![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
File: F5k4MKGvO8hzO8KTSkpEPMX0P48.mft (raw, json)
Hash identifier: wY0WUaQnYih5E7yfls/cr87wu6ItnIbVMFkD4YBzsyk=
Subject key identifier: 21:2B:1C:A7:26:C5:9A:9E:28:9F:02:B6:5D:93:E2:E3:F3:4B:E8:25
Authority key identifier: 17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
Certificate issuer: /CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Certificate serial: 01843DB396CC09319F9BD191BD9F3EFC2633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
Manifest number: 0ADD
Signing time: Thu 03 Nov 2022 13:34:50 +0000
Manifest this update: Thu 03 Nov 2022 13:34:50 +0000
Manifest next update: Fri 04 Nov 2022 13:34:50 +0000
Files and hashes: 1: F5k4MKGvO8hzO8KTSkpEPMX0P48.crl (hash: P28XxeQWQEyC7P6jDnDjkiFmuD7BGkpQUJgPZzXdVd4=)
2: xycylJPoLJYznykxES5GXbkC7CQ.roa (hash: XodbnyvvOSlb7ywKVa3CS2cINhkIElNGXiZJ0W4UswY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:b3:96:cc:09:31:9f:9b:d1:91:bd:9f:3e:fc:26:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Validity
Not Before: Nov 3 13:34:50 2022 GMT
Not After : Nov 4 13:34:50 2022 GMT
Subject: CN=212b1ca726c59a9e289f02b65d93e2e3f34be825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:ee:0e:da:ff:37:d3:29:f5:8b:df:c4:a6:
7d:a7:d9:87:da:36:9d:74:38:9a:d3:e4:d2:55:97:
9f:5a:52:b7:2a:d4:0d:d1:f8:56:9c:9c:a3:7c:29:
7c:f4:74:9a:b3:85:13:4b:ed:9c:db:f1:1f:3e:7b:
0d:c9:2b:3c:a9:af:3f:d4:aa:56:b6:8a:05:1b:4b:
1e:8a:02:75:ec:1a:16:a4:99:e6:70:03:f0:77:03:
6f:f8:2e:d3:e6:76:17:d1:92:ed:1a:01:79:2c:64:
53:57:9e:7f:ae:8e:ee:b0:19:91:88:e8:e5:06:23:
39:96:60:53:25:9f:af:e7:33:42:90:a6:8e:9e:5b:
8a:d5:03:62:8c:75:8a:c5:c2:9e:2d:24:e3:c0:37:
66:8e:d5:43:6c:c9:13:65:dd:83:2b:d9:9e:37:41:
c5:2a:4a:7f:9a:31:35:60:24:b7:3c:c4:9d:99:4d:
d4:69:fc:c7:2d:16:a7:a1:c6:49:76:8e:a9:f5:96:
cc:2c:94:99:a0:20:90:db:9b:f1:76:96:16:c4:5b:
d0:b5:6f:bd:1a:f7:d9:e2:f6:b4:a2:b2:50:9b:b3:
71:b0:9e:6e:8c:bb:0a:13:9a:32:af:8f:4f:98:69:
46:62:3c:2b:83:68:4f:fe:a7:f2:c2:fd:7f:03:50:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:1C:A7:26:C5:9A:9E:28:9F:02:B6:5D:93:E2:E3:F3:4B:E8:25
X509v3 Authority Key Identifier:
keyid:17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b3:d5:89:54:50:af:2b:76:3e:3d:a7:b7:da:b0:28:76:a1:
90:f7:17:16:b3:75:8c:f7:db:99:e3:d6:f9:19:39:9c:33:fa:
a3:e1:78:a2:1b:fe:18:1d:fd:f3:ef:94:fb:e2:6e:3d:f7:85:
15:11:93:5d:07:1f:cd:03:c5:95:c5:9e:97:a2:36:a7:30:62:
f6:cc:33:af:63:19:87:bd:a4:88:5f:71:97:46:67:98:7f:1e:
13:76:24:5a:2d:88:04:33:39:fd:10:9e:44:fa:2e:b4:c3:c8:
06:51:81:20:dc:e1:be:ce:42:98:d8:05:b2:29:22:ad:d9:c0:
e7:a4:2c:3c:b3:0a:7a:a9:7d:64:e2:5d:1d:1e:3c:9f:e0:d5:
b1:b3:8a:47:57:73:e0:a1:29:46:60:96:c2:4f:16:3a:c7:16:
4b:b8:76:36:88:b5:c4:94:b2:8a:3a:6c:b5:38:63:88:59:d1:
bc:05:9e:b4:7c:3b:8b:6e:5c:97:1b:f9:ce:35:27:75:ff:3c:
d9:b6:3d:5f:19:8a:02:bb:b9:60:06:17:7a:ef:c7:b0:f6:86:
24:8e:0e:82:c3:2a:f2:39:84:8b:c6:7a:01:42:98:42:76:a0:
5a:ce:be:01:2d:04:af:e8:d7:54:67:e4:98:b5:3f:1e:17:88:
d1:1b:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:44 2025 by rpki-client