![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
File: Qdb8quhRR7C2Qb-svssXVkTojBg.mft (raw, json)
Hash identifier: o3eh9G0jL+FrsF0tr2Fud1V1VFfzetHrXDzMjUPpT8k=
Subject key identifier: 40:CC:31:DA:C2:79:3D:5B:3E:ED:7D:D3:BC:55:8E:26:91:82:3B:C9
Authority key identifier: 41:D6:FC:AA:E8:51:47:B0:B6:41:BF:AC:BE:CB:17:56:44:E8:8C:18
Certificate issuer: /CN=41d6fcaae85147b0b641bfacbecb175644e88c18
Certificate serial: 019120B25D1E7B81E8507C68B17239E565D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qdb8quhRR7C2Qb-svssXVkTojBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
Manifest number: 0470
Signing time: Mon 05 Aug 2024 04:00:45 +0000
Manifest this update: Mon 05 Aug 2024 04:00:45 +0000
Manifest next update: Tue 06 Aug 2024 04:00:45 +0000
Files and hashes: 1: Qdb8quhRR7C2Qb-svssXVkTojBg.crl (hash: tCKgnDk/skdmIc5F9adEfRO+iqwwOPKLeqnOfOedN04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:20:b2:5d:1e:7b:81:e8:50:7c:68:b1:72:39:e5:65:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6fcaae85147b0b641bfacbecb175644e88c18
Validity
Not Before: Aug 5 04:00:45 2024 GMT
Not After : Aug 6 04:00:45 2024 GMT
Subject: CN=40cc31dac2793d5b3eed7dd3bc558e2691823bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:18:4a:76:2b:30:69:10:37:1c:d4:ec:5a:
35:ac:89:37:fd:14:5e:a4:4a:97:2d:cf:8c:00:e0:
72:b3:b1:ba:cf:ff:4b:bd:12:bb:86:a6:da:30:f6:
8d:c4:a0:52:ac:b4:1a:d9:5a:66:cb:fe:30:96:2b:
62:7a:e8:74:10:9d:db:de:c9:4d:8c:78:7f:f2:8a:
05:3e:43:20:11:2e:df:27:2d:39:28:47:ce:81:bf:
88:57:9f:06:09:ec:54:1a:dc:53:22:fb:f2:f6:d9:
97:2f:e5:5d:08:03:0a:bb:a4:ee:df:ac:6a:03:c4:
c2:90:a9:31:bb:4f:97:0c:61:bc:2f:65:6a:ad:5a:
01:14:49:51:9b:bb:42:9f:23:70:74:80:40:67:28:
e6:81:0f:d4:70:d2:57:ea:e9:41:c0:ca:b1:9d:20:
f0:9f:5e:d9:16:53:4c:c0:6d:59:21:97:51:e7:38:
05:f9:6f:86:d6:97:d6:e9:99:dc:5a:52:0f:7f:cf:
ca:2b:a1:f5:08:2c:81:13:66:c5:89:8c:de:12:5f:
35:8a:73:69:c2:04:12:3a:fa:17:a9:2e:dd:f0:14:
0e:91:b5:70:98:a7:72:98:a4:62:c9:82:24:9d:12:
4d:0a:c2:d9:91:b3:ff:11:9b:c1:d5:db:32:3a:31:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:31:DA:C2:79:3D:5B:3E:ED:7D:D3:BC:55:8E:26:91:82:3B:C9
X509v3 Authority Key Identifier:
keyid:41:D6:FC:AA:E8:51:47:B0:B6:41:BF:AC:BE:CB:17:56:44:E8:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qdb8quhRR7C2Qb-svssXVkTojBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/69e65d-2d5f-4a26-9711-00a20675fe52/1/Qdb8quhRR7C2Qb-svssXVkTojBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:59:fd:ac:88:44:4b:d8:c8:79:1b:e6:df:bf:cc:73:4d:
3f:a5:16:21:ce:ea:46:fc:f2:a2:d7:27:c3:4f:60:ba:40:8c:
07:cb:02:63:4f:39:a3:c6:3d:71:cd:e2:fc:7b:d2:f6:9a:78:
4b:1e:e0:bb:ab:88:d4:10:47:dc:04:fe:dd:7b:ef:65:f0:b3:
a4:22:6b:d1:1f:a9:35:d5:ff:46:78:4c:f7:f3:01:fb:79:44:
1e:62:0d:33:5d:c9:2d:c7:1c:f6:85:7f:ac:78:90:9a:9a:ca:
57:4b:17:49:f4:c2:f0:e8:3c:cf:dd:35:33:c9:b5:6d:a1:a2:
a3:3e:5c:c5:f7:cc:c1:9f:27:a0:00:ed:44:7d:e0:da:a1:e6:
61:5c:c0:0b:96:c3:97:92:35:8e:60:05:9d:03:cb:f7:1f:1c:
86:8f:b8:0e:55:c1:dc:b7:5f:c8:a9:34:e8:ee:cb:71:96:94:
0c:0d:06:db:73:be:d7:22:d8:b6:ef:a5:d3:d6:e0:9f:60:dc:
ad:61:aa:e0:f1:ad:f2:17:80:c7:53:2f:76:a1:d0:82:1f:5a:
96:6e:96:60:ed:58:0f:b2:34:90:f1:f9:1b:e1:a5:34:91:df:
7c:d3:4d:da:5b:60:3f:cb:f0:c9:3e:e5:32:46:11:42:7a:d7:
da:69:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:40 2025 by rpki-client