![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft
File: SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft (raw, json)
Hash identifier: G7VZyu732zySa/UmBK3azSvM6b6zhPqTyW3Mmj53E9U=
Subject key identifier: BA:11:EF:E4:C4:77:14:57:BF:50:8E:BE:B2:7A:70:29:E0:B5:BB:73
Authority key identifier: 4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10
Certificate issuer: /CN=4a64d32cd26137be9c021101f95a7534d5fa5310
Certificate serial: 018DAF6E69AFE4A1810E7E10E3C63BD5CF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft
Manifest number: 105F
Signing time: Fri 16 Feb 2024 01:01:05 +0000
Manifest this update: Fri 16 Feb 2024 01:01:05 +0000
Manifest next update: Sat 17 Feb 2024 01:01:05 +0000
Files and hashes: 1: SmTTLNJhN76cAhEB-Vp1NNX6UxA.crl (hash: MBK14aAOsXK+bZTlMmmD/2D8ZKdAFftEsnB4fh3btU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:6e:69:af:e4:a1:81:0e:7e:10:e3:c6:3b:d5:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a64d32cd26137be9c021101f95a7534d5fa5310
Validity
Not Before: Feb 16 01:01:05 2024 GMT
Not After : Feb 17 01:01:05 2024 GMT
Subject: CN=ba11efe4c4771457bf508ebeb27a7029e0b5bb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:0b:cb:b7:8e:6f:8b:d5:9f:35:4b:a9:4f:
44:fa:84:7f:e0:d9:d3:fb:92:f8:59:f6:4d:49:5c:
12:a4:05:85:6a:ee:e4:4e:04:ec:cf:d2:09:87:98:
38:00:6e:ab:20:fa:56:b8:68:bc:73:75:80:41:06:
e5:b8:90:07:de:bb:ea:da:21:d5:35:de:11:74:72:
a2:f9:f7:10:56:15:cd:62:a1:e9:e9:a2:32:ed:a7:
45:3e:9f:a5:f8:b3:ac:a0:d2:3f:ff:64:d9:32:5a:
83:a6:2f:49:ec:59:a7:84:b4:3a:4d:4c:83:cb:53:
aa:f1:6a:92:ac:74:c5:2b:56:06:86:b3:48:70:6b:
30:ee:9e:fc:1c:d8:34:14:e7:01:f4:fd:63:93:9e:
e2:88:dd:1b:c5:33:ae:33:c4:3f:b1:64:30:35:71:
4f:de:ab:8a:a7:bd:78:4c:ff:fd:92:79:9e:dd:97:
d6:14:88:9a:31:23:74:0a:ef:48:1e:d5:89:02:cc:
34:51:72:12:82:31:41:3f:82:64:de:5a:45:ee:52:
c4:e4:69:65:74:79:46:2c:e7:7b:08:