![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.mft
File: FB1eMajPT2KIvoL_bQDrP34_BkM.mft (raw, json)
Hash identifier: b1xOpz8EZ+hjTq7m/5FyRQWbWgzXlwiw257HGDOHj+Q=
Subject key identifier: 96:7A:9F:53:C7:5A:32:2C:1D:35:CD:6F:E4:85:1E:7C:6F:CA:A0:66
Authority key identifier: 14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
Certificate issuer: /CN=141d5e31a8cf4f6288be82ff6d00eb3f7e3f0643
Certificate serial: 018731A5AFB1A984199859800F42C052BE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FB1eMajPT2KIvoL_bQDrP34_BkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.mft
Manifest number: 049F
Signing time: Thu 30 Mar 2023 08:32:34 +0000
Manifest this update: Thu 30 Mar 2023 08:32:34 +0000
Manifest next update: Fri 31 Mar 2023 08:32:34 +0000
Files and hashes: 1: FB1eMajPT2KIvoL_bQDrP34_BkM.crl (hash: lmjRrilMQimM9hZu/qmHjIgfAkHsVhwdi//uO+zJBWE=)
2: td8hoTuyO07I_eEa2kZ9AMYSkCg.roa (hash: GGF+x4SPeAkw3HrlmwL2c8Y8yUdRPZy1fHafdKNvnEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:a5:af:b1:a9:84:19:98:59:80:0f:42:c0:52:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=141d5e31a8cf4f6288be82ff6d00eb3f7e3f0643
Validity
Not Before: Mar 30 08:32:34 2023 GMT
Not After : Mar 31 08:32:34 2023 GMT
Subject: CN=967a9f53c75a322c1d35cd6fe4851e7c6fcaa066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:b1:46:f5:07:f6:5e:6b:d0:a8:6b:b7:58:
ca:b1:31:2c:aa:56:79:fd:4e:59:1a:f3:0f:ed:f5:
f0:43:2f:66:2f:98:12:23:7d:2a:8f:1a:90:bd:c6:
2e:61:40:20:79:e2:ac:7e:cf:43:01:63:be:a4:71:
f9:f6:bf:fc:f9:ff:50:de:18:c7:e4:b7:b4:e3:1d:
fa:40:05:c3:20:57:56:da:1a:61:b2:f7:6e:7a:1e:
d8:00:5d:0e:6b:6f:dc:9e:e0:80:02:21:85:aa:4f:
7e:ed:d1:3e:c6:39:7a:9b:9b:ca:19:ff:42:83:e0:
b5:d2:de:82:2c:2b:be:fc:ed:3e:0b:c3:d5:9c:09:
8b:26:c9:c0:50:4c:a4:e5:27:38:94:3e:ac:b3:28:
dd:1e:5d:3e:0e:81:a2:d3:b4:ef:2e:d5:41:83:68:
c0:3d:da:6d:54:a9:bb:f3:9b:72:25:86:27:47:f2:
35:03:1d:92:9f:1c:4a:b1:2d:7e:86:fe:1e:ad:76:
37:3e:6d:2b:e3:6b:14:1f:48:fc:25:2d:df:69:cd:
2d:f2:c6:23:de:df:fe:33:3f:3b:5c:47:43:56:9f:
64:1b:28:84:df:ec:6b:cb:54:8c:d7:30:78:19:4e:
6c:68:37:7f:d0:c8:21:75:c0:10:78:7b:57:00:57:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:9F:53:C7:5A:32:2C:1D:35:CD:6F:E4:85:1E:7C:6F:CA:A0:66
X509v3 Authority Key Identifier:
keyid:14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FB1eMajPT2KIvoL_bQDrP34_BkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7a:44:9c:32:b4:13:51:e1:a0:51:81:47:00:13:3f:68:45:
04:3d:2f:49:79:9b:00:55:09:9d:31:c0:32:ea:ee:67:f7:91:
2b:6a:6b:a7:ff:7e:83:77:70:ff:03:00:29:48:e4:fc:df:d8:
0b:10:c4:50:36:85:55:6d:fc:cc:17:61:dd:81:b1:58:d7:1b:
f2:92:27:4e:bf:75:39:f0:3f:d2:85:48:f0:a8:13:73:19:11:
bf:e2:70:46:0b:2a:5e:ad:cc:15:01:27:3b:b6:e1:41:78:73:
09:01:3f:3d:35:13:cf:8b:ae:44:ea:9f:dc:52:3f:89:22:49:
63:42:5a:40:bc:d6:c0:00:26:51:de:75:6f:38:f9:f8:b3:33:
e5:37:43:1b:97:5b:fe:bd:20:25:24:55:72:31:60:04:92:71:
99:f1:26:c8:f8:76:7a:7b:dc:73:a0:fb:aa:96:41:e5:4d:aa:
f7:40:1d:45:2f:88:d7:2e:5c:39:22:cf:a7:83:da:b9:1f:cf:
18:8f:4f:f8:ce:9a:9f:c8:39:f5:3b:c1:2f:d1:8a:1f:e1:56:
ec:a0:61:d0:f9:3c:94:6b:1a:7c:ab:56:2e:d1:2d:7a:74:49:
23:e8:7e:ca:c6:26:34:84:6c:d1:ec:b1:9d:d5:a6:34:ac:3f:
8d:c6:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:32 2025 by rpki-client