![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/Aec0OxvXot6Ro-3ozJccVYCiHRA.mft
File: Aec0OxvXot6Ro-3ozJccVYCiHRA.mft (raw, json)
Hash identifier: GNUhi6QNEq0LAlqWQ0xqiK+4hsSs6sNrG9uHUpDsW7w=
Subject key identifier: B8:EF:81:06:42:BA:E8:41:F3:C7:33:16:06:F7:1D:C7:B1:7C:FA:1A
Authority key identifier: 01:E7:34:3B:1B:D7:A2:DE:91:A3:ED:E8:CC:97:1C:55:80:A2:1D:10
Certificate issuer: /CN=01e7343b1bd7a2de91a3ede8cc971c5580a21d10
Certificate serial: 01831BAD2E200C0EA14504133ED78B03F488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aec0OxvXot6Ro-3ozJccVYCiHRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/Aec0OxvXot6Ro-3ozJccVYCiHRA.mft
Manifest number: 0AA4
Signing time: Thu 08 Sep 2022 05:57:57 +0000
Manifest this update: Thu 08 Sep 2022 05:57:57 +0000
Manifest next update: Fri 09 Sep 2022 05:57:57 +0000
Files and hashes: 1: Aec0OxvXot6Ro-3ozJccVYCiHRA.crl (hash: 0NGh7jxbue+E9y4LilQPDyDikTD11YSqmpJnz/Dxbq0=)
2: CuPqK6F1G0Zi0CzXbyGkCmhYnQ8.roa (hash: I6iKBWPbnYNkVG932V94IeOPBpjuPmVWpW6kS2kSh4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1b:ad:2e:20:0c:0e:a1:45:04:13:3e:d7:8b:03:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7343b1bd7a2de91a3ede8cc971c5580a21d10
Validity
Not Before: Sep 8 05:57:57 2022 GMT
Not After : Sep 9 05:57:57 2022 GMT
Subject: CN=b8ef810642bae841f3c7331606f71dc7b17cfa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:af:50:6f:86:bc:c8:72:64:00:60:5b:5f:
3b:5d:dd:85:e1:e2:f3:1f:da:38:a7:55:ff:1e:c6:
14:37:40:85:db:6e:f2:a7:cd:e7:05:62:79:21:6b:
18:5b:69:c1:5a:c3:15:82:c1:40:31:ee:0f:85:b3:
b3:4a:ee:90:eb:6d:2a:62:81:66:0d:1c:dd:aa:b2:
64:a5:bf:77:6a:01:5e:1f:b5:f6:43:15:21:31:d6:
bd:23:a7:9a:26:93:82:a9:09:72:cb:7c:9c:bd:b3:
79:4d:ac:ef:88:b0:b0:e3:36:5f:7c:c6:ca:59:e6:
cf:60:88:41:30:54:b5:ef:14:c6:e1:4d:cc:2f:30:
5a:71:a7:07:b9:ef:1a:22:c0:ad:db:9e:e4:ad:56:
2a:22:70:99:7b:92:9d:ef:a2:c5:77:90:e9:5a:74:
ac:d9:78:d4:1f:04:9b:75:ec:0b:5a:c3:7c:24:33:
f8:89:25:78:8f:0e:60:29:ec:07:4d:1e:32:72:26:
2c:8a:0d:96:75:cc:ac:4c:26:9a:18:46:20:6f:c5:
06:21:5c:0b:73:f1:8f:55:60:a0:94:d2:69:9d:90:
d3:98:e8:12:1c:38:bd:d8:0f:37:23:e5:1b:f7:d3:
b5:c9:13:fd:e1:2b:84:ea:4b:6f:ee:57:87:c4:75:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:81:06:42:BA:E8:41:F3:C7:33:16:06:F7:1D:C7:B1:7C:FA:1A
X509v3 Authority Key Identifier:
keyid:01:E7:34:3B:1B:D7:A2:DE:91:A3:ED:E8:CC:97:1C:55:80:A2:1D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aec0OxvXot6Ro-3ozJccVYCiHRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/Aec0OxvXot6Ro-3ozJccVYCiHRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9141d0-07ec-446b-8ac4-0d1e8dcf38cd/1/Aec0OxvXot6Ro-3ozJccVYCiHRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:d7:d8:67:26:a3:1c:80:1c:a7:47:3c:d2:21:44:71:c3:
60:82:57:65:a3:f3:1e:e6:86:51:1d:a4:f4:bc:bc:09:6d:b3:
32:08:ae:c5:01:ee:e1:6c:ea:65:07:e5:27:61:f9:e8:f2:13:
d2:f9:58:e8:13:2e:bd:c4:bd:c9:75:ff:2c:ec:d6:fa:cc:e3:
22:e3:4c:ac:fd:b8:69:30:93:fc:57:30:d1:c5:be:23:43:6f:
4a:5f:25:22:3e:2d:fa:df:b6:6a:85:33:7f:f7:54:1a:3d:39:
88:7b:1e:0b:84:cb:28:b5:74:02:57:31:09:49:b6:09:f2:4c:
1f:18:63:f0:35:63:0d:8a:94:e2:8f:ee:c1:d3:9d:97:92:c1:
5a:db:ac:e1:51:71:db:3d:da:f6:53:80:fd:2b:e8:7c:67:70:
9e:5d:30:25:27:d0:93:3a:cd:c1:2e:5a:81:ce:6d:8d:de:cc:
cc:74:e7:fe:e2:e3:2f:0b:ea:5a:14:7f:8c:5f:fe:eb:36:17:
70:6d:14:31:a6:5b:f2:df:42:7b:79:67:ad:34:cb:d7:dd:01:
76:12:12:19:e6:61:18:1b:4e:2d:af:9e:e5:92:6b:0e:67:f7:
27:a9:74:1a:a9:c0:5f:d6:7f:fd:f4:e6:7e:8f:48:67:54:45:
48:e7:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:29 2025 by rpki-client