![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft
File: 4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft (raw, json)
Hash identifier: PebsL1On2+A73/dKLtLWlVSGL6B5/USJ7Zl1vBSDYd8=
Subject key identifier: 97:C2:9E:5F:24:2B:A2:F4:86:56:AD:0D:67:30:A7:AA:AA:66:CB:CC
Authority key identifier: E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
Certificate issuer: /CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Certificate serial: 018F74D488E362A92F5E4EAA850867FF22C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft
Manifest number: 116F
Signing time: Tue 14 May 2024 02:00:36 +0000
Manifest this update: Tue 14 May 2024 02:00:36 +0000
Manifest next update: Wed 15 May 2024 02:00:36 +0000
Files and hashes: 1: 4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl (hash: HOz+SXvyqKyn6dfwsRJjKHiU3prZX/Qxm6iwrAIlstY=)
2: wAX1lx2gu5lC7HPZ-0lc-z2a7EU.roa (hash: ZL9vAJ7ZKDurr49b3XjVTc1vx9luIVm9W8hU+1tDYj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:74:d4:88:e3:62:a9:2f:5e:4e:aa:85:08:67:ff:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32b7329fa83f3b48bb16560060d71d9b3024b66
Validity
Not Before: May 14 02:00:36 2024 GMT
Not After : May 15 02:00:36 2024 GMT
Subject: CN=97c29e5f242ba2f48656ad0d6730a7aaaa66cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:b7:c3:cb:67:7b:06:c3:20:1e:20:03:dc:
87:ad:a3:41:fd:b3:49:b6:e5:02:1e:da:34:4a:18:
70:b4:bf:2e:9a:5f:57:6a:d7:93:d6:d6:c4:bc:9b:
a9:fe:ec:58:a7:26:6f:97:f7:c3:41:71:c4:6a:7d:
bc:08:cb:f4:ba:a3:f9:58:46:8d:69:57:2a:65:47:
27:75:6e:55:9d:8f:64:c2:34:7a:39:e7:46:1c:85:
0f:93:ab:c5:0d:f9:ae:33:d0:0a:18:9d:08:c7:f5:
37:2f:ee:3f:d3:a7:e8:3d:c3:c2:b3:86:23:d1:e4:
ab:fb:f1:c7:3e:74:66:68:f3:1d:ca:b9:cc:6f:d8:
8e:2c:33:aa:bb:28:f3:52:78:ab:bf:34:3f:ca:e8:
4f:59:a6:e3:92:6c:0e:1d:c8:01:4b:84:52:63:1a:
d5:a5:c0:0b:9e:2d:89:8d:db:45:30:60:f3:a8:17:
c7:40:9c:19:d5:db:b3:39:8a:85:52:fe:2e:b2:06:
0a:c1:1a:7c:87:d2:b7:07:b7:3b:8c:bc:07:fe:d8:
d6:8a:ba:39:61:be:d5:14:18:b4:4c:0f:cb:a3:18:
9b:59:ac:e7:3b:6a:2a:45:b5:a9:de:0b:f0:70:b3:
cf:8e:6c:34:f1:6a:b7:2f:f7:69:81:43:e3:44:73:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:9E:5F:24:2B:A2:F4:86:56:AD:0D:67:30:A7:AA:AA:66:CB:CC
X509v3 Authority Key Identifier:
keyid:E3:2B:73:29:FA:83:F3:B4:8B:B1:65:60:06:0D:71:D9:B3:02:4B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ytzKfqD87SLsWVgBg1x2bMCS2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73f6f0-5794-49e0-b4f7-84327227eff0/1/4ytzKfqD87SLsWVgBg1x2bMCS2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:e7:bc:7a:b3:59:50:b0:f1:3e:37:2b:e6:f1:5a:da:90:
47:73:df:06:ca:fa:4b:41:12:f2:8b:ed:b3:9d:3e:2f:42:09:
90:a8:7a:c2:16:27:56:db:0d:d2:b5:dc:ba:ee:ca:21:08:d6:
16:fe:b3:87:f4:27:8c:b9:7d:0c:df:25:ce:09:cf:42:31:3f:
7f:6d:a1:79:e5:b1:70:18:80:ae:f3:ee:28:59:51:47:3e:2f:
49:c1:85:bf:86:ba:4e:40:4d:f2:f2:0c:37:45:a1:68:b0:ce:
f7:4a:ff:45:88:49:08:2f:cf:61:69:5f:8a:a3:b1:eb:bd:38:
7d:35:2b:4b:3e:50:e0:9b:9c:e4:e9:8b:ae:b7:86:72:65:b2:
b9:c0:77:a0:2f:2e:43:cb:6a:f1:f9:5e:4f:49:af:2e:3d:af:
f5:2c:d6:79:3d:f1:f5:8e:58:be:5a:d9:29:a8:20:35:b8:5c:
b3:9a:f1:9b:81:ed:4e:b9:a5:24:e3:79:0e:cb:01:ba:eb:29:
d3:f9:48:7b:5d:0d:bd:9e:d6:bf:01:f8:c5:cc:36:15:e7:9a:
72:63:e7:16:2d:10:bd:c4:13:d6:b4:ca:ee:2f:63:29:37:ed:
1d:77:97:e3:f4:ea:61:2b:06:f0:64:36:80:06:4a:32:6f:54:
4b:e1:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:15 2025 by rpki-client