Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.mft
File: MpRFWGK2CEStqBBArQc8yurVE1s.mft (raw, json)
Hash identifier: vMmouvC1Yzt+S0wf/8TQjqTlw3Q+8e3Ra8c/O/kjbPk=
Subject key identifier: 89:4C:6B:61:27:E2:69:11:5C:0B:1B:23:7B:8E:03:C5:49:09:5E:1E
Authority key identifier: 32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
Certificate issuer: /CN=3294455862b60844ada81040ad073ccaead5135b
Certificate serial: 018B38C9D3D21DDCCC1BB85BC1F76A07DE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.mft
Manifest number: 0872
Signing time: Mon 16 Oct 2023 14:00:32 +0000
Manifest this update: Mon 16 Oct 2023 14:00:32 +0000
Manifest next update: Tue 17 Oct 2023 14:00:32 +0000
Files and hashes: 1: MpRFWGK2CEStqBBArQc8yurVE1s.crl (hash: izrQWj7umAjLV4B+7t2XMIqXHyHn/p04GhZ1igTH6H4=)
2: lxGFRzAIMhwtD4Eh9z3vZpoBV4s.roa (hash: gtlcSUvGo6dAtliCYqyz/S5JKQ5W7+GQ+Exhb5Bt/Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:c9:d3:d2:1d:dc:cc:1b:b8:5b:c1:f7:6a:07:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3294455862b60844ada81040ad073ccaead5135b
Validity
Not Before: Oct 16 14:00:32 2023 GMT
Not After : Oct 17 14:00:32 2023 GMT
Subject: CN=894c6b6127e269115c0b1b237b8e03c549095e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:19:d9:7e:a6:a8:e4:b3:8c:83:cc:4c:e8:
88:0e:b0:b6:e4:df:b6:c8:4b:da:74:ca:b7:19:aa:
4e:d1:41:d1:a3:53:b1:65:4a:ed:fa:46:0c:d8:07:
9c:b1:73:2e:57:a7:97:f0:6d:e2:d8:7c:3e:8a:ac:
45:dc:90:09:42:d8:cf:c1:28:9c:85:de:05:54:3e:
e2:2a:6a:22:4e:c4:51:ae:a5:de:44:59:bb:de:2a:
f8:04:13:a4:e8:c3:cc:dc:82:0b:e6:53:bc:cb:fd:
c4:72:16:da:e7:a7:45:3d:0a:64:17:c7:a4:82:f1:
df:c6:34:12:b4:42:05:c7:c5:cc:78:56:45:56:59:
0c:3e:92:41:6d:42:0e:0c:18:fe:4c:dd:92:55:a3:
a1:e5:26:4a:e0:02:eb:38:46:c5:e9:bf:9d:b2:79:
cb:d3:eb:d2:b0:c1:46:f2:50:0f:43:bc:d2:e5:76:
77:c9:ff:dd:af:24:f3:dc:2f:18:17:a9:f7:13:dd:
fb:11:a5:db:f6:6e:38:31:74:7b:38:e4:de:8c:33:
49:11:47:4f:69:f5:c7:77:7b:09:c6:45:75:7a:43:
6f:ba:10:d3:46:15:c1:01:9b:95:36:dd:16:40:70:
22:7b:65:b9:65:ba:9a:5e:84:91:f6:6f:83:13:48:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:6B:61:27:E2:69:11:5C:0B:1B:23:7B:8E:03:C5:49:09:5E:1E
X509v3 Authority Key Identifier:
keyid:32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:7c:25:f7:35:08:56:c0:a3:4d:e9:2a:16:c8:27:9b:8f:
2e:1d:af:14:e2:e6:06:d4:bf:07:4c:c9:b6:06:0e:3d:f3:b1:
