![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
File: 4DGcxo0CrzwGK842pc0na2lwdyg.mft (raw, json)
Hash identifier: lS8xoL7ytVvI0CLbpe86LXSJT+qllxUbvb/8LDFtGmo=
Subject key identifier: B6:F4:B5:B5:36:4D:14:24:7D:B2:85:36:F0:8B:BD:44:92:FF:D4:2F
Authority key identifier: E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28
Certificate issuer: /CN=e0319cc68d02af3c062bce36a5cd276b69707728
Certificate serial: 019191FE135F8D02D91321BE3692CBEB7018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
Manifest number: 0E18
Signing time: Tue 27 Aug 2024 04:00:33 +0000
Manifest this update: Tue 27 Aug 2024 04:00:33 +0000
Manifest next update: Wed 28 Aug 2024 04:00:33 +0000
Files and hashes: 1: 4DGcxo0CrzwGK842pc0na2lwdyg.crl (hash: ugix6mGLbXiW2/uC1wECvaEc1jPCWO8Tb8WfmGFqE3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:91:fe:13:5f:8d:02:d9:13:21:be:36:92:cb:eb:70:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0319cc68d02af3c062bce36a5cd276b69707728
Validity
Not Before: Aug 27 04:00:33 2024 GMT
Not After : Aug 28 04:00:33 2024 GMT
Subject: CN=b6f4b5b5364d14247db28536f08bbd4492ffd42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:bf:76:34:cd:93:2c:88:6f:55:c5:e0:3c:
c4:c5:4a:96:cc:97:ec:c2:3f:d9:31:1a:eb:d4:69:
c8:ef:0d:c3:0e:b1:5f:0a:68:a0:d7:b3:b5:eb:72:
aa:7b:13:57:a4:5d:25:3c:d0:e2:86:c1:98:ba:ed:
20:c9:88:23:2d:83:4e:2f:c0:70:9c:f2:e5:cd:5e:
f2:15:70:19:6c:fa:7c:17:12:6c:c0:25:81:2d:9f:
16:e6:8e:a0:2b:48:39:a2:38:66:4e:30:d7:6d:f8:
2c:d9:dd:f8:6a:5f:11:b9:b3:5d:21:59:6a:6a:c1:
a0:f7:7f:26:db:55:82:aa:e2:7b:13:d8:e3:4f:3e:
30:26:8c:05:bb:bb:37:f6:10:c2:76:77:44:2d:ca:
36:8d:bc:a8:e8:7d:30:04:26:33:2e:bb:0c:fa:5d:
3c:a2:cd:21:bd:97:27:fe:2f:54:02:da:fe:7e:ba:
be:74:7e:05:e7:1a:e0:32:5f:54:6d:78:1a:a7:61:
9a:0d:6f:d2:55:57:64:b4:77:6b:d0:9e:b6:c3:f7:
75:b2:40:af:77:46:d8:64:f9:41:7e:e6:f4:01:07:
54:03:4f:ae:7a:b8:31:f6:30:c5:a5:55:09:8a:f2:
25:0b:70:b3:3b:cb:f7:f8:52:58:ce:a9:f9:52:a7:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:B5:B5:36:4D:14:24:7D:B2:85:36:F0:8B:BD:44:92:FF:D4:2F
X509v3 Authority Key Identifier:
keyid:E0:31:9C:C6:8D:02:AF:3C:06:2B:CE:36:A5:CD:27:6B:69:70:77:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DGcxo0CrzwGK842pc0na2lwdyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e089dc-222f-4681-b01b-916a1b5dc3e8/1/4DGcxo0CrzwGK842pc0na2lwdyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dd:7f:ee:2a:30:5f:b5:c4:72:76:71:6b:0d:d7:7f:d7:cb:
f1:58:dd:b6:4f:4d:6a:88:72:66:46:2f:df:29:74:e9:03:89:
2a:44:eb:a2:fd:39:a1:f7:00:a7:8a:c2:a8:78:03:6a:5a:e2:
dc:98:45:02:ec:68:39:33:82:d4:35:ae:07:85:ff:9b:5b:99:
b6:fd:d4:a4:ed:0e:ab:81:e3:46:ee:4c:25:b2:eb:22:b9:4c:
74:ba:de:d6:0b:c4:8f:ab:4a:bc:12:ff:80:d6:ec:ae:2d:46:
c8:c6:ac:46:97:7c:7e:d0:92:93:d8:71:1c:db:42:34:5a:fc:
30:97:b1:f9:d0:8b:81:dc:cc:91:b8:3b:d8:8d:78:71:d5:b8:
73:26:a0:6a:4f:c3:ad:8b:a8:9e:e4:0e:8e:fd:b3:50:db:83:
99:d5:eb:ac:9f:1c:e3:c2:01:6d:44:d3:1f:ce:2b:fc:bd:58:
5f:bd:80:12:d0:d4:55:73:71:ae:b0:63:00:fb:ce:f8:1f:5d:
74:65:1f:c5:fa:6c:b8:fd:27:54:c0:58:bf:9f:f0:fe:eb:a6:
eb:59:13:af:3f:7b:fb:d5:02:f5:7d:2b:4c:63:2d:55:f2:ee:
58:38:83:9d:44:7f:dc:d3:34:d0:46:02:e0:a8:dd:e0:03:5f:
1a:b8:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:11 2025 by rpki-client