![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.mft
File: mr5h-_WLyPKB9We5yBSicOtTBlU.mft (raw, json)
Hash identifier: Ba3r8VkOTZorwi0DoKk1NT9advj3hewsamYXT7xqo/U=
Subject key identifier: 0F:04:A2:F9:53:E5:6E:F0:1A:AB:8A:92:A1:7F:0C:B8:2B:43:BC:1B
Authority key identifier: 9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
Certificate issuer: /CN=9abe61fbf58bc8f281f567b9c814a270eb530655
Certificate serial: 0183A74B5038882220103C0E225298FDA49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mr5h-_WLyPKB9We5yBSicOtTBlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.mft
Manifest number: 0AF6
Signing time: Wed 05 Oct 2022 08:37:54 +0000
Manifest this update: Wed 05 Oct 2022 08:37:54 +0000
Manifest next update: Thu 06 Oct 2022 08:37:54 +0000
Files and hashes: 1: G5KxPDU2h6B-GQ3GyCPx6U-iQ8U.roa (hash: eFNvcsOtGHONflcUQZNF6SMGktFeeJqDFSA7k+Ops3A=)
2: mr5h-_WLyPKB9We5yBSicOtTBlU.crl (hash: EPxrHJGGx5j+fXH7YGQKQIiaWiGSxOVHjBNcFCQCk68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:4b:50:38:88:22:20:10:3c:0e:22:52:98:fd:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abe61fbf58bc8f281f567b9c814a270eb530655
Validity
Not Before: Oct 5 08:37:54 2022 GMT
Not After : Oct 6 08:37:54 2022 GMT
Subject: CN=0f04a2f953e56ef01aab8a92a17f0cb82b43bc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:72:72:36:45:39:c4:8c:05:ce:3f:07:d8:96:
0e:cd:7f:0d:cb:20:5c:22:5e:2e:06:86:34:f3:5b:
ff:4b:3d:99:a7:33:8d:33:d9:bc:90:98:1e:8e:5b:
25:82:0e:f3:67:a3:54:07:60:66:da:c2:ab:4e:cf:
cb:8f:fc:ee:64:ac:62:85:5e:f5:99:ba:a3:8e:28:
8f:ea:43:1a:99:0e:7c:e4:81:79:cc:da:db:38:37:
fb:30:07:bb:00:2f:6c:99:93:6a:ca:e0:98:68:c4:
78:88:dc:30:28:c4:d3:94:b1:e0:ac:b8:7f:9f:bd:
41:3e:45:28:1f:01:61:15:18:ae:9e:b1:58:31:7c:
5b:f6:dd:54:70:e2:d8:01:06:8a:22:20:09:81:fe:
c1:a8:aa:e5:cc:fa:7f:73:43:e4:c9:b2:d4:12:31:
7d:20:ef:0a:41:75:81:d8:50:18:37:11:c1:31:c2:
04:c4:c2:42:b6:8f:de:d4:ff:50:41:3a:4f:b3:f0:
53:29:99:48:2a:41:34:35:0b:5f:b5:0d:69:43:e6:
67:e7:d0:0a:e9:14:88:ae:db:76:f3:31:29:f3:2d:
bd:52:8c:cd:42:55:5c:be:4e:3e:58:d4:76:56:ad:
a5:93:6d:b9:33:94:ba:ab:c0:7d:98:5c:c4:4b:d6:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:A2:F9:53:E5:6E:F0:1A:AB:8A:92:A1:7F:0C:B8:2B:43:BC:1B
X509v3 Authority Key Identifier:
keyid:9A:BE:61:FB:F5:8B:C8:F2:81:F5:67:B9:C8:14:A2:70:EB:53:06:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mr5h-_WLyPKB9We5yBSicOtTBlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efff4e-ac13-4c6e-8228-06723bf60646/1/mr5h-_WLyPKB9We5yBSicOtTBlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:18:fb:e8:30:da:8d:bf:69:17:0d:fd:c9:b5:13:55:25:84:
83:97:b2:c9:d4:cc:99:7e:d5:2a:ec:d8:90:f9:3e:9e:3e:3e:
54:fc:83:56:01:a9:89:c1:ff:6e:09:d9:74:08:3e:8d:03:82:
82:4f:9a:f2:c8:b0:d5:16:b6:08:ec:2d:7f:86:a4:01:71:17:
4f:06:52:35:80:2e:69:4b:10:82:1b:25:58:c8:ea:0e:58:50:
24:4e:56:e0:4b:27:8d:b9:a3:e6:fd:6a:19:f4:3b:b2:d8:f7:
2f:23:18:9f:fa:0d:2e:06:8e:4c:40:09:8f:07:bc:b8:bd:b2:
1e:9a:eb:e9:7a:75:e8:d2:47:2d:8a:01:03:db:4a:17:98:50:
40:d2:ae:fe:9f:d2:39:7a:18:d9:12:6e:c7:07:18:90:c6:43:
17:40:6a:f6:ce:fc:f3:a1:3e:88:ef:2a:23:20:61:26:a3:63:
10:02:1b:28:8c:27:65:fb:25:d2:04:6b:c3:10:26:52:97:21:
9f:07:9d:94:98:7e:c7:60:ce:69:61:c6:ed:47:5a:f8:b9:91:
6e:7a:a0:27:c3:8e:ef:12:a6:31:8e:58:25:ba:fe:7e:20:52:
72:0a:0b:b9:47:6c:5c:ee:a1:58:98:88:50:52:80:3f:a5:ea:
22:06:3f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:25 2025 by rpki-client