c1:ee:36:b7:37:a3:e1:59:46:8b:cf:38:4c:bf:d3:12:1d:83:
1a:24:99:74:c6:98:19:d4:7b:d7:22:b5:03:58:69:8f:7e:e4:
0a:8f:03:58:66:aa:c7:27:e0:de:16:ef:95:f2:dc:aa:42:aa:
3b:82:86:74:53:4f:c1:eb:e4:28:74:85:9c:dc:30:95:ba:21:
48:95:e3:64:d1:67:11:6a:2d:ac:6f:1d:df:58:73:1d:7a:73:
34:8c:16:dc:eb:46:57:0f:fc:e3:4f:58:b8:40:06:19:08:0b:
aa:c9:46:48:e4:3b:3b:75:c8:39:1e:23:ff:58:bf:f6:fe:c5:
5a:9f:cf:df:9e:d9:b2:2d:91:95:a2:a0:b3:77:fc:41:47:32:
71:1d:15:89:92:9d:5f:87:94:13:2a:2f:8e:f7:a6:5d:92:a2:
36:44:0b:43:8c:9b:18:3e:3a:31:f6:18:ee:82:cb:d9:df:0e:
4e:7c:f2:9b:2c:33:39:42:18:ce:95:61:46:ee:4a:89:cb:56:
d7:ac:ce:41:4d:75:01:e1:c7:4a:41:04:51:97:53:2e:c9:d6:
d0:ad:60:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs4ydPSHdzMG7hbwfdqB96RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTQ0NTU4NjJiNjA4NDRhZGE4MTA0MGFkMDczY2NhZWFk
NTEzNWIwHhcNMjMxMDE2MTQwMDMyWhcNMjMxMDE3MTQwMDMyWjAzMTEwLwYDVQQD
Eyg4OTRjNmI2MTI3ZTI2OTExNWMwYjFiMjM3YjhlMDNjNTQ5MDk1ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDQZ2X6mqOSzjIPMTOiIDrC25N+2
yEvadMq3GapO0UHRo1OxZUrt+kYM2AecsXMuV6eX8G3i2Hw+iqxF3JAJQtjPwSic
hd4FVD7iKmoiTsRRrqXeRFm73ir4BBOk6MPM3IIL5lO8y/3Echba56dFPQpkF8ek
gvHfxjQStEIFx8XMeFZFVlkMPpJBbUIODBj+TN2SVaOh5SZK4ALrOEbF6b+dsnnL
0+vSsMFG8lAPQ7zS5XZ3yf/dryTz3C8YF6n3E937EaXb9m44MXR7OOTejDNJEUdP
afXHd3sJxkV1ekNvuhDTRhXBAZuVNt0WQHAie2W5ZbqaXoSR9m+DE0jaVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlMa2En4mkRXAsbI3uOA8VJCV4eMB8GA1UdIwQY
MBaAFDKURVhitghEragQQK0HPMrq1RNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBSRldHSzJDRVN0cUJCQXJRYzh5dXJWRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMGFhYmItNmYyMC00NzdmLWE5MWEt
MDEzZDEwODM4ODYzLzEvTXBSRldHSzJDRVN0cUJCQXJRYzh5dXJWRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMGFhYmItNmYyMC00NzdmLWE5MWEtMDEzZDEwODM4ODYz
LzEvTXBSRldHSzJDRVN0cUJCQXJRYzh5dXJWRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5J8Jfc1
CFbAo03pKhbIJ5uPLh2vFOLmBtS/B0zJtgYOPfOxwe42tzej4VlGi884TL/TEh2D
GiSZdMaYGdR71yK1A1hpj37kCo8DWGaqxyfg3hbvlfLcqkKqO4KGdFNPwevkKHSF
nNwwlbohSJXjZNFnEWotrG8d31hzHXpzNIwW3OtGVw/8409YuEAGGQgLqslGSOQ7
O3XIOR4j/1i/9v7FWp/P357Zsi2RlaKgs3f8QUcycR0ViZKdX4eUEyovjvemXZKi
NkQLQ4ybGD46MfYY7oLL2d8OTnzymywzOUIYzpVhRu5KictW16zOQU11AeHHSkEE
UZdTLsnW0K1gqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:38 2024 by rpki-client on console-fra.rpki-client.org