![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.mft
File: AUHFOn5BrMoI8s6waaPP_2j0hes.mft (raw, json)
Hash identifier: +VaIUqi63YPETCEj1zi5ded+sFMfb+mAkuJ0dzIGeJY=
Subject key identifier: 2D:2A:DA:B1:C7:F0:D5:76:28:66:64:96:25:F4:0C:59:71:66:1E:70
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Certificate issuer: /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial: 0184EFCFCA92F895512ED07263964CC3BE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.mft
Manifest number: 074E
Signing time: Thu 08 Dec 2022 03:38:02 +0000
Manifest this update: Thu 08 Dec 2022 03:38:02 +0000
Manifest next update: Fri 09 Dec 2022 03:38:02 +0000
Files and hashes: 1: 28rYmScgrlRVmE8-i722mVQL0SA.roa (hash: 0AkAcJ38WOoYhQTCGLMDIYoXT10tIteIgUWkIOr0Eh4=)
2: AUHFOn5BrMoI8s6waaPP_2j0hes.crl (hash: x2Xb6CytJyd2IIMTZdThudERWg/jKwDMlx3aNTKM6WQ=)
3: ScZArVwVMI-RvzBKWL4mWHi6XmA.roa (hash: JSd3R62maz5GX8AWHByoVcdC6hng/bktV2zb6B/C/aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:cf:ca:92:f8:95:51:2e:d0:72:63:96:4c:c3:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Validity
Not Before: Dec 8 03:38:02 2022 GMT
Not After : Dec 9 03:38:02 2022 GMT
Subject: CN=2d2adab1c7f0d5762866649625f40c5971661e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:2f:a1:90:a1:39:f4:9d:00:f1:dd:f2:2f:
7f:c9:a4:51:18:29:06:77:31:58:b7:1d:91:65:44:
bb:03:b0:e2:83:63:75:73:c2:36:5e:8c:81:64:7d:
48:f5:33:7f:6c:df:7a:d6:49:7e:d0:3e:fd:ea:ba:
91:1b:60:07:39:07:54:7c:80:6f:78:68:db:80:43:
45:49:4f:10:e7:92:e4:c9:ee:1a:b2:66:f9:48:b7:
1b:0e:a1:ea:f4:21:e4:6e:0d:2f:8f:49:48:44:fe:
f7:ff:87:04:6b:77:fa:4e:49:50:68:86:d3:11:a3:
bb:35:9f:32:31:0d:e1:60:26:79:93:28:2d:93:4c:
e1:b6:0a:83:f0:74:5f:ad:0d:e3:0f:ab:84:34:e9:
16:11:4d:20:8d:2e:a2:44:98:21:d5:6b:e3:66:ec:
18:23:1b:f4:28:db:af:24:b0:aa:4a:2c:f9:75:18:
5f:dc:79:da:77:31:88:8c:53:f0:47:85:79:97:d4:
d7:ff:8a:57:f8:d8:01:38:1a:20:b5:6f:97:1b:cc:
ba:e0:93:44:1f:8e:84:67:dc:cd:1c:7c:0a:3f:28:
69:14:10:4d:fb:d7:6b:b5:83:43:1a:c7:39:2f:9b:
9d:cf:7d:f4:bf:f5:2e:65:03:bb:48:b0:55:ca:9e:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:DA:B1:C7:F0:D5:76:28:66:64:96:25:F4:0C:59:71:66:1E:70
X509v3 Authority Key Identifier:
keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:ab:34:c4:6f:35:50:3c:9a:e8:20:26:2d:9f:91:a0:11:
08:be:2f:3e:87:4e:aa:be:fc:ca:f5:d6:71:fe:99:58:17:8f:
47:ac:79:65:e9:03:1c:0f:ad:30:0a:06:a3:29:e2:b1:b8:3e:
41:5a:a8:9c:db:5a:d2:c9:d5:14:24:61:02:bc:2b:a6:2b:d1:
2f:f4:56:a7:97:3d:04:c6:4e:a4:21:e0:46:09:2b:1f:ee:72:
0f:93:79:ca:7b:d8:23:cb:c9:dd:2b:15:3f:5d:54:f4:47:69:
c9:be:ed:aa:8c:79:2c:6c:14:be:09:f7:82:7e:ce:1a:e6:b6:
bb:2f:67:db:cb:28:9a:fd:4e:d6:3d:74:a3:f1:e5:2e:ca:11:
17:4d:b7:e6:fe:64:ef:11:23:12:7e:da:00:c6:c3:50:de:0c:
6f:94:56:6f:7e:67:43:56:34:cd:7a:59:09:09:b5:42:9b:40:
b4:c1:b8:43:a5:d0:a6:bc:c9:70:86:80:b6:ea:b5:2d:09:9c:
14:2b:d1:14:2b:c5:93:20:8e:47:fb:60:0b:f4:e2:68:88:49:
81:26:22:b1:9d:83:8a:ba:2e:81:68:62:64:c1:88:47:ca:98:
28:93:33:5d:a7:09:c5:2d:64:7f:13:1c:41:c6:87:71:f2:13:
22:7b:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:30 2025 by rpki-client