![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
File: HAEKqEOKglpVQgE_G5DTSO2KAMY.mft (raw, json)
Hash identifier: OhrkXEwOhu+qf8OOUwEPPZpGWgR8YQfeq0oEKSQ/xFc=
Subject key identifier: 4C:17:0C:5C:43:9F:87:D0:64:B0:70:20:D0:4F:19:79:76:CC:6C:8E
Authority key identifier: 1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
Certificate issuer: /CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Certificate serial: 01936D10F98A5CEF4C545F09187F15E72BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
Manifest number: 0A5D
Signing time: Wed 27 Nov 2024 10:00:49 +0000
Manifest this update: Wed 27 Nov 2024 10:00:49 +0000
Manifest next update: Thu 28 Nov 2024 10:00:49 +0000
Files and hashes: 1: HAEKqEOKglpVQgE_G5DTSO2KAMY.crl (hash: AXqD374eE9EvnuswhKg41YTc0fn3Wi4m9RgdvbCTiwg=)
2: WqciO0wM3a-hRegaXIDxCwj6DTs.roa (hash: 2f8Ra2i6rR7L/ms00UoiBbWxLAAABSwSxae0lrnw7j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:10:f9:8a:5c:ef:4c:54:5f:09:18:7f:15:e7:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c010aa8438a825a5542013f1b90d348ed8a00c6
Validity
Not Before: Nov 27 10:00:49 2024 GMT
Not After : Nov 28 10:00:49 2024 GMT
Subject: CN=4c170c5c439f87d064b07020d04f197976cc6c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:63:95:2d:01:88:a0:51:61:f0:5c:62:2c:
00:30:4e:31:34:d0:b4:92:53:8e:69:a4:d4:fb:72:
1a:5b:ba:d7:b5:48:9e:6b:07:7e:76:c2:f1:ab:e7:
ce:df:31:a0:8f:e4:00:40:98:2f:fc:a7:86:b7:72:
dd:41:b5:c4:75:6f:1e:61:51:91:f5:fd:5a:ec:9d:
63:6b:2a:d8:95:29:2b:8a:87:28:08:bb:79:8a:4a:
9d:76:dc:d8:ca:8c:a1:5e:8a:4b:7b:55:2c:b7:ac:
1a:2b:fa:de:10:21:44:f4:79:2e:be:09:84:38:ae:
90:37:2b:ba:dc:d4:64:e6:76:fa:4c:d7:3f:16:54:
af:6b:09:a5:2a:ae:07:bb:1b:14:4a:94:28:a8:01:
59:82:f1:4f:e4:76:78:03:05:e8:b2:e9:18:34:67:
d0:7c:50:42:1a:27:e8:b9:7c:1f:d3:44:28:91:63:
4e:cf:e1:33:77:58:6a:5d:5c:b1:68:43:c4:b5:84:
47:ed:d9:da:31:28:eb:cb:ef:56:96:58:39:91:f1:
69:d1:2b:26:be:a5:71:9b:d7:b6:79:9f:4e:82:a3:
b1:cf:d3:0c:80:48:ca:38:04:6c:7d:ce:d9:5f:09:
ef:0c:62:4c:bf:c8:62:15:c1:43:50:71:85:c3:7a:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:0C:5C:43:9F:87:D0:64:B0:70:20:D0:4F:19:79:76:CC:6C:8E
X509v3 Authority Key Identifier:
keyid:1C:01:0A:A8:43:8A:82:5A:55:42:01:3F:1B:90:D3:48:ED:8A:00:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAEKqEOKglpVQgE_G5DTSO2KAMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d7d50f-9eb0-48d5-a5b9-3ab3b67c6217/1/HAEKqEOKglpVQgE_G5DTSO2KAMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:26:7a:19:6b:47:d5:b7:7f:49:fc:fa:6b:ff:1b:ff:59:
53:70:d6:53:fc:fe:44:92:a5:88:9f:f6:95:71:0b:5b:af:e0:
4e:0a:d8:c2:98:34:e1:fe:9f:f5:11:be:0c:29:58:a4:55:4c:
df:d6:26:c3:40:31:a9:df:ef:9a:29:5a:df:3d:a0:30:86:d1:
f3:b4:3d:25:c9:5b:23:cb:bc:ea:11:ad:44:c4:8c:6c:e2:71:
35:be:19:c3:c8:bc:e6:4b:f9:55:48:a0:95:30:0f:bc:09:3f:
35:9c:99:de:b5:c7:58:68:b6:c5:60:86:e7:cd:76:ce:66:06:
31:31:9d:ff:64:df:7f:a3:4e:a2:83:ab:19:66:a1:47:5a:18:
97:af:c1:3b:8f:bd:d9:f9:69:3d:6e:36:9d:3c:f7:d9:aa:ab:
9c:b2:55:ff:7d:02:d9:ab:97:86:d3:c2:a7:2b:d2:7d:6f:c9:
83:90:68:1f:1d:83:d6:26:f7:67:d9:34:37:82:7c:a0:81:b9:
dc:c2:be:62:0d:35:fa:6f:ee:2f:95:8d:de:50:ca:d8:34:31:
fd:38:fd:8b:6f:28:15:ff:c4:e1:10:e5:d3:c8:94:71:f6:07:
71:84:cd:87:6e:f0:fa:43:4c:c8:ed:f1:2b:4f:22:5f:fe:96:
4d:dd:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:52 2025 by rpki-client