![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
File: ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft (raw, json)
Hash identifier: GJvxYwYsf8AahehpHHtZeSpPyWU0pFYF4BMkuPwoWwo=
Subject key identifier: F0:EC:39:58:B9:DE:81:86:83:97:43:ED:66:3C:FC:2C:A5:E3:8F:A2
Authority key identifier: A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
Certificate issuer: /CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Certificate serial: 0189D2DF54AA0D73BC24F1C180134EB67A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
Manifest number: 085C
Signing time: Tue 08 Aug 2023 01:59:58 +0000
Manifest this update: Tue 08 Aug 2023 01:59:58 +0000
Manifest next update: Wed 09 Aug 2023 01:59:58 +0000
Files and hashes: 1: 0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa (hash: HV4pN38B+9Vt5+Rp5kLf/0Hs32qbFkSpny7V2QD4q1A=)
2: ofLrYfUvCjDnbZfBpsiq_OyG2zQ.crl (hash: eocBX4rFRxugwbNjc3Ncm+NuADKmpfhUaCtEOymEIiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d2:df:54:aa:0d:73:bc:24:f1:c1:80:13:4e:b6:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Validity
Not Before: Aug 8 01:59:58 2023 GMT
Not After : Aug 9 01:59:58 2023 GMT
Subject: CN=f0ec3958b9de8186839743ed663cfc2ca5e38fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:be:13:94:68:f6:01:2f:0f:7f:72:59:b1:
dc:81:5a:ab:f8:1b:48:af:fd:66:dc:22:a8:2f:da:
45:c8:52:7f:fa:22:25:17:a2:35:eb:7e:02:89:39:
3e:c8:52:b9:d6:67:ad:d6:b7:6c:8e:ce:2c:96:31:
93:77:db:cb:00:b3:e7:79:e3:17:59:73:5a:03:f9:
8a:b2:48:e3:c4:b7:88:32:99:a8:52:8a:00:8e:f0:
0f:2e:84:f2:05:c5:c0:f1:36:15:25:61:b8:28:6a:
8b:d0:fc:81:fb:ba:f6:2d:53:20:ea:ad:db:07:9b:
a9:6b:b0:56:de:30:bb:e6:32:77:af:fa:94:35:6c:
8f:f3:fb:90:f1:76:7e:8a:ab:a4:e1:71:15:77:ea:
e1:78:7c:6f:a8:85:fd:23:61:2f:0f:6f:9d:bd:38:
8d:57:e2:e8:02:aa:d4:e0:83:71:5b:84:11:6a:3d:
a5:d9:38:8e:c9:d1:ea:c9:2a:98:5b:a0:6b:74:2c:
16:88:2d:b3:aa:44:b5:5d:d9:88:fd:8b:17:08:a6:
43:47:45:1e:8b:f8:e3:88:bd:74:b4:1b:7a:b8:13:
dd:90:39:42:74:4b:b0:01:0b:08:fb:5d:22:df:60:
43:16:11:80:ad:65:94:30:93:48:8a:d0:93:3a:cb:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:39:58:B9:DE:81:86:83:97:43:ED:66:3C:FC:2C:A5:E3:8F:A2
X509v3 Authority Key Identifier:
keyid:A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:22:b6:7a:5f:8e:3d:ff:3c:0c:4d:ab:84:bd:4c:5f:73:83:
87:bf:cd:02:b2:e3:91:81:c5:38:4c:36:0a:5d:c5:6e:64:44:
e6:c9:56:67:4a:33:8c:e9:7c:bb:91:08:e4:ac:93:0d:70:e2:
c4:f9:31:59:6e:83:fa:ab:de:c7:8b:9a:72:42:50:30:cf:36:
ba:16:17:a1:99:0a:c9:59:52:e0:20:f3:b3:e2:41:13:63:2f:
c7:bb:0d:e6:35:96:99:11:52:81:b8:39:e6:33:c4:68:cf:10:
25:d0:39:3f:2c:a2:88:17:df:c0:64:06:d5:ae:74:9e:0b:e6:
1f:2d:28:2b:4e:d2:a0:13:f8:aa:0d:3f:6c:b1:12:1f:01:7a:
4f:09:a5:0b:f9:87:2f:d8:dd:88:e6:97:4c:a9:04:a0:be:eb:
91:23:52:60:cb:de:db:64:cc:e9:ef:8b:94:7e:1f:b4:be:99:
95:3e:7e:f9:84:b7:b9:37:aa:29:f5:48:bb:a4:67:16:93:37:
e0:8b:ad:62:08:15:08:65:1f:a4:1d:98:a6:2c:ab:44:79:8f:
6b:3e:99:08:9b:80:e9:b6:f4:64:13:43:83:59:2b:71:12:6e:
da:f2:89:9e:0d:8a:bb:f7:fc:6d:77:6c:87:4d:82:6b:95:1b:
ef:7d:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:26 2025 by rpki-client