![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.mft
File: rYWtDKSTs7wGyZuhpK71sHncnvs.mft (raw, json)
Hash identifier: PxRUACpbHNTI8+fq9ZkxVbbq3ADhiIV6tAUVUO3TgDU=
Subject key identifier: 71:60:BA:1A:12:84:01:97:90:C4:31:FF:D8:11:02:52:07:D2:88:A4
Authority key identifier: AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
Certificate issuer: /CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Certificate serial: 01932F0D7CC51625F5E241B957AD040873D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.mft
Manifest number: 12ED
Signing time: Fri 15 Nov 2024 09:00:33 +0000
Manifest this update: Fri 15 Nov 2024 09:00:33 +0000
Manifest next update: Sat 16 Nov 2024 09:00:33 +0000
Files and hashes: 1: cv3ir0aVwg5o-KzIhdEuHfND2u4.roa (hash: g4Ap629n331/KJCQZZEBIV4IL9Vvb7wAJMCzjupgrHc=)
2: rYWtDKSTs7wGyZuhpK71sHncnvs.crl (hash: PkMpXQO1reNp0qqtfx1CISDp0DBUmPD3pnLBU6s9TAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:0d:7c:c5:16:25:f5:e2:41:b9:57:ad:04:08:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad85ad0ca493b3bc06c99ba1a4aef5b079dc9efb
Validity
Not Before: Nov 15 09:00:33 2024 GMT
Not After : Nov 16 09:00:33 2024 GMT
Subject: CN=7160ba1a1284019790c431ffd811025207d288a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:cd:b1:cf:90:fd:b4:00:21:dd:b8:5a:7b:
af:83:18:af:1f:3e:be:96:1e:eb:a9:c8:bc:d5:ee:
9c:a3:e3:fd:81:82:5e:55:2a:a3:fb:5a:dd:e8:2d:
99:e9:af:d4:21:1c:f5:fe:46:49:f5:66:19:b7:e5:
67:cb:df:f8:38:85:24:8c:5b:50:c7:e5:65:4d:b1:
ba:93:20:cb:1b:d8:dd:60:90:59:8b:94:0e:54:76:
9e:93:36:28:47:2e:8b:38:5c:d1:a9:fe:47:e8:d7:
ee:8d:c5:3f:3a:58:d9:00:75:ba:76:0f:e0:95:6f:
9f:30:c6:69:e1:3c:7b:3c:e7:20:66:94:cc:10:58:
03:f3:e8:c8:9c:e7:e0:1b:ca:ed:e4:61:5a:7f:e8:
af:d6:0a:b7:56:fa:d0:c9:2c:33:32:6d:f7:3b:45:
cf:b9:df:d5:9a:b7:db:44:7c:97:ba:61:14:e6:d5:
92:2c:1a:12:70:86:95:f9:e5:f8:37:2f:40:02:97:
3f:75:fa:d8:7e:e6:9b:60:9e:02:cf:c6:2d:99:5e:
94:db:8d:24:7b:ea:8b:b1:de:18:a1:7c:f0:46:3e:
17:eb:bb:52:ce:d3:6f:c4:be:d2:f8:e4:ee:d8:45:
3c:3b:d4:c9:ec:6a:c2:b4:0b:e2:9f:63:bf:52:b9:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:BA:1A:12:84:01:97:90:C4:31:FF:D8:11:02:52:07:D2:88:A4
X509v3 Authority Key Identifier:
keyid:AD:85:AD:0C:A4:93:B3:BC:06:C9:9B:A1:A4:AE:F5:B0:79:DC:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYWtDKSTs7wGyZuhpK71sHncnvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25d6a1-b4be-4e6d-b51f-1664c012dbc5/1/rYWtDKSTs7wGyZuhpK71sHncnvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9a:3c:d0:f9:de:e4:35:21:7b:3c:27:bb:35:c3:5c:af:24:
22:85:dc:09:a1:81:8d:1b:f6:00:be:9d:dc:c0:2d:82:52:b1:
43:9d:8a:b8:a0:f8:0a:b2:72:74:e9:43:e7:78:71:42:89:76:
68:32:56:de:83:90:60:e8:56:44:d4:17:6a:bd:e3:07:7e:82:
61:67:7b:d5:ec:d1:5a:cc:93:15:ee:d0:fd:8a:43:00:60:28:
20:7e:ff:3e:66:bf:1a:1d:be:e9:c7:b6:95:fd:d5:2d:47:90:
58:5c:2c:82:b9:5b:14:0c:79:a1:8f:f9:93:7d:5a:ab:7c:19:
6b:9a:3f:6e:40:f6:27:95:b3:0f:e7:86:b6:07:0e:43:7d:c5:
a6:d1:21:d9:cf:13:b2:fb:2b:e8:b5:7e:e7:e6:40:00:8a:98:
2a:f6:f4:da:0e:a7:32:3d:3f:c8:1c:19:9f:98:98:13:59:8e:
cf:f2:30:80:21:0c:df:f6:c9:2f:4e:b4:68:97:b6:8c:a2:c8:
94:36:36:e8:9d:dc:97:7d:27:a1:32:a6:cc:44:06:44:25:67:
7a:d4:1b:a2:10:9b:3e:9e:0a:e1:51:6a:db:84:c8:98:7e:b4:
14:0d:03:97:ef:9a:22:48:3c:0c:00:ed:d7:f4:d1:d3:52:d5:
64:f9:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:33 2025 by rpki-client