![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/5Kur036x_WQwumQPmMNWiNWbXtc.mft
File: 5Kur036x_WQwumQPmMNWiNWbXtc.mft (raw, json)
Hash identifier: cA8MxUbMDhiws2BBNn/t/9C1ZHjhUGPgg2a18/EQEmc=
Subject key identifier: AA:60:F2:42:09:01:19:E1:11:88:A4:94:3D:61:66:BA:16:16:D7:25
Authority key identifier: E4:AB:AB:D3:7E:B1:FD:64:30:BA:64:0F:98:C3:56:88:D5:9B:5E:D7
Certificate issuer: /CN=e4ababd37eb1fd6430ba640f98c35688d59b5ed7
Certificate serial: 0184ADE8A9AB579880EB98F6B6845C6A18DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kur036x_WQwumQPmMNWiNWbXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/5Kur036x_WQwumQPmMNWiNWbXtc.mft
Manifest number: 0B8D
Signing time: Fri 25 Nov 2022 08:30:16 +0000
Manifest this update: Fri 25 Nov 2022 08:30:16 +0000
Manifest next update: Sat 26 Nov 2022 08:30:16 +0000
Files and hashes: 1: 5Kur036x_WQwumQPmMNWiNWbXtc.crl (hash: JNeSxFEELDnrJuycajNzN10bcf/88j1GXehmCrKia1k=)
2: 7boQ9FutEoYaccYb3LnAa2MM0QM.roa (hash: EKj6uVuHVJEt5mWYav7wa2uilIF0eoqHHHKCAV35AhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:e8:a9:ab:57:98:80:eb:98:f6:b6:84:5c:6a:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ababd37eb1fd6430ba640f98c35688d59b5ed7
Validity
Not Before: Nov 25 08:30:16 2022 GMT
Not After : Nov 26 08:30:16 2022 GMT
Subject: CN=aa60f242090119e11188a4943d6166ba1616d725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:e1:20:a5:35:60:53:10:53:64:65:3e:69:
b0:61:0d:5c:db:07:88:1e:a4:66:51:d3:b1:52:6f:
d0:b7:79:95:61:86:83:d1:01:cf:ab:1a:31:ee:4e:
8f:0d:69:b4:eb:a2:53:f4:92:07:81:44:47:f5:04:
a6:5a:92:e7:b0:f9:24:c7:8c:c3:48:29:a9:59:49:
80:82:9a:91:94:65:45:1b:fa:27:a3:02:0b:ff:bb:
aa:60:54:24:a0:05:05:bc:62:d9:36:b0:94:31:ae:
a3:65:97:a3:a7:4e:dc:2f:bf:4b:ab:8d:8f:56:48:
3f:cc:a7:6e:70:76:7a:55:55:2f:ac:ec:13:9c:f8:
76:b6:31:67:58:0c:df:ac:38:1e:d1:0c:69:a5:5c:
e1:ae:d0:ca:87:20:76:14:37:a0:fd:3b:33:66:40:
87:81:bd:50:96:f7:dc:ca:13:2a:64:ca:bb:7b:db:
a5:fb:a9:b5:9a:93:09:01:ac:86:26:92:9f:06:6d:
4f:ff:ed:1f:62:5b:6b:ef:24:ac:94:2d:1c:5f:18:
64:91:97:af:2a:bc:c4:96:e5:17:d4:ab:cc:e8:8d:
91:06:27:cd:d9:a5:9d:ea:81:ae:00:cf:b1:6b:18:
eb:96:fe:8c:99:5c:c2:27:63:84:9f:58:0c:61:16:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:F2:42:09:01:19:E1:11:88:A4:94:3D:61:66:BA:16:16:D7:25
X509v3 Authority Key Identifier:
keyid:E4:AB:AB:D3:7E:B1:FD:64:30:BA:64:0F:98:C3:56:88:D5:9B:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kur036x_WQwumQPmMNWiNWbXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/5Kur036x_WQwumQPmMNWiNWbXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f914f1-cf36-4c86-afab-319b7e612203/1/5Kur036x_WQwumQPmMNWiNWbXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:09:5b:4f:41:a0:f7:c7:94:80:00:f0:8c:d8:a1:ca:4e:3d:
02:95:1e:07:00:fe:97:80:1d:99:d0:b3:13:6f:26:a3:b1:c1:
6d:89:4b:d6:65:9a:eb:39:a9:0c:4b:00:d3:b1:20:75:76:17:
7a:95:c8:68:b4:73:2f:f7:89:fe:97:3a:d0:e9:a0:ed:d0:63:
dd:d4:9d:f8:60:28:2c:e5:d9:99:d1:10:16:66:97:18:f0:d7:
f6:73:dc:85:89:a1:2b:51:94:a9:fe:87:df:15:4d:2e:f9:1d:
6d:90:c5:1f:47:c6:5a:9d:9c:8c:aa:bf:25:32:56:0b:b3:e2:
a7:23:87:35:af:0b:b4:6f:36:fd:fa:7d:f5:13:9a:a4:f8:70:
e1:e5:56:5a:d3:f8:c5:9e:c0:e7:11:2a:1b:fd:b0:ab:23:0b:
74:b7:e4:69:61:7f:1a:80:2c:71:59:df:0e:a8:3b:14:ca:96:
af:55:49:81:a1:93:c9:95:49:3e:9b:b2:ba:6f:7e:62:d6:a3:
b2:98:c2:23:5f:8a:31:81:d4:aa:72:0b:c3:92:0e:7d:fe:83:
e8:a4:5a:16:19:65:2d:b3:fc:40:9d:24:47:72:6f:53:f2:2d:
35:e1:a5:38:e3:a1:2a:be:85:89:52:64:44:da:07:3c:2d:53:
e8:fc:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:57 2025 by rpki-client