![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.mft
File: HYJY6Tt-Siohghqpn9nP9vMktfw.mft (raw, json)
Hash identifier: 5cmaQ+Y4DtSXHNa8jZeWZY1fAudJuUw9aYyjqj+Eytk=
Subject key identifier: 8E:BB:97:7C:43:5E:D8:8A:7C:38:7A:19:A7:14:AE:D3:1A:6D:85:CC
Authority key identifier: 1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
Certificate issuer: /CN=1d8258e93b7e4a2a21821aa99fd9cff6f324b5fc
Certificate serial: 01873275D7B05ED509CD5B7766718DB8A337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYJY6Tt-Siohghqpn9nP9vMktfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.mft
Manifest number: 0B59
Signing time: Thu 30 Mar 2023 12:19:56 +0000
Manifest this update: Thu 30 Mar 2023 12:19:56 +0000
Manifest next update: Fri 31 Mar 2023 12:19:56 +0000
Files and hashes: 1: HYJY6Tt-Siohghqpn9nP9vMktfw.crl (hash: ljTmyO8nM7a8TIZo41tP3Io1er6tpIQ8M9VtkEslpTY=)
2: YgnVPKgxC7E2mlQz7JDplvddNvA.roa (hash: d8WrhEGgBG5/w3gpiQHXFl5hMBjWzLtK93vwb9zFLZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:75:d7:b0:5e:d5:09:cd:5b:77:66:71:8d:b8:a3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8258e93b7e4a2a21821aa99fd9cff6f324b5fc
Validity
Not Before: Mar 30 12:19:56 2023 GMT
Not After : Mar 31 12:19:56 2023 GMT
Subject: CN=8ebb977c435ed88a7c387a19a714aed31a6d85cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:4e:3e:80:6c:5a:1d:cf:52:4d:a4:84:b5:
59:e7:04:13:66:16:9e:9d:82:bd:f7:28:38:04:17:
1c:18:e6:4d:a4:64:e8:64:71:c9:69:65:4b:88:c4:
82:bc:4e:7b:2a:e6:40:71:49:5b:57:2a:5d:db:07:
92:07:54:b2:ba:cc:0e:a2:06:c1:c4:23:22:31:b5:
65:7d:9d:09:dc:10:81:6b:31:41:aa:6e:43:e3:29:
d3:d4:7e:1c:78:12:0c:f9:87:f4:9a:7c:be:11:72:
24:87:83:c6:0b:5a:2e:c4:49:a6:8b:d9:02:ea:da:
0f:83:5a:78:08:58:66:0c:ba:a2:96:ba:79:9f:46:
38:df:5f:5c:1f:b6:8f:e1:ba:7f:7d:86:e0:12:cd:
9d:dc:0f:11:cb:f2:c2:84:a6:d7:67:26:88:56:5f:
6c:7f:cd:f9:75:4c:06:11:f7:a9:d2:31:83:e3:f2:
33:7f:c4:10:45:c4:ae:94:42:41:d2:23:7d:26:18:
05:eb:d9:5e:95:28:75:57:e4:4f:ef:d2:4b:6b:70:
34:fb:4e:ea:7d:16:2f:19:eb:c2:38:a8:78:dc:c6:
7e:d2:0e:7b:ba:5e:89:d6:de:c9:1d:f6:93:be:10:
84:e6:a9:c1:7a:49:1e:82:f5:42:58:d1:01:9f:cd:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BB:97:7C:43:5E:D8:8A:7C:38:7A:19:A7:14:AE:D3:1A:6D:85:CC
X509v3 Authority Key Identifier:
keyid:1D:82:58:E9:3B:7E:4A:2A:21:82:1A:A9:9F:D9:CF:F6:F3:24:B5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYJY6Tt-Siohghqpn9nP9vMktfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a1fdc8-a8b4-4254-883b-7227295c69d6/1/HYJY6Tt-Siohghqpn9nP9vMktfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b6:7c:78:4b:a5:55:38:2c:6a:3d:58:ca:28:eb:0f:34:d0:
73:a7:68:87:44:29:21:0b:1c:d2:39:97:c2:00:17:67:7c:56:
9c:82:98:50:61:4c:62:9f:90:68:1e:d4:74:ad:da:12:e2:cb:
3b:72:46:de:25:32:c1:b5:c2:ff:e3:7c:3e:95:ab:80:19:d3:
7a:3f:42:d9:cc:89:6c:8c:84:99:49:14:c3:57:0c:2e:d4:4e:
73:f4:19:94:5e:dc:07:13:8a:bb:52:5c:ca:84:36:f9:9a:d5:
0b:a1:2e:f9:0a:bc:34:90:b8:f3:63:ba:c9:f3:3a:3a:99:bc:
76:e0:07:cb:f6:81:4c:8c:c1:d7:5f:21:92:a5:1a:36:cc:84:
75:44:e6:53:34:a2:c2:76:02:ef:90:d0:ef:de:76:38:ed:f4:
da:dd:99:14:6a:8c:35:82:e0:59:da:22:82:11:ac:de:4d:79:
44:d3:ea:86:37:46:36:2e:e4:92:76:3b:99:fe:11:8d:22:a6:
98:d9:a8:49:f9:a4:1f:43:3f:03:71:7d:3d:89:b7:13:4f:a5:
f1:67:b6:9c:cb:f2:5e:ab:c4:f4:61:61:b0:7b:05:4a:85:86:
34:a3:3b:8d:af:42:8d:a4:f6:c5:69:7d:d5:d3:12:73:50:b2:
65:1c:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:18 2025 by rpki-client