![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
File: c9BuvTmqjedLVlMsnatAaU-hyOg.mft (raw, json)
Hash identifier: seVA2fdHx3r2QxA3afRcrMLK5RZJu+YGzRO9eXLmb2U=
Subject key identifier: B8:54:1E:9A:7A:AE:AF:9C:3F:33:5A:72:51:53:20:47:F7:47:03:00
Authority key identifier: 73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
Certificate issuer: /CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
Certificate serial: 0186FD0EBFA6DB9C2824B5F6DABDD4913FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
Manifest number: 0868
Signing time: Mon 20 Mar 2023 03:27:27 +0000
Manifest this update: Mon 20 Mar 2023 03:27:27 +0000
Manifest next update: Tue 21 Mar 2023 03:27:27 +0000
Files and hashes: 1: 1RKkl-K3_z75SII0MZxLi4S_gHI.roa (hash: erq4T0vd09vvImH9q+zDemlSrFk6eJkgk918YrUsfrU=)
2: c9BuvTmqjedLVlMsnatAaU-hyOg.crl (hash: gsp3JidYV5+XuA17fxpEprS7vwUvjG5Sw3PiGzlz/Jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:0e:bf:a6:db:9c:28:24:b5:f6:da:bd:d4:91:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
Validity
Not Before: Mar 20 03:27:27 2023 GMT
Not After : Mar 21 03:27:27 2023 GMT
Subject: CN=b8541e9a7aaeaf9c3f335a7251532047f7470300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:14:2c:96:ad:59:5b:86:19:d4:a8:4e:95:
ef:49:c2:39:f2:dd:4b:92:08:df:53:cd:c4:15:f4:
02:47:b8:10:b3:76:70:73:83:ff:c4:e3:ca:2a:97:
7d:48:6a:7d:c9:1a:c5:3a:0c:33:6c:38:1b:5f:00:
a6:3f:c4:ed:e4:03:9f:63:85:9e:ec:21:de:cd:16:
9c:20:83:ee:3d:cd:57:71:d1:65:c8:f2:ab:bf:2c:
0d:a9:5b:9f:c3:df:73:a1:01:38:63:2b:b8:c4:34:
5c:4a:f6:7b:be:a0:7e:05:92:e8:da:16:63:22:1b:
f4:00:03:75:e3:31:4e:9f:36:e4:d3:19:cb:9a:58:
1c:89:9d:ca:d2:4a:37:3f:41:f3:15:2e:cf:58:e9:
12:89:e7:17:f7:f6:b2:a2:ad:41:92:4b:3f:4e:71:
7f:24:1d:e8:eb:a9:8b:4b:64:cb:f9:8a:80:9c:49:
d8:68:06:09:53:b0:ed:12:c0:98:14:e3:3b:a2:a0:
c3:8f:04:15:7e:33:37:c8:ee:1f:5e:6b:fd:be:4b:
d7:87:2f:d5:07:38:de:c0:ec:78:40:24:54:ae:18:
2a:a6:46:9a:b3:ee:60:e1:33:8b:a6:bd:df:e9:ed:
5b:e1:96:5b:16:ec:67:06:ac:72:ca:f3:9b:46:f4:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:1E:9A:7A:AE:AF:9C:3F:33:5A:72:51:53:20:47:F7:47:03:00
X509v3 Authority Key Identifier:
keyid:73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:23:a2:76:94:f7:42:4c:e7:7c:0d:12:31:b6:63:4f:bc:45:
e4:2a:56:65:74:3f:c4:e2:6b:6f:ee:eb:0a:8c:26:00:df:ba:
09:89:13:a0:f3:cb:98:3b:5d:6e:65:9e:67:74:ad:04:58:2a:
e3:57:58:d7:a8:89:38:bd:8b:ba:9b:61:0f:4a:e0:08:51:e5:
04:15:20:e6:f1:4d:3f:11:1a:59:ab:0e:0f:d8:57:3b:77:0b:
35:b1:16:8f:d6:cf:1d:dd:f0:dc:95:cd:bb:53:0e:7d:d6:56:
3c:ea:60:2e:42:43:54:72:f5:92:eb:31:08:5c:e4:9b:b3:dd:
9c:9b:34:c1:65:a5:bf:99:d5:f0:95:dc:e6:c1:be:52:ac:91:
b8:e8:7e:40:52:89:05:a4:99:93:17:38:7b:5a:2e:f0:a0:f2:
27:f0:12:90:f6:d0:a9:a3:af:0f:71:af:53:68:06:47:39:a1:
e6:c4:30:9c:89:da:2f:49:e6:55:14:da:df:75:a3:08:37:f0:
82:a6:f6:e0:2d:4a:5a:14:79:70:8f:bf:fb:5f:8a:76:de:7c:
34:3c:de:b8:98:f5:06:cd:88:bc:1c:30:ed:cc:ac:a2:6c:a8:
ef:43:7d:ce:2f:72:bd:7f:96:7e:5a:1d:46:ac:bc:79:d6:39:
0e:55:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:41 2024 by rpki-client on console-fra.rpki-client.org