![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
File: pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft (raw, json)
Hash identifier: qYKuzvBATXVtGOzRazVMnTrYXBchY5GnCIVmsjpC5nw=
Subject key identifier: 7E:6E:D6:76:CF:E0:EF:64:EA:92:B0:99:AD:CC:E2:5D:1E:ED:A0:A8
Authority key identifier: A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F
Certificate issuer: /CN=a70aeca11db73dcf4775e29a45742b5773e49b8f
Certificate serial: 018505A9BDD5F1A9A591DE50603100D67191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
Manifest number: 0750
Signing time: Mon 12 Dec 2022 09:28:08 +0000
Manifest this update: Mon 12 Dec 2022 09:28:08 +0000
Manifest next update: Tue 13 Dec 2022 09:28:08 +0000
Files and hashes: 1: pwrsoR23Pc9HdeKaRXQrV3Pkm48.crl (hash: Epzs/+x7UnyzSEvMvTUpJ24zh0VcCaFNbbFCpSJTVkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a9:bd:d5:f1:a9:a5:91:de:50:60:31:00:d6:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a70aeca11db73dcf4775e29a45742b5773e49b8f
Validity
Not Before: Dec 12 09:28:08 2022 GMT
Not After : Dec 13 09:28:08 2022 GMT
Subject: CN=7e6ed676cfe0ef64ea92b099adcce25d1eeda0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:04:9d:21:b1:81:1b:ba:ef:88:b7:34:db:
83:6e:84:4f:19:b8:74:02:8f:87:1d:2e:ea:d0:59:
22:7a:1f:13:ae:d2:0d:b3:c1:62:1d:06:c1:a2:b2:
9b:27:35:3b:69:81:e9:cc:37:c7:0a:94:53:66:a2:
c4:76:5d:80:01:9f:f4:d5:5e:ae:10:e7:ce:8e:cb:
29:8a:23:00:30:6c:e4:bb:5f:13:01:6b:e7:f6:62:
b1:35:92:2a:db:5e:38:43:a8:5e:b3:54:0d:5a:11:
cd:21:0b:9b:ba:79:95:0a:fe:96:ee:97:db:60:e9:
11:56:f9:5c:c0:77:25:dc:6d:7e:8b:63:66:87:82:
b9:a9:28:90:3a:f4:dc:43:8a:48:df:34:6d:c4:df:
c8:95:fe:80:27:3a:b6:fc:98:36:45:c7:38:84:49:
1c:58:7a:72:2a:e2:ee:0d:74:6c:94:fc:6a:c8:9f:
1f:c8:fd:bc:b7:a5:4a:28:c0:6d:be:88:30:22:74:
a4:03:78:23:a8:0c:f5:fe:3b:52:e0:b9:d2:94:4e:
b5:c5:12:24:ae:ad:dd:eb:8d:8b:93:2f:8d:c4:3b:
ec:13:8f:ed:80:15:01:6a:47:38:7e:15:fe:3b:59:
bf:05:3c:99:03:be:0e:37:38:c7:ea:e5:5a:33:cf:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:D6:76:CF:E0:EF:64:EA:92:B0:99:AD:CC:E2:5D:1E:ED:A0:A8
X509v3 Authority Key Identifier:
keyid:A7:0A:EC:A1:1D:B7:3D:CF:47:75:E2:9A:45:74:2B:57:73:E4:9B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pwrsoR23Pc9HdeKaRXQrV3Pkm48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/567051-f440-42e8-874f-c7245b1c5613/1/pwrsoR23Pc9HdeKaRXQrV3Pkm48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:9f:cd:dc:38:ab:5c:0b:d9:6e:d3:a8:1d:d2:e0:81:64:
93:9d:af:c3:f7:5d:7d:68:17:01:e8:59:38:ea:2a:06:ed:b4:
39:2a:be:ba:8a:b9:f4:dc:f5:0c:f2:e7:10:59:74:04:33:b7:
8d:d5:88:93:67:b0:af:2b:64:59:09:90:3c:c9:8f:6f:26:28:
96:e1:0c:d9:ad:0b:f9:92:6e:78:bb:a5:bf:e9:1a:7c:14:56:
ec:3f:59:aa:ce:4a:38:10:24:57:b4:04:7d:33:35:48:b1:20:
b6:a8:aa:d0:68:b3:48:c8:8c:ca:f2:da:2e:ea:77:68:c8:08:
f7:19:c5:d3:2a:0d:db:db:5b:0a:6d:66:08:c5:9d:fb:7b:95:
61:1b:12:e7:48:14:00:cc:8c:b1:22:c3:2d:b1:d1:15:25:b4:
2a:49:a9:cd:bd:db:ed:83:fa:63:b7:88:9e:be:b2:69:5d:61:
a6:58:92:83:ca:ce:0f:53:ff:76:b0:be:6e:5e:fc:14:4e:45:
5a:6c:16:45:1d:cb:af:9d:c8:c2:aa:d1:63:c9:de:bc:6d:a6:
bf:20:a2:5d:0c:c6:e6:85:6d:0e:83:96:82:31:b0:2e:23:00:
4b:3f:b8:48:94:92:7a:da:d7:8e:10:0d:6a:a8:e6:ab:19:87:
80:82:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:44 2025 by rpki-client