![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.mft
File: w78WWadIPiRgMbR1dGGRtd8MQrY.mft (raw, json)
Hash identifier: lYMRDbnFLdvulEwkTMgght4jr94+iYApaDsvhfKWpmM=
Subject key identifier: 3A:1B:EA:93:0D:C5:1A:2D:4D:5D:EC:5B:59:5F:B0:3E:CC:BB:6A:96
Authority key identifier: C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
Certificate issuer: /CN=c3bf1659a7483e246031b475746191b5df0c42b6
Certificate serial: 01874EE46382E493A112919A286791093C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.mft
Manifest number: 0780
Signing time: Wed 05 Apr 2023 00:50:03 +0000
Manifest this update: Wed 05 Apr 2023 00:50:03 +0000
Manifest next update: Thu 06 Apr 2023 00:50:03 +0000
Files and hashes: 1: Qx54_t-6UTv5nus8m7rM85u7d8Y.roa (hash: PSCZoFxLi17uJbdeXupIncqBS4VvKQbjKA+q7w/9850=)
2: w78WWadIPiRgMbR1dGGRtd8MQrY.crl (hash: VLxB9kux8sprMsxjpeastyErm7ZbaeDFpZuwmNWvf/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:e4:63:82:e4:93:a1:12:91:9a:28:67:91:09:3c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bf1659a7483e246031b475746191b5df0c42b6
Validity
Not Before: Apr 5 00:50:03 2023 GMT
Not After : Apr 6 00:50:03 2023 GMT
Subject: CN=3a1bea930dc51a2d4d5dec5b595fb03eccbb6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:25:41:98:04:83:ee:38:20:18:54:d8:c8:
df:51:65:05:0e:56:49:84:2f:49:48:8b:a1:7f:b4:
6c:8f:be:ac:56:65:31:0a:4d:72:47:9c:59:20:a0:
22:17:e9:a1:14:32:49:4d:37:b3:21:05:7a:b5:3b:
37:ed:97:2a:b4:27:3a:f2:ae:7a:a2:50:e7:3a:84:
f1:5a:11:6c:c6:98:37:32:86:cf:09:28:36:26:87:
b8:34:98:95:a0:14:41:4a:e5:00:80:1f:1b:e8:f2:
c2:b5:c7:0e:33:f7:4d:e7:cc:a9:9d:16:39:6b:4c:
62:15:4d:d8:bc:34:91:bb:25:88:b2:35:a1:d9:af:
de:02:0d:23:5c:1c:84:3a:80:a4:68:e5:3c:86:3e:
9e:ae:ff:b6:93:58:1d:63:3a:6a:69:58:95:b9:5a:
3d:5f:b3:28:09:89:51:22:4b:b2:de:5a:52:d9:fb:
8f:f9:c4:bd:0b:39:f9:07:56:03:a7:b7:53:7d:6f:
c2:2b:53:69:07:00:af:22:0a:5a:80:09:77:8c:92:
c1:1b:56:aa:52:37:37:c1:e4:82:7e:81:6b:cb:52:
73:7d:76:0e:7c:d2:5b:8a:17:bc:39:07:94:f1:4d:
7b:9d:33:29:ad:58:8f:1a:1c:f7:fe:38:41:f8:06:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:EA:93:0D:C5:1A:2D:4D:5D:EC:5B:59:5F:B0:3E:CC:BB:6A:96
X509v3 Authority Key Identifier:
keyid:C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c5:0f:57:27:05:e3:f2:86:9e:84:e9:ed:a3:19:b1:a7:e0:
c4:e5:93:d9:c4:dd:64:72:bb:75:83:b2:b3:43:81:a8:09:4d:
6c:e6:85:c3:ab:c6:68:72:a0:c4:fe:2f:07:79:88:1a:3a:97:
c1:33:fd:57:5c:08:52:c6:bd:5a:9a:9e:89:fa:ed:15:36:17:
ca:35:5b:e4:4b:d3:95:af:e6:f4:9c:6b:ae:4e:5d:26:1f:c1:
ba:06:36:8a:07:c0:32:a8:b5:3e:51:bb:a6:08:87:6e:53:a8:
76:3b:28:77:98:ba:4b:c3:9c:ef:19:02:94:4a:59:1b:27:62:
70:5b:2c:5c:4f:6d:6d:34:0a:1d:bb:84:d4:e6:bc:3c:f4:bd:
e9:ca:f3:7d:75:57:89:b8:4a:a9:fd:fa:95:e7:4c:d8:ae:d0:
aa:a0:ea:25:c0:ae:89:c2:7a:e1:3e:19:46:5f:a3:33:ac:06:
67:42:cb:32:3f:64:8d:51:16:30:30:d9:77:6b:16:59:14:54:
d1:9f:39:12:b9:e4:a0:82:37:7d:31:dd:d9:bc:66:6a:57:d7:
b6:9a:25:22:a3:06:a5:59:63:1d:0b:34:10:9b:73:f3:57:1f:
6d:bb:b7:4e:fa:a6:3e:c9:44:31:0f:ba:65:85:e3:13:7c:9b:
44:f9:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:55 2025 by rpki-client