![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft
File: KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft (raw, json)
Hash identifier: FlSYHIw1RgW5dcpWzEB5yqEPY5npIRLfyz74j9HaEnA=
Subject key identifier: 54:DC:F2:0C:55:88:AA:F9:D7:5A:E7:DA:8A:6B:08:FE:09:C0:9B:4E
Authority key identifier: 29:52:80:3F:15:05:41:08:38:93:30:31:77:EB:8B:19:1F:BB:C6:1F
Certificate issuer: /CN=2952803f150541083893303177eb8b191fbbc61f
Certificate serial: 019000F407B3B7278F58D05E75422790FCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVKAPxUFQQg4kzAxd-uLGR-7xh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft
Manifest number: 03EC
Signing time: Mon 10 Jun 2024 07:01:51 +0000
Manifest this update: Mon 10 Jun 2024 07:01:51 +0000
Manifest next update: Tue 11 Jun 2024 07:01:51 +0000
Files and hashes: 1: KVKAPxUFQQg4kzAxd-uLGR-7xh8.crl (hash: ofDuO8k98L/8enyc0/6r/nlYVZlZMuAAvrBTT3ceDrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:f4:07:b3:b7:27:8f:58:d0:5e:75:42:27:90:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2952803f150541083893303177eb8b191fbbc61f
Validity
Not Before: Jun 10 07:01:51 2024 GMT
Not After : Jun 11 07:01:51 2024 GMT
Subject: CN=54dcf20c5588aaf9d75ae7da8a6b08fe09c09b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:6e:1f:ee:ab:e1:76:c3:3a:75:a7:bb:67:
8d:a5:58:c3:99:28:95:86:17:46:6a:c4:08:2d:c8:
cd:ad:9f:9c:05:02:32:05:08:4a:01:f1:b7:28:22:
98:91:b4:77:64:dc:ad:29:57:06:e7:b3:93:de:03:
62:10:cc:ef:dc:78:c6:91:c4:62:3f:d1:9a:9d:04:
a0:3f:5a:21:f1:35:c3:8a:61:80:e8:64:ed:45:1f:
8d:21:a8:99:6b:d4:a0:fb:65:ba:88:e2:ed:a5:15:
e5:0b:10:36:08:47:65:8a:00:ee:d2:8f:e5:ef:1b:
c0:55:74:f1:00:51:d1:06:3e:1e:da:25:42:18:43:
e8:e0:15:1e:a2:15:27:2d:a0:06:33:c2:02:9a:88:
b1:2a:ea:9a:76:28:61:0b:40:64:06:d6:38:2f:16:
66:1d:c1:98:0c:df:53:40:77:86:48:f4:2c:9c:30:
ec:70:81:74:a4:ec:5b:a8:4e:f8:5e:95:56:1e:bb:
1b:d7:e0:d5:c5:8f:b0:75:43:a3:84:70:fe:22:ef:
4a:48:e1:d6:75:1a:fc:6c:cf:20:98:e9:9c:e7:36:
b3:ba:c1:81:4d:49:0c:5f:bc:3a:7f:85:ee:d6:1d:
74:d5:c4:bc:44:91:b6:9e:e7:23:90:4e:8f:b0:be:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:F2:0C:55:88:AA:F9:D7:5A:E7:DA:8A:6B:08:FE:09:C0:9B:4E
X509v3 Authority Key Identifier:
keyid:29:52:80:3F:15:05:41:08:38:93:30:31:77:EB:8B:19:1F:BB:C6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVKAPxUFQQg4kzAxd-uLGR-7xh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7b:db:49:d4:3e:46:80:49:5e:95:7e:62:63:df:72:d2:62:
f5:1e:d9:cf:bf:70:d9:30:65:47:a6:c0:54:b5:b7:b6:a1:df:
ee:00:b0:5f:7a:cd:96:af:9c:15:90:ac:9d:22:41:46:f4:2e:
1f:53:b4:5b:7c:19:26:c1:88:a4:63:b9:63:e7:86:c2:f8:90:
10:a1:3b:f7:6f:b6:c4:0a:ab:fe:38:8b:5c:df:d4:a0:74:bd:
9e:54:d8:98:6b:5a:df:c4:ea:41:6e:d9:a8:1d:51:b2:fc:62:
11:ba:81:8c:b5:41:fa:71:f4:37:f9:b7:07:9f:fc:e1:28:2d:
b1:72:b7:1a:3a:7e:5f:eb:da:e4:94:35:01:15:34:c5:1a:62:
0d:6c:5f:3f:a1:3e:4b:f2:ef:9b:3e:7f:72:ca:af:8f:2f:eb:
c5:7e:93:46:8e:94:e7:49:84:b6:e5:93:d5:59:57:40:20:99:
58:90:4a:b8:c5:71:67:90:08:e0:85:ac:ac:90:91:d1:f6:ec:
3b:af:c0:b9:11:d7:1d:ae:93:ef:60:5c:db:23:8e:72:43:72:
51:b1:7e:54:0c:fb:86:e1:13:34:35:ed:85:ee:56:00:90:9d:
03:d2:dc:c1:79:58:07:fd:c8:e2:78:14:cc:01:5e:90:33:27:
1b:98:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:14 2025 by rpki-client