Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.mft
File: MXG_prPTLf46DuLfd8--WFwn9ds.mft (raw, json)
Hash identifier: PY+sc6dhXREEkSd0X4Pgf1ipq+WEQRGCfk32FuRJcB4=
Subject key identifier: 00:47:30:44:CA:FF:31:81:30:4F:2B:59:C5:65:12:4F:9C:12:82:BC
Authority key identifier: 31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
Certificate issuer: /CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Certificate serial: 018C5BF7FF85014ABDEA20A0923F0F4BA42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.mft
Manifest number: 0A4E
Signing time: Tue 12 Dec 2023 03:00:28 +0000
Manifest this update: Tue 12 Dec 2023 03:00:28 +0000
Manifest next update: Wed 13 Dec 2023 03:00:28 +0000
Files and hashes: 1: 857QXsx4BaJwSRHW4uuNeFBZMP8.roa (hash: SP1IT0l0S1T4hokncKA1WAP4/BDAnXdhXdSSvRJfZvU=)
2: MXG_prPTLf46DuLfd8--WFwn9ds.crl (hash: tO9nbAyhdaIzHrXuCL8aE00DHbUNyOcGy/PpkyOHqmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:f7:ff:85:01:4a:bd:ea:20:a0:92:3f:0f:4b:a4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Validity
Not Before: Dec 12 03:00:28 2023 GMT
Not After : Dec 13 03:00:28 2023 GMT
Subject: CN=00473044caff3181304f2b59c565124f9c1282bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:b5:20:9b:75:22:37:7f:ec:95:93:80:01:
81:9f:07:d5:f6:ac:8e:b0:72:dc:37:22:eb:28:53:
ec:cd:34:b7:cd:e1:2c:ba:11:51:c0:95:6b:04:b4:
0d:27:f2:09:05:59:57:ff:34:97:9a:3c:62:32:4e:
37:4d:86:77:16:f1:b1:96:96:6c:bc:ec:05:03:59:
7a:78:03:f8:41:22:08:0a:19:18:34:7f:64:07:d2:
b1:fd:7f:be:59:12:8d:d9:f6:f7:63:4e:01:e6:65:
cc:86:80:76:5f:5d:4e:e0:22:38:28:c0:96:12:22:
c4:3f:f3:2a:47:10:f5:fe:f6:46:3c:45:26:fc:93:
cc:e6:ea:6f:25:23:d0:ba:73:a7:ca:15:67:fb:cf:
ba:3d:5a:59:4b:e1:d5:21:76:a5:fd:1c:97:1a:d1:
87:7f:e4:07:02:a7:6e:8f:0d:33:ec:cc:ae:da:90:
ba:1c:65:cb:2b:ca:d2:de:fc:70:1e:3f:cb:fc:80:
71:bb:ee:5b:3b:20:b4:d0:20:5d:9e:fb:06:11:32:
5c:90:03:a6:67:9e:29:f7:b2:48:57:28:41:c8:73:
82:be:59:0e:2d:0f:e6:f1:70:14:35:89:0d:ad:df:
1c:7c:46:c3:01:9f:b6:1f:84:a0:c6:69:9f:7d:a3:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:30:44:CA:FF:31:81:30:4F:2B:59:C5:65:12:4F:9C:12:82:BC
X509v3 Authority Key Identifier:
keyid:31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1f:0c:c1:38:7f:1b:7c:cd:68:bd:7f:fc:2d:96:4b:36:fe:
67:21:85:24:a3:26:d0:fd:4d:7b:ac:fa:02:99:43:ca:97:97:
