![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.mft
File: 9rvrtVotIlharyDmL18NJF-aoVg.mft (raw, json)
Hash identifier: ZMJcLlgAdU+zqPyuntSE/cdgQqFsBYucxVlYCUbuWtU=
Subject key identifier: C0:49:5A:23:B2:80:AC:AB:9E:62:26:17:13:90:4B:9D:AA:8A:38:B6
Authority key identifier: F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
Certificate issuer: /CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Certificate serial: 018BB1D03AC25CA3709CD2F4DF5308282BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.mft
Manifest number: 0F7D
Signing time: Thu 09 Nov 2023 02:01:35 +0000
Manifest this update: Thu 09 Nov 2023 02:01:35 +0000
Manifest next update: Fri 10 Nov 2023 02:01:35 +0000
Files and hashes: 1: 9rvrtVotIlharyDmL18NJF-aoVg.crl (hash: yI83I0RO2bgl1rwUfESVN2lzx0iTady7NZuiQ0xa5RA=)
2: n6_H6qt1Td94TLRwfd5riZDJuks.roa (hash: wpYAcsSiRy6tdh93wrTKVRn2GEWih5D29Ls3PVCP3I4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:d0:3a:c2:5c:a3:70:9c:d2:f4:df:53:08:28:2b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Validity
Not Before: Nov 9 02:01:35 2023 GMT
Not After : Nov 10 02:01:35 2023 GMT
Subject: CN=c0495a23b280acab9e62261713904b9daa8a38b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:a6:79:1e:b1:d2:13:36:54:67:ad:b5:5f:
79:70:a7:31:b0:0e:c7:bf:b0:e7:1c:a7:d1:35:14:
97:88:a4:e3:2d:e4:9b:a9:d9:6e:4c:70:ea:16:7c:
7c:78:57:96:c5:36:48:5e:2b:ba:51:84:25:f6:ed:
f4:df:72:b2:87:c7:bc:2c:dc:1f:c9:9d:07:6c:f2:
06:b9:cd:ea:94:51:e3:88:41:6c:84:48:9b:9f:17:
d3:4b:fc:7f:61:83:64:15:b1:d7:85:e1:19:d1:50:
98:12:d3:9d:f5:06:80:bd:0e:96:4f:05:24:f2:dd:
ab:32:ff:27:f5:34:99:d9:a2:58:9a:db:0d:9d:a2:
4b:78:fe:16:fd:a8:0e:31:1c:ab:c1:eb:b8:42:3d:
92:ec:63:4f:7b:9d:74:7f:b2:a9:4e:85:38:36:45:
6e:8d:b0:ff:d5:04:c7:ba:d7:e1:c0:56:4c:66:eb:
c0:5b:fc:dc:95:d0:c6:48:aa:e1:c1:49:1f:62:1e:
86:8b:24:9f:72:bd:f8:ad:a5:41:26:3e:c9:ea:3d:
e9:0a:fc:ed:31:94:53:73:4a:f7:1b:fc:55:29:a3:
73:d0:f8:c7:9d:27:34:72:81:3b:0c:5a:35:7d:fb:
c9:62:41:ae:d7:0d:dc:9d:2f:42:68:dc:d2:7a:6f:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:5A:23:B2:80:AC:AB:9E:62:26:17:13:90:4B:9D:AA:8A:38:B6
X509v3 Authority Key Identifier:
keyid:F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0b:35:17:fd:d5:d0:54:81:da:5c:aa:7a:5b:57:fb:b1:1f:
b1:82:4c:0c:da:f0:65:ad:9d:2d:81:99:66:da:a5:dd:6a:4e:
49:e0:99:b9:0a:1c:37:58:26:dd:b5:2d:7e:80:93:28:5a:a8:
a4:40:0f:75:19:5d:f1:74:6f:e9:6c:61:e0:ab:e7:51:11:43:
48:53:70:5d:c0:d9:31:f9:a9:66:ac:d8:53:a2:ba:6b:63:90:
84:9b:ca:19:e3:17:91:f3:70:3f:99:aa:ad:91:7b:89:0e:e8:
be:30:00:3b:ea:d2:dd:72:fe:94:d4:31:34:e9:89:d1:3a:d1:
24:1f:40:be:49:7f:3c:2d:2c:fa:8d:7c:63:d6:23:69:8a:47:
ca:09:cf:ac:d9:55:de:f5:4e:44:39:21:54:3e:6d:16:4a:67:
ca:6e:e7:09:de:58:0f:98:fd:b5:17:8d:94:df:fa:76:cb:66:
2c:bb:ad:fa:42:a4:cb:15:78:95:e4:2a:6d:81:ae:43:d2:58:
8a:f5:65:9a:53:fc:1d:cb:0c:6e:28:17:43:72:c8:d6:31:3c:
1e:65:37:51:dd:f1:f1:ae:2a:c8:a7:0d:96:b1:ee:1f:6b:09:
df:a4:43:fa:ab:a7:79:c5:12:3f:aa:92:0e:5c:86:a5:40:a5:
a9:15:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:50 2025 by rpki-client