![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft
File: BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft (raw, json)
Hash identifier: jyVME65v6S2O9dcr5UO9YEOuSx2kSpgjvD8oyfemtUg=
Subject key identifier: 53:8B:93:78:9A:D7:42:49:6D:46:A5:0C:D4:0B:8C:CA:8E:48:6A:15
Authority key identifier: 05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
Certificate issuer: /CN=052c15460fa39c6471496cd18fcc40a18a7949e7
Certificate serial: 0184D856D962B8C3D585B35C3A201495DF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft
Manifest number: 0BA3
Signing time: Sat 03 Dec 2022 14:14:41 +0000
Manifest this update: Sat 03 Dec 2022 14:14:41 +0000
Manifest next update: Sun 04 Dec 2022 14:14:41 +0000
Files and hashes: 1: 3af1VS7VUSWHOOzIT7Eb_s1edWE.roa (hash: pjfORvkubAazfXI6ZfyeQu/AxYOsvaMz7DiOmRKpQ5o=)
2: BSwVRg-jnGRxSWzRj8xAoYp5Sec.crl (hash: g4KEhHh+nDAlshV7vVQWCH7NmVhZ6KBXvvKl1riq5YY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:56:d9:62:b8:c3:d5:85:b3:5c:3a:20:14:95:df:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052c15460fa39c6471496cd18fcc40a18a7949e7
Validity
Not Before: Dec 3 14:14:41 2022 GMT
Not After : Dec 4 14:14:41 2022 GMT
Subject: CN=538b93789ad742496d46a50cd40b8cca8e486a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:a9:2c:13:3c:18:e9:26:f7:ad:92:e3:8b:
47:8b:77:0f:bc:89:8c:4a:e2:60:1c:83:be:05:3a:
7a:e7:30:87:b1:ad:46:6f:1c:29:a5:d2:47:9f:cb:
40:d4:ea:f8:6c:3d:7f:a8:6a:29:6c:f2:2c:48:fc:
86:a5:50:5c:5f:3f:3a:91:2a:06:f1:33:e0:a8:30:
3d:6b:97:34:1d:0b:14:cb:8d:80:b4:9c:12:02:c5:
6c:8f:54:df:db:99:93:92:ac:3b:ac:c7:0b:a3:45:
09:de:0c:9f:d6:cc:59:08:e8:3d:a6:0f:0d:30:ab:
f4:50:71:12:52:b6:c9:34:c2:ca:37:fc:1c:e3:a1:
2f:52:b6:26:20:8b:11:ed:f6:08:61:de:3a:a8:12:
32:6d:b4:f8:0f:75:e7:60:8c:32:c3:4c:bd:9f:5b:
62:20:12:c6:7c:e0:ae:c8:9b:1a:b0:fd:46:00:e8:
1e:a5:cf:ec:7c:5e:bd:b8:09:1c:dd:e7:9d:df:5a:
47:a0:d2:f2:32:92:c6:bc:4d:e6:04:2e:a6:95:95:
6c:6d:29:21:c5:d8:b9:e8:62:4f:65:b7:c0:91:a2:
63:0e:b9:3e:89:26:00:f5:8d:74:69:6f:3a:ea:49:
5a:d9:9d:01:76:9a:e6:28:83:56:af:02:28:86:09:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:93:78:9A:D7:42:49:6D:46:A5:0C:D4:0B:8C:CA:8E:48:6A:15
X509v3 Authority Key Identifier:
keyid:05:2C:15:46:0F:A3:9C:64:71:49:6C:D1:8F:CC:40:A1:8A:79:49:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSwVRg-jnGRxSWzRj8xAoYp5Sec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/68e73e-81db-49cf-8abc-ec8e21a3ea49/1/BSwVRg-jnGRxSWzRj8xAoYp5Sec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:37:f1:a0:2b:29:fa:f8:d9:03:1c:84:10:39:50:6e:5a:
bd:8d:24:fd:6f:5d:25:ed:51:5b:2d:53:8b:25:35:36:51:21:
7f:75:90:60:10:59:a1:bf:7a:4f:75:d8:8c:aa:ad:36:7e:0c:
b0:79:de:16:91:50:79:bc:8f:96:43:70:11:b8:ba:49:93:04:
ce:70:8b:5a:a6:c0:a2:ff:90:42:fe:5a:08:d7:42:09:67:ea:
30:cb:6a:04:72:c1:d1:16:91:52:1e:fb:f0:90:b5:4a:95:c6:
d2:d2:cd:5b:4f:4c:39:66:3c:a2:bb:32:34:c4:e7:71:90:f8:
35:77:c9:18:c6:1a:9b:b6:20:57:d5:19:aa:63:c5:70:d8:45:
dc:a4:6b:a5:9c:55:a1:08:c5:6e:0d:fe:1f:67:61:46:d0:3f:
ce:63:2c:e8:91:d1:67:3e:70:1b:09:ef:95:b6:a7:91:fc:90:
2d:62:ec:e7:db:6c:fe:bf:11:84:4e:64:48:4e:4a:26:df:f3:
d6:7f:ac:fa:5c:be:a7:de:4e:67:cc:5d:63:55:4e:06:ac:2c:
11:e8:6d:ca:6b:c1:6c:a9:4c:2e:ba:ab:c1:84:94:5a:30:6f:
b7:42:2e:34:d7:1a:93:62:66:90:e5:06:77:1d:02:5b:9d:5a:
7a:ea:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:47 2025 by rpki-client