:dc:40:ba:e6:ef:f3:
a0:81:dc:be:84:df:6c:fb:2e:47:4c:d6:e1:3b:a8:12:9c:a5:
2d:c6:d6:04:15:a6:ad:2d:aa:e0:72:87:16:28:4c:b4:18:ff:
c9:d8:af:0c:94:6d:5e:bb:ad:6a:87:c4:c6:fd:75:71:91:37:
e5:05:76:cb:5f:e9:92:96:ab:a7:77:c2:07:93:f1:e2:b3:5b:
88:7b:d4:8b:91:d9:2f:f1:b4:c6:2d:48:42:ba:ae:74:35:37:
5f:0e:3f:f7:bb:e4:07:58:46:a0:77:f6:05:d9:d3:86:3f:e9:
0f:78:4b:99:79:99:b4:54:e9:81:11:d9:08:bd:46:6c:e0:eb:
43:60:b6:f0:70:e5:7f:48:fe:8c:17:38:07:dc:95:24:6f:c8:
c5:f7:1b:83:2c:d8:98:79:62:76:8d:f5:de:52:f7:68:2e:39:
f6:9a:d8:ed:d5:94:7d:77:29:98:77:c1:84:f4:c7:0c:a3:6c:
4f:b2:e3:db:74:cd:c9:b4:2c:f0:a8:d2:82:fa:fe:05:f7:28:
2e:f7:5c:6d:a9:c9:71:2e:dd:cf:2d:97:97:d6:85:ba:6b:9e:
bb:ca:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:51 2025 by rpki-client