![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.mft
File: rbm2KP0zCT-irAiQ7hzlVcuoJnE.mft (raw, json)
Hash identifier: tMWSX+g0RaKYQ3lT0uTq0arO2B7aQJl4d/Ym+Xqe5rM=
Subject key identifier: F8:7B:F1:AB:D9:C2:B7:9C:0D:28:6A:5D:44:13:1C:6E:21:EF:81:1E
Authority key identifier: AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71
Certificate issuer: /CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
Certificate serial: 018EE622A05E89447D80344E40661C75E8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.mft
Manifest number: 08B3
Signing time: Tue 16 Apr 2024 09:00:12 +0000
Manifest this update: Tue 16 Apr 2024 09:00:12 +0000
Manifest next update: Wed 17 Apr 2024 09:00:12 +0000
Files and hashes: 1: EoAAuA4MAV0SUm4ZAvreL-1cNuM.roa (hash: FmE66bdgc7GJJeDaRYYG3xjJP5L6FlhneUUFjoT14Sk=)
2: rbm2KP0zCT-irAiQ7hzlVcuoJnE.crl (hash: ltC5+zpaLMffVxeSdBY3yiaXilqQb7dQFin/Ci0ZGM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:22:a0:5e:89:44:7d:80:34:4e:40:66:1c:75:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb9b628fd33093fa2ac0890ee1ce555cba82671
Validity
Not Before: Apr 16 09:00:12 2024 GMT
Not After : Apr 17 09:00:12 2024 GMT
Subject: CN=f87bf1abd9c2b79c0d286a5d44131c6e21ef811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:6f:5b:b0:d7:ca:7c:25:25:e1:ed:aa:24:
ed:67:a7:80:12:0a:78:c7:73:dd:b7:34:63:cd:3b:
9f:2c:70:17:bd:11:54:30:ba:94:a6:9e:50:09:3f:
6a:12:ee:b2:c0:2a:15:54:03:b2:a1:64:74:29:ef:
b4:33:22:38:86:c0:6f:2e:6d:77:1d:8f:ff:f9:15:
b4:3a:9f:98:ce:8a:0a:24:41:8b:a2:78:b6:b1:8c:
e2:d4:0c:8f:15:e2:11:da:d6:46:93:74:e2:05:b1:
45:95:e3:55:59:48:eb:17:f1:86:85:c0:5c:43:cd:
2f:6f:dd:e5:80:cf:e8:83:bf:a7:61:41:9b:09:c4:
4b:d4:8d:73:c3:dc:45:89:9b:3c:a8:05:3e:ef:99:
33:3d:f4:5a:5f:0f:8e:81:fd:3a:53:09:8a:fa:5a:
ed:35:17:61:d5:71:a2:c0:32:ed:36:4a:fb:95:11:
a6:d5:0e:c4:5d:0b:ee:a4:02:f5:d2:74:03:4f:1d:
dc:de:07:1f:24:a7:33:4a:8d:b5:bb:21:14:96:e0:
8c:d4:a9:5b:3b:82:52:d1:ec:fd:c7:08:75:38:77:
35:b5:c3:88:16:0c:8d:7f:e0:8d:93:69:cb:ee:cb:
2c:9d:fe:80:74:fb:4a:5d:f1:14:a3:95:05:80:9b:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:F1:AB:D9:C2:B7:9C:0D:28:6A:5D:44:13:1C:6E:21:EF:81:1E
X509v3 Authority Key Identifier:
keyid:AD:B9:B6:28:FD:33:09:3F:A2:AC:08:90:EE:1C:E5:55:CB:A8:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbm2KP0zCT-irAiQ7hzlVcuoJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d75206-3b0e-45e6-b0aa-37d41c5b81bf/1/rbm2KP0zCT-irAiQ7hzlVcuoJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:40:cf:36:ea:89:28:ac:52:45:d4:08:52:63:61:93:09:
4f:e1:26:6e:76:2b:74:59:cb:56:a4:e4:f3:32:53:da:68:e6:
6b:57:60:63:b2:84:da:cd:5a:c1:e2:5f:bc:a0:c2:06:a0:fe:
1b:de:07:28:ba:b8:93:b8:e2:0c:f7:53:a5:a1:05:1d:b7:59:
29:55:c9:65:86:b2:98:38:e9:78:34:a3:2f:c4:ec:e4:27:85:
1b:2f:eb:bd:91:fe:83:55:b2:93:26:79:04:98:21:a0:c4:c0:
27:a9:b8:28:50:07:ef:c0:43:4c:8a:f7:c2:29:4e:0d:3d:7c:
8d:49:e9:3a:0c:8f:4f:39:85:26:aa:5d:72:5e:bf:5f:42:01:
25:27:63:c1:f0:10:3a:1e:eb:93:fc:ad:44:7f:3a:ba:83:0b:
08:d5:e5:8d:04:80:f5:ba:c9:0a:24:7e:bd:0e:98:be:0b:43:
4c:80:40:fa:aa:07:40:04:ca:24:0b:c4:06:1e:b0:a9:15:8d:
bb:f5:5f:4b:53:0a:1a:c2:34:05:75:ba:98:4a:19:7d:9a:da:
cf:f6:77:18:55:ab:c9:84:d9:14:a7:e5:7e:3e:f8:18:e1:6c:
b7:4a:e8:35:ee:ac:1b:41:42:c8:c8:2b:8a:7b:e2:3e:e9:ff:
58:43:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:09 2025 by rpki-client