![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft
File: h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft (raw, json)
Hash identifier: k3vV/lxbMJ0vG8QMdeFNiUxR21EKh10NPNycKo1h6aE=
Subject key identifier: F9:D6:FE:D9:92:87:07:89:9A:76:52:7E:19:86:11:C3:5A:CF:6B:C5
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Certificate issuer: /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial: 018BD2A4D287CB3E3684C78D3D47180B74B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft
Manifest number: 0866
Signing time: Wed 15 Nov 2023 11:01:38 +0000
Manifest this update: Wed 15 Nov 2023 11:01:38 +0000
Manifest next update: Thu 16 Nov 2023 11:01:38 +0000
Files and hashes: 1: 6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa (hash: fFpmjxzdAbkKHPUjkamzxSP93ipoyJEVQfO/gxSssh8=)
2: h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl (hash: D/xyRLOz/AtQs+bqTuVZJhW/SO4dT4Y0zYNTDB2tx38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:a4:d2:87:cb:3e:36:84:c7:8d:3d:47:18:0b:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
Validity
Not Before: Nov 15 11:01:38 2023 GMT
Not After : Nov 16 11:01:38 2023 GMT
Subject: CN=f9d6fed9928707899a76527e198611c35acf6bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:83:23:4e:98:b5:70:1f:cd:fa:05:61:f8:a9:
f6:9c:5f:b6:65:9d:b1:eb:17:46:27:23:34:93:01:
12:00:03:d3:e2:fd:d9:6e:09:d8:80:9c:92:d5:25:
de:a8:e2:d2:61:a1:4d:8c:fc:a2:1b:a7:4c:a8:88:
ef:19:23:bc:69:97:56:46:2a:f6:57:bf:57:db:3e:
a7:27:ba:47:28:55:6a:6a:90:80:3f:ba:56:ab:9f:
ea:71:c9:b5:05:5b:59:eb:9c:2a:86:bb:d4:9f:09:
06:38:72:7f:13:e0:67:f2:0c:81:3f:9b:93:19:aa:
3b:dd:99:3f:7d:64:b5:e8:a5:03:89:4e:40:c6:9b:
37:2c:55:5b:99:5e:9b:a3:5b:90:f5:99:ae:9c:6e:
ee:1d:02:6a:09:79:cc:0d:ba:17:64:0c:d9:e7:93:
7c:67:8c:9c:de:a2:33:c1:56:d3:55:f5:05:d3:89:
32:79:31:43:7e:03:ee:e1:81:8c:da:2e:6b:8a:1e:
ab:8b:56:e2:fe:7c:79:59:bd:8b:00:23:f9:66:ba:
05:59:fe:48:c4:69:9b:dd:e5:8d:ef:72:27:16:98:
7c:f1:88:ae:e1:f6:86:ff:0f:5a:3f:52:2e:f9:c4:
e1:20:29:20:e0:45:18:f8:74:1e:1d:87:06:62:b0:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D6:FE:D9:92:87:07:89:9A:76:52:7E:19:86:11:C3:5A:CF:6B:C5
X509v3 Authority Key Identifier:
keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:71:98:7a:b5:94:a2:a3:13:7c:b1:2b:ca:07:12:43:3c:
46:8c:ac:eb:73:0a:88:c0:27:19:e2:b7:e7:7f:56:c9:b7:08:
aa:ac:c1:c4:c7:ed:2f:f2:c5:ff:0a:59:85:f0:99:ac:e6:fe:
89:8b:cb:e7:e4:b9:ee:8e:77:0d:c1:9b:f5:60:47:7e:a4:12:
1c:7e:a4:31:54:6e:ab:aa:2f:5f:d4:49:1f:5e:06:5c:96:60:
59:2e:d7:ff:c5:de:e5:1f:f8:38:9d:9d:63:5b:6d:cd:10:95:
b2:f5:5c:e8:09:f3:22:b0:60:05:89:54:6c:d7:9c:ed:a3:58:
03:e9:aa:e4:34:08:f9:ab:e8:57:dd:5f:d4:f2:f4:e6:a1:98:
69:1e:5d:cb:b5:89:c3:61:8b:a4:cb:1d:39:62:05:68:81:5c:
45:ad:60:1f:2c:7d:93:20:ee:18:db:6b:16:c5:fb:e8:0b:32:
40:0d:12:b4:b0:81:7c:5a:12:48:bc:23:7c:93:34:cf:56:56:
0c:00:7a:46:19:43:f7:08:f2:5c:f0:75:0b:5a:a1:e6:20:b5:
e3:92:3e:eb:85:1a:4b:8f:71:96:1e:f7:0f:d7:61:7e:c6:9c:
ea:dc:31:7b:b3:bc:26:b3:dd:7e:0c:89:f0:66:6b:02:3c:82:
8f:e2:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:23 2025 by rpki-client