![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.mft
File: wBcTc3taOcnO5xGoCWO49NDAcgg.mft (raw, json)
Hash identifier: pb8ZYkNNpS07s0J9RungD9W/TxHOS5hzqRgqj9zbsPc=
Subject key identifier: 80:4D:7C:49:8C:18:86:78:97:68:4B:6F:05:40:B3:EF:67:B7:71:8F
Authority key identifier: C0:17:13:73:7B:5A:39:C9:CE:E7:11:A8:09:63:B8:F4:D0:C0:72:08
Certificate issuer: /CN=c01713737b5a39c9cee711a80963b8f4d0c07208
Certificate serial: 01831C921B74C8B8DD69517103F4E382A63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBcTc3taOcnO5xGoCWO49NDAcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.mft
Manifest number: 0AA5
Signing time: Thu 08 Sep 2022 10:08:00 +0000
Manifest this update: Thu 08 Sep 2022 10:08:00 +0000
Manifest next update: Fri 09 Sep 2022 10:08:00 +0000
Files and hashes: 1: wBcTc3taOcnO5xGoCWO49NDAcgg.crl (hash: FEglVXfalZ9YYHoXGf9UQWI7O4YVpg0bhaLfwi9zUZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:92:1b:74:c8:b8:dd:69:51:71:03:f4:e3:82:a6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01713737b5a39c9cee711a80963b8f4d0c07208
Validity
Not Before: Sep 8 10:08:00 2022 GMT
Not After : Sep 9 10:08:00 2022 GMT
Subject: CN=804d7c498c18867897684b6f0540b3ef67b7718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:b7:ef:b6:a5:35:2d:66:5f:e0:9d:27:19:
fd:fd:47:6b:85:ba:c5:41:1c:43:6f:4e:b1:b7:d7:
49:28:fb:26:92:5f:32:fb:c6:82:45:d7:5d:fe:dd:
a7:63:32:a3:c4:4b:32:b2:4f:e8:88:44:07:1c:14:
15:94:22:fc:5c:27:49:01:02:0d:5e:0f:22:4f:2e:
41:3c:a1:3c:a9:94:5c:c2:c7:63:3e:2f:34:1d:0d:
a1:51:1d:b5:2c:fc:05:74:b0:10:e4:8b:38:80:8d:
27:5e:68:98:11:a5:59:fe:1a:ed:17:1f:6f:f1:af:
83:84:1c:51:4d:e3:da:fe:8b:db:70:f5:60:1a:0f:
27:52:f2:e3:6f:84:d4:ff:c5:ca:53:5f:af:63:74:
dd:4f:9d:a0:e3:f0:1b:1a:0b:50:18:2a:cb:bd:a2:
ca:80:32:34:a3:53:c9:0c:79:7a:aa:94:8f:62:18:
94:fb:e7:49:88:25:88:aa:6e:65:fe:7f:05:0f:ef:
08:10:46:2c:f9:26:c3:f0:9b:b4:86:cf:ac:07:9e:
9e:d3:98:c3:39:84:44:b4:84:bb:4a:14:4c:b5:b3:
0b:88:10:5f:cc:7e:c3:5c:20:56:55:ef:29:c9:d6:
1f:78:d4:36:c5:66:45:a7:ed:50:db:6a:32:97:12:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:7C:49:8C:18:86:78:97:68:4B:6F:05:40:B3:EF:67:B7:71:8F
X509v3 Authority Key Identifier:
keyid:C0:17:13:73:7B:5A:39:C9:CE:E7:11:A8:09:63:B8:F4:D0:C0:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBcTc3taOcnO5xGoCWO49NDAcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ba2e57-88c5-48db-9179-a9b0d440bc7f/1/wBcTc3taOcnO5xGoCWO49NDAcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:67:e5:30:53:7e:1b:2d:3b:6d:5f:af:39:42:60:98:3e:ca:
40:6d:15:69:e9:a5:33:48:41:92:7e:99:58:3d:b7:87:57:1a:
59:17:5e:13:97:78:69:38:ce:60:ba:10:b4:c4:99:20:63:55:
af:c3:cb:ad:04:17:9e:4c:4d:50:bc:75:d5:36:cd:5e:b1:61:
97:96:6b:d8:cd:36:a1:f4:d8:a9:b5:be:23:78:c6:32:f0:c2:
3d:4e:dc:6e:10:56:7d:81:32:ee:77:81:c6:c0:16:93:79:6f:
69:4f:66:df:99:0f:21:a4:e6:2a:6c:59:a6:f1:1a:01:bc:57:
0b:d9:9f:3c:76:5b:8e:9e:26:86:40:8c:3c:c7:89:6f:e9:9b:
07:0d:1a:a6:2a:7b:68:35:9a:18:d6:79:3b:3b:87:15:2c:b2:
87:17:d5:a3:4c:c3:00:ec:e6:0b:35:51:fc:e9:2b:fd:60:37:
15:96:c0:3c:d7:31:9e:d7:69:2f:7a:e1:5f:f2:79:49:ba:1f:
01:44:2f:67:f7:6a:6a:6e:38:b8:12:c0:58:d2:b4:e5:be:68:
a0:cc:0e:8a:22:73:5e:70:b5:cb:60:1d:95:4c:94:5f:0e:ff:
07:f2:49:e9:30:ff:f5:86:32:ce:23:92:81:21:59:c0:e8:86:
d1:c1:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:32 2025 by rpki-client