![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft
File: jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft (raw, json)
Hash identifier: KjqmsB4cmeIbzazUnyFbCt8jTqHmwLDEu7i7rK++wag=
Subject key identifier: 7D:80:E4:D0:48:41:B8:00:E8:4F:18:44:95:77:4C:8A:EE:7D:5C:63
Authority key identifier: 8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36
Certificate issuer: /CN=8cac877ce4df6bd822e4a03e791bbd331e5a5136
Certificate serial: 018B92E9532FA5DD0C446F463A56002DC0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft
Manifest number: 08C0
Signing time: Fri 03 Nov 2023 02:00:46 +0000
Manifest this update: Fri 03 Nov 2023 02:00:46 +0000
Manifest next update: Sat 04 Nov 2023 02:00:46 +0000
Files and hashes: 1: jKyHfOTfa9gi5KA-eRu9Mx5aUTY.crl (hash: sCEd7PcYr5nMaz8fUwyQUD+NJ8D+7kHNfenqrJv0+l0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:e9:53:2f:a5:dd:0c:44:6f:46:3a:56:00:2d:c0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cac877ce4df6bd822e4a03e791bbd331e5a5136
Validity
Not Before: Nov 3 02:00:46 2023 GMT
Not After : Nov 4 02:00:46 2023 GMT
Subject: CN=7d80e4d04841b800e84f184495774c8aee7d5c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:5f:3f:2a:a8:3b:ff:1c:aa:7f:17:cf:53:
4c:92:be:e8:06:d2:49:be:d3:c3:1f:4b:05:00:ce:
fa:75:6f:c7:78:f5:38:b0:be:80:06:ad:9d:e4:44:
86:f6:85:3a:9d:a2:62:1b:16:7f:c0:c9:59:94:ab:
c3:f2:39:ad:9f:10:a4:02:2b:c9:24:fe:24:09:46:
56:44:3b:05:10:d2:61:d7:85:ee:fc:08:e7:bc:31:
92:4b:1d:00:04:2b:2e:8a:52:d4:7f:df:85:ce:03:
65:d5:ee:29:d5:74:0d:c8:6b:06:f6:9f:9c:97:63:
6a:84:8f:4b:03:61:26:89:60:42:42:31:e1:bf:de:
26:90:b0:4e:ce:20:66:4c:2b:45:37:ad:f9:d2:66:
7a:34:76:68:7f:bc:bc:a4:be:9a:d9:82:d4:cd:cf:
3c:ad:24:ab:01:99:89:29:02:a7:63:a0:e3:77:65:
8d:ce:73:55:ba:60:ce:53:0a:f4:47:f2:c2:0b:8e:
45:4d:e0:66:ec:cd:2d:1a:8d:95:49:d4:fb:39:26:
01:3e:d0:da:3e:51:00:0f:53:88:c0:a9:83:14:8f:
7f:f6:00:27:b6:9c:37:30:1c:65:5d:bc:6c:76:4b:
61:70:22:b1:fe:66:f1:ff:6d:c2:c5:0a:de:49:06:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:80:E4:D0:48:41:B8:00:E8:4F:18:44:95:77:4C:8A:EE:7D:5C:63
X509v3 Authority Key Identifier:
keyid:8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:36:4f:79:f3:97:08:fe:f5:e3:35:9b:07:7d:2f:af:1b:
e1:06:c7:df:9f:4c:7b:69:90:48:a9:6a:dd:33:69:8e:eb:e1:
6d:6e:f4:1e:71:9d:84:41:16:f5:f0:af:e6:f9:26:a2:35:c3:
88:f0:ef:9b:0b:b7:0a:81:db:24:0a:b1:87:0e:01:74:20:4f:
39:3a:52:41:41:d0:f8:83:5c:73:e8:6a:10:01:1f:14:05:d3:
ce:fb:83:3c:9e:c0:84:ae:9d:83:e6:ff:ec:5d:00:be:a2:5f:
99:e7:ce:0b:09:e3:18:7a:09:93:67:c1:7e:d4:a1:ba:5a:eb:
cb:43:b0:fe:a7:fd:1a:6c:e0:89:2c:dd:f1:e9:f2:35:a5:1c:
ea:5d:1b:fc:ce:a2:e5:e2:bd:76:b0:9a:56:eb:f5:eb:08:12:
f1:af:75:70:3c:8d:34:71:30:ec:54:f5:fc:77:b2:cc:05:3c:
36:24:dc:77:d6:62:78:1d:c9:c5:bc:62:82:79:51:a7:98:3a:
03:c5:c9:53:c8:ef:6f:51:40:79:10:08:04:f5:3d:b3:a8:73:
d2:6d:11:30:10:86:18:52:32:6b:b4:df:c0:b8:e0:a6:6a:e6:
8a:aa:79:66:05:a2:8b:a6:8b:d8:b6:f2:74:c0:5b:97:de:08:
0c:72:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:12 2025 by rpki-client