![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1df15-a957-449e-942c-a8fd72b2afe3/1/GRE0JQ6K134MUivNLhLqBovP2v4.mft
File: GRE0JQ6K134MUivNLhLqBovP2v4.mft (raw, json)
Hash identifier: haGLWZrBtPBSoyRW/JI3f5bebjvj5ccb1adtQX/p/Ts=
Subject key identifier: 7C:53:51:59:F9:3E:F3:9E:FF:BD:01:30:2D:14:E9:36:05:6A:6F:71
Authority key identifier: 19:11:34:25:0E:8A:D7:7E:0C:52:2B:CD:2E:12:EA:06:8B:CF:DA:FE
Certificate issuer: /CN=191134250e8ad77e0c522bcd2e12ea068bcfdafe
Certificate serial: 01888AACD55D7ED492DA1069E32F153C8A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRE0JQ6K134MUivNLhLqBovP2v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1df15-a957-449e-942c-a8fd72b2afe3/1/GRE0JQ6K134MUivNLhLqBovP2v4.mft
Manifest number: 0DBF
Signing time: Mon 05 Jun 2023 08:29:22 +0000
Manifest this update: Mon 05 Jun 2023 08:29:22 +0000
Manifest next update: Tue 06 Jun 2023 08:29:22 +0000
Files and hashes: 1: GRE0JQ6K134MUivNLhLqBovP2v4.crl (hash: cnGr6PZw0vALgae4utIpFjJRVTjeXrg1Lckcg+4Ylek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:ac:d5:5d:7e:d4:92:da:10:69:e3:2f:15:3c:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191134250e8ad77e0c522bcd2e12ea068bcfdafe
Validity
Not Before: Jun 5 08:29:22 2023 GMT
Not After : Jun 6 08:29:22 2023 GMT
Subject: CN=7c535159f93ef39effbd01302d14e936056a6f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:66:31:78:e8:2e:0a:57:dd:9a:9c:de:80:
04:cf:09:b2:6a:e1:27:4e:71:66:23:aa:1d:86:e5:
b2:ff:3f:c7:a9:03:8c:ba:c5:ff:5b:ed:3b:02:82:
22:bc:5e:5a:31:6b:b7:53:1a:31:33:ed:ae:96:14:
c9:cc:08:b2:58:8b:69:1d:60:27:f1:35:fb:79:e7:
a0:d6:2e:4c:5b:5b:44:6e:78:1a:73:f3:cd:87:b8:
5f:b5:05:a8:02:c9:9b:e8:1d:dc:3d:d6:fa:92:d0:
b5:dc:27:3f:1e:b1:26:bd:79:8e:a1:f9:6e:c0:23:
53:57:6f:ac:13:05:a3:5d:fe:85:be:78:e1:ec:d9:
32:fc:97:8f:4e:2d:d2:92:b7:47:35:c0:69:cc:cd:
f2:06:79:4b:49:c9:a3:ca:06:df:4b:22:2e:01:b6:
24:e9:03:1e:05:47:57:bb:cf:2e:b6:45:b3:cf:96:
3a:e7:25:d8:0a:95:cc:17:e4:cd:4b:a1:11:8f:f8:
74:d8:e9:11:85:6f:d4:2c:4d:21:fa:84:6d:65:af:
c6:06:78:64:06:e5:55:3e:57:8f:16:18:4a:6a:33:
fb:15:ab:39:93:13:04:92:3e:c1:0a:a7:c5:bc:71:
0d:05:ce:f6:70:80:50:9c:54:e2:8e:84:f6:97:02:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:51:59:F9:3E:F3:9E:FF:BD:01:30:2D:14:E9:36:05:6A:6F:71
X509v3 Authority Key Identifier:
keyid:19:11:34:25:0E:8A:D7:7E:0C:52:2B:CD:2E:12:EA:06:8B:CF:DA:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRE0JQ6K134MUivNLhLqBovP2v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1df15-a957-449e-942c-a8fd72b2afe3/1/GRE0JQ6K134MUivNLhLqBovP2v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1df15-a957-449e-942c-a8fd72b2afe3/1/GRE0JQ6K134MUivNLhLqBovP2v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2f:a8:cc:99:15:2e:e0:c9:79:9a:b8:ef:ea:d5:c9:d8:b3:
14:12:c0:f8:2b:9e:c9:e8:12:d9:24:ab:a6:c5:7c:a1:46:09:
7e:c9:47:c2:fa:bc:0f:6f:70:41:3c:78:22:50:4a:47:c3:bf:
e7:b8:c2:74:e9:95:b2:dd:3d:3b:97:5f:8f:f8:f9:ef:15:55:
68:3c:14:96:59:8d:51:eb:32:83:dd:ef:f2:31:b0:98:13:e3:
ac:3f:49:fc:a9:ee:ca:62:cb:ca:f3:22:55:55:3d:d8:13:0a:
51:7a:b0:64:b7:7f:cd:51:22:35:85:9c:2b:9a:df:98:e4:25:
f3:64:be:30:4e:e3:92:b3:48:ae:ba:06:5b:f3:fb:0e:01:a9:
be:0d:b7:35:63:23:88:61:e4:ab:69:0b:10:67:b0:26:04:53:
5e:ea:f2:3a:5c:40:f0:f0:d3:36:0f:28:3e:7b:83:e1:ef:a3:
80:8a:91:01:16:a9:51:99:46:b8:80:97:ef:87:60:ec:28:53:
53:8d:ad:2a:32:96:79:8e:c8:a5:b1:fc:cd:f9:2b:7b:0b:e5:
6b:e2:4d:54:db:4e:33:59:c0:79:02:ae:85:d5:b0:f1:6b:f3:
2c:8f:68:fd:ea:22:89:e8:8f:74:03:12:c1:4f:ec:6c:4c:ce:
bb:d4:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:50 2025 by rpki-client