c1:16:a4:e8:ad:e6:16:2b:27:e3:99:bc:e7:a0:93:a5:7a:d7:
0b:49:98:5d:a1:36:e7:dc:18:2f:1f:e7:84:68:e8:a0:b2:b6:
f3:5b:0e:23:5f:5b:ad:76:78:0c:ee:d2:27:e5:12:24:7e:55:
5a:02:e6:a5:d9:dd:34:47:81:6f:5e:c4:cc:8f:0b:8e:3b:c2:
f6:c2:37:18:79:9d:29:38:0e:0c:25:66:6d:c9:62:04:68:a5:
48:27:2c:2f:20:a2:16:99:51:d5:c6:8d:3b:b0:ef:df:44:a7:
78:12:1c:b8:fa:ce:19:c8:d4:7a:62:a0:b0:34:9c:69:ed:17:
03:f7:a6:f6:56:f3:76:0c:a2:0f:c6:1a:99:bd:98:36:85:e4:
9b:31:2f:1c:54:b0:2b:40:94:a8:7d:c0:1c:ce:d0:5a:70:bf:
9a:7e:f3:f3:82:0c:cb:85:af:28:3e:15:73:3e:41:da:93:45:
ff:73:81:7c:00:30:8f:65:a4:ae:77:94:11:5b:36:e9:c9:98:
79:54:1e:e3:d7:5d:60:7f:7e:31:5d:2b:0b:8c:84:e9:ee:59:
d6:28:b8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxb9/+FAUq96iCgkj8PS6QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNzFiZmE2YjNkMzJkZmUzYTBlZTJkZjc3Y2ZiZTU4NWMy
N2Y1ZGIwHhcNMjMxMjEyMDMwMDI4WhcNMjMxMjEzMDMwMDI4WjAzMTEwLwYDVQQD
EygwMDQ3MzA0NGNhZmYzMTgxMzA0ZjJiNTljNTY1MTI0ZjljMTI4MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfm1IJt1Ijd/7JWTgAGBnwfV9qyO
sHLcNyLrKFPszTS3zeEsuhFRwJVrBLQNJ/IJBVlX/zSXmjxiMk43TYZ3FvGxlpZs
vOwFA1l6eAP4QSIIChkYNH9kB9Kx/X++WRKN2fb3Y04B5mXMhoB2X11O4CI4KMCW
EiLEP/MqRxD1/vZGPEUm/JPM5upvJSPQunOnyhVn+8+6PVpZS+HVIXal/RyXGtGH
f+QHAqdujw0z7Myu2pC6HGXLK8rS3vxwHj/L/IBxu+5bOyC00CBdnvsGETJckAOm
Z54p97JIVyhByHOCvlkOLQ/m8XAUNYkNrd8cfEbDAZ+2H4SgxmmffaM9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABHMETK/zGBME8rWcVlEk+cEoK8MB8GA1UdIwQY
MBaAFDFxv6az0y3+Og7i33fPvlhcJ/XbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVhHX3ByUFRMZjQ2RHVMZmQ4LS1XRnduOWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mMDg1ODUtNjhiMS00OTBkLWE3ZmEt
YTUxOTI2NjAxZjRlLzEvTVhHX3ByUFRMZjQ2RHVMZmQ4LS1XRnduOWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9mMDg1ODUtNjhiMS00OTBkLWE3ZmEtYTUxOTI2NjAxZjRl
LzEvTVhHX3ByUFRMZjQ2RHVMZmQ4LS1XRnduOWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR8MwTh/
G3zNaL1//C2WSzb+ZyGFJKMm0P1Ne6z6AplDypeXwRak6K3mFisn45m856CTpXrX
C0mYXaE259wYLx/nhGjooLK281sOI19brXZ4DO7SJ+USJH5VWgLmpdndNEeBb17E
zI8LjjvC9sI3GHmdKTgODCVmbcliBGilSCcsLyCiFplR1caNO7Dv30SneBIcuPrO
GcjUemKgsDScae0XA/em9lbzdgyiD8Yamb2YNoXkmzEvHFSwK0CUqH3AHM7QWnC/
mn7z84IMy4WvKD4Vcz5B2pNF/3OBfAAwj2WkrneUEVs26cmYeVQe49ddYH9+MV0r
C4yE6e5Z1ii4uw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:10 2025 by rpki-client