![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.mft
File: 5bz8EHfPh2iI-2x1suOUkjIF87U.mft (raw, json)
Hash identifier: tWNwJ8CkPkqUjz3WgU7Nv6nsMAhsaZVOYBtGQ4ilrUk=
Subject key identifier: 89:AB:D1:F4:B2:AF:1E:90:21:D3:26:BF:EF:A8:1C:BC:84:9D:4A:57
Authority key identifier: E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
Certificate issuer: /CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Certificate serial: 01909ACD755BD49BDCB739C388B611AB0429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.mft
Manifest number: 10A4
Signing time: Wed 10 Jul 2024 04:01:14 +0000
Manifest this update: Wed 10 Jul 2024 04:01:14 +0000
Manifest next update: Thu 11 Jul 2024 04:01:14 +0000
Files and hashes: 1: 5bz8EHfPh2iI-2x1suOUkjIF87U.crl (hash: /2PXp8aO7bBez+l6+1aIgYsx8m+ffrd9UGQFjKFwFKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:cd:75:5b:d4:9b:dc:b7:39:c3:88:b6:11:ab:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bcfc1077cf876888fb6c75b2e394923205f3b5
Validity
Not Before: Jul 10 04:01:14 2024 GMT
Not After : Jul 11 04:01:14 2024 GMT
Subject: CN=89abd1f4b2af1e9021d326bfefa81cbc849d4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:69:4e:77:9b:9b:71:78:c3:a4:3c:99:49:
43:4d:d1:f0:e7:1f:a1:3b:42:a7:51:34:f7:8d:af:
ff:ef:ab:59:9d:d7:1a:aa:c1:39:b9:b9:86:c5:e3:
b6:96:2e:1a:de:96:13:3b:34:b3:d2:b7:0f:88:fe:
bb:a6:13:bc:11:8b:0f:60:47:a5:82:f4:56:ec:b9:
df:23:75:b0:01:dc:f6:91:98:4e:d0:d0:b6:50:15:
5c:43:e2:2e:fe:2f:55:45:7b:a1:a1:b9:19:a5:5c:
e1:bb:4a:92:93:7b:d1:29:ec:d7:12:e2:80:12:46:
84:5c:10:0a:90:94:00:44:dd:d6:bf:0c:20:c3:53:
d2:6c:26:06:0a:9b:c1:bc:32:dc:1f:46:98:d2:b1:
2c:06:05:e7:50:33:af:10:fb:02:4a:9b:a8:07:ab:
15:cc:c0:03:cb:c4:9b:85:67:c5:27:44:be:fe:21:
45:5f:1e:bb:9b:8f:12:73:fd:ad:c2:70:55:c9:50:
d2:48:bd:39:41:3c:fc:a4:a8:e3:b8:2a:84:17:6c:
7d:fe:0a:33:40:80:0a:5b:54:54:5c:17:e7:fd:a4:
34:9b:0e:9a:b1:50:32:26:3f:56:9f:17:92:30:03:
20:70:e3:82:96:39:46:fc:00:34:cd:12:69:b0:28:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:D1:F4:B2:AF:1E:90:21:D3:26:BF:EF:A8:1C:BC:84:9D:4A:57
X509v3 Authority Key Identifier:
keyid:E5:BC:FC:10:77:CF:87:68:88:FB:6C:75:B2:E3:94:92:32:05:F3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bz8EHfPh2iI-2x1suOUkjIF87U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e05e77-12ae-4f59-9491-cadd1129c98d/1/5bz8EHfPh2iI-2x1suOUkjIF87U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:c4:db:40:8a:a9:6a:d4:a1:45:d8:2f:30:9a:f5:42:c3:
76:95:65:29:4a:dc:16:2a:40:67:83:2e:c4:44:4d:92:e3:f3:
ad:4c:b0:13:15:c1:23:40:85:29:03:66:d6:37:ae:38:b0:42:
52:c3:82:8a:ac:77:0b:55:a0:e0:49:98:31:70:0f:f0:55:11:
21:af:08:fc:2a:6c:d4:10:e0:5c:96:6f:a6:50:61:83:76:1f:
f1:ff:c9:0c:71:c5:25:75:f4:bb:40:18:b1:fa:b3:20:6a:72:
43:2d:38:b7:a7:1f:40:1a:fc:cf:bd:32:dd:8d:4b:f0:9b:9e:
e8:60:c1:e4:2a:09:f3:2e:d1:09:f2:2c:7d:9f:ce:8e:2d:59:
ed:a7:5e:c9:2b:7a:96:fc:3b:11:4d:4f:fd:42:a4:40:63:22:
d4:04:df:56:d2:3e:ec:a4:e1:91:4a:96:b1:19:78:2b:09:ba:
95:b9:75:94:84:fa:24:76:04:ce:f3:95:23:a2:9f:43:b4:dc:
36:c6:ff:60:1f:3f:4b:74:56:15:bd:5b:2f:48:57:3b:1f:20:
ba:1c:5d:80:1d:c8:63:6b:de:6e:05:53:7d:c6:df:16:fd:14:
30:82:77:5f:15:10:b8:5e:de:c9:3d:da:9a:eb:cd:be:f6:57:
48:3b:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:49 2025 by rpki-client