![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
File: AvgcN-ntJNCyDpTBhpDoiuSzEco.mft (raw, json)
Hash identifier: Dlfgl+Dk2EvYUS6A1nb+mGjXcVhvwF91Hd0qajJ/N+c=
Subject key identifier: C8:3C:9B:CE:62:41:9D:27:AD:4D:71:59:A2:5E:B4:9C:92:21:4B:82
Authority key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Certificate issuer: /CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Certificate serial: 0186BE950F1B4A5EB395C6967E459BCAA946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
Manifest number: 0526
Signing time: Wed 08 Mar 2023 00:18:05 +0000
Manifest this update: Wed 08 Mar 2023 00:18:05 +0000
Manifest next update: Thu 09 Mar 2023 00:18:05 +0000
Files and hashes: 1: AvgcN-ntJNCyDpTBhpDoiuSzEco.crl (hash: YhasW5B5zhL5oDwldkEoexTRKYJQkWAg2YJUgmkPThs=)
2: PUwPw3KSFyLWJo9myIwEPSrQKhU.roa (hash: FPQLMUuNob4U6IXg55ZIZ+BGxwV8Xx8teIuQaPIFvtU=)
3: vjdL_Br5Q1XcbzB11LZFu3Lw6p8.roa (hash: XkfWItMcZ5TVe7GXsG7KFlyvP/USQhyJ87BvYdyrL5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:95:0f:1b:4a:5e:b3:95:c6:96:7e:45:9b:ca:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Validity
Not Before: Mar 8 00:18:05 2023 GMT
Not After : Mar 9 00:18:05 2023 GMT
Subject: CN=c83c9bce62419d27ad4d7159a25eb49c92214b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:f7:fc:f6:88:3a:ad:7a:79:29:89:27:95:
7a:f5:66:15:e9:7a:79:63:c2:5f:25:a0:e5:ed:37:
3e:0e:23:ac:7a:77:01:4e:1b:b6:13:65:82:08:f7:
4e:f7:c5:4d:51:a9:f8:a4:a5:b3:44:bc:8b:16:d2:
64:6b:a6:bd:d8:52:11:d1:89:10:ba:2b:5e:58:34:
55:13:8d:bf:05:c0:ef:cd:93:d0:71:07:76:09:cb:
86:0b:4b:b9:19:70:e2:6d:46:a5:a7:a1:fc:56:35:
ac:73:3f:5e:f5:4c:5a:12:6f:43:e2:9a:bf:cf:c3:
e2:2c:a7:87:91:da:af:6b:83:c7:83:37:32:37:a9:
0a:1a:fd:47:dc:9a:95:e5:b7:29:be:41:1b:45:29:
24:f3:ae:0f:ec:a8:e2:0f:88:d8:0c:7a:70:61:7c:
b1:97:e6:67:92:16:2f:85:a0:86:f0:e4:39:26:d8:
9a:14:17:24:99:8b:2a:e6:9c:b8:dd:55:32:4b:2c:
f5:b4:24:95:aa:d0:22:f1:07:db:22:ae:80:76:80:
ba:01:81:b9:32:13:df:de:1a:c2:82:78:a1:f1:a0:
20:5a:7d:2e:af:74:03:6b:15:23:17:df:81:a4:ae:
5b:37:01:33:b5:3e:82:fd:cb:d0:12:5a:1c:5c:c8:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:9B:CE:62:41:9D:27:AD:4D:71:59:A2:5E:B4:9C:92:21:4B:82
X509v3 Authority Key Identifier:
keyid:02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cd:65:23:44:17:3f:99:23:50:67:a7:6c:16:22:4d:7a:ff:
d4:e2:b7:1c:41:82:24:88:c1:94:c4:0c:3c:e3:2f:b7:bf:e5:
c8:91:ce:a0:77:89:db:90:8c:e3:81:e3:ff:1b:c4:11:c8:be:
72:80:e2:d0:46:43:22:ec:8a:c4:d2:48:06:b2:1a:80:7f:db:
46:79:42:28:f3:60:6a:ff:66:c7:94:98:83:2b:15:e9:52:5d:
6c:f9:ca:d4:3e:e0:18:7e:25:be:ed:14:38:9a:9f:05:43:3a:
ff:34:ac:6e:9f:a1:8b:28:c8:6f:f2:06:d3:df:9b:d7:ce:85:
35:95:3f:e5:1d:0d:28:ad:e9:5e:d9:f0:b3:0d:c8:bd:79:cd:
c8:e1:1a:f9:b7:f1:8f:69:2b:bc:31:62:4b:55:c1:73:29:86:
d7:e5:cf:d8:c7:48:f5:75:df:bb:e8:75:86:bb:37:af:5e:a1:
54:1b:d3:0f:4c:c1:50:a6:b6:9d:56:85:d5:3b:97:18:97:49:
49:ae:75:5b:a6:1e:c2:aa:76:45:77:a9:46:18:c8:a0:f5:72:
17:c6:6d:2a:2c:dd:13:f4:08:31:51:58:84:9c:42:d0:12:e6:
4f:f0:a8:88:f5:7f:76:3e:b9:19:64:33:a3:ad:db:40:6a:d1:
6d:d7:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:50 2025 by rpki-client