![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.mft
File: Id7bV-Vt-42XcS7jZRy1gQapQKk.mft (raw, json)
Hash identifier: Khn5uqZ4oXPdmnxyZm4tmU3oHm76FSASEtVe6ClxwsM=
Subject key identifier: 25:0D:5A:02:4C:84:5E:72:F2:18:30:B1:C5:F0:15:67:37:15:C0:23
Authority key identifier: 21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
Certificate issuer: /CN=21dedb57e56dfb8d97712ee3651cb58106a940a9
Certificate serial: 01831AACB6E2CC3C12EA5162595DB607D434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id7bV-Vt-42XcS7jZRy1gQapQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.mft
Manifest number: 058C
Signing time: Thu 08 Sep 2022 01:17:49 +0000
Manifest this update: Thu 08 Sep 2022 01:17:49 +0000
Manifest next update: Fri 09 Sep 2022 01:17:49 +0000
Files and hashes: 1: Id7bV-Vt-42XcS7jZRy1gQapQKk.crl (hash: zVRz9Onk1jmUxp4MwVUakZZivzV4U/y3mHsI1CjDrKs=)
2: f8h-mo0D-rqqnBXwY8GVyt-GBPU.roa (hash: SXlXgFFS3KiF3k0UaKmPbzw8mMBXZLiuUgirYewjgcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1a:ac:b6:e2:cc:3c:12:ea:51:62:59:5d:b6:07:d4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dedb57e56dfb8d97712ee3651cb58106a940a9
Validity
Not Before: Sep 8 01:17:49 2022 GMT
Not After : Sep 9 01:17:49 2022 GMT
Subject: CN=250d5a024c845e72f21830b1c5f015673715c023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:2b:64:f4:b0:d5:4b:32:ab:e0:6f:53:12:
90:33:b6:cf:d4:ba:90:19:53:f8:c9:46:6d:84:02:
47:56:ca:97:ec:8b:06:cb:fd:85:db:89:e1:ae:4f:
d0:bf:94:c4:a7:b4:0e:3e:36:3c:32:d0:1b:cd:25:
07:d6:5c:3c:1d:f6:40:01:5a:d2:dc:70:74:e3:55:
c3:43:55:0f:08:8c:2b:23:a0:73:bb:ac:93:65:55:
66:e9:32:1b:35:9c:94:69:f7:b8:24:ee:0b:58:9b:
01:66:b3:4c:25:da:2d:6c:73:d8:8d:87:37:6e:dd:
d6:ba:50:92:99:44:8c:5a:28:5f:8e:3f:d7:d6:47:
8c:7a:26:e1:62:85:6d:3e:76:fd:ff:42:74:e4:e4:
47:02:cf:3e:99:f3:e0:f4:8e:a4:79:d1:a3:e4:23:
bc:e7:1d:74:d9:66:ea:da:ea:a6:83:a7:69:38:f8:
79:1d:b7:69:da:42:09:cb:5f:d3:3e:01:2b:c1:97:
30:72:6f:04:23:a9:01:e4:f9:f8:a1:57:a2:4b:0a:
e5:20:6a:65:4c:61:36:94:b4:25:a0:dd:f6:01:5d:
81:26:75:68:eb:ea:e8:85:76:c0:a6:aa:79:8b:90:
6f:97:a3:21:1d:f3:3a:75:f2:9f:d6:45:58:13:7e:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:5A:02:4C:84:5E:72:F2:18:30:B1:C5:F0:15:67:37:15:C0:23
X509v3 Authority Key Identifier:
keyid:21:DE:DB:57:E5:6D:FB:8D:97:71:2E:E3:65:1C:B5:81:06:A9:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id7bV-Vt-42XcS7jZRy1gQapQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/860c3f-8e0d-4f51-97a9-6bfd851aae2d/1/Id7bV-Vt-42XcS7jZRy1gQapQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:9d:2b:e5:65:40:a7:36:37:a8:0f:70:95:e0:64:6b:da:
51:87:4f:51:de:c2:af:f2:06:78:aa:04:65:97:55:20:38:4f:
27:2e:a7:8d:3b:f7:d9:e6:f4:a2:a0:89:7c:ab:a8:ca:eb:a3:
8c:72:2e:ff:8a:d9:2c:fe:19:d2:28:39:fa:7f:05:dc:50:d1:
a9:09:8e:c1:ca:34:43:52:c4:20:69:c2:d7:1d:d2:bd:3b:bc:
39:4b:c8:f3:57:f3:f8:76:26:7f:ea:a9:c4:14:92:d6:ff:c0:
2d:ed:91:c9:f9:5f:1b:25:ba:51:52:99:0a:fc:09:5a:95:92:
e4:a7:44:45:09:d2:04:bb:50:4d:9f:bd:a1:c3:78:30:47:d7:
13:fa:ac:e9:26:f6:6d:ce:e4:c8:03:99:39:d1:0a:96:f1:45:
b1:4f:10:6b:19:f0:dc:b9:3d:8e:b6:e0:60:6d:7f:79:bc:0b:
fc:e4:74:c4:34:ee:ec:2b:64:60:9a:30:9f:94:32:07:b4:65:
02:2d:4c:91:5f:07:99:22:44:7b:38:2b:8d:b7:6c:c1:b9:a5:
1f:d8:b5:9a:95:43:b4:d1:b5:11:e3:e0:b4:fb:d6:7b:59:b1:
7d:af:d5:eb:da:f5:0e:34:77:54:73:de:b1:1b:2c:ce:88:ca:
73:b9:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:59 2025 by rpki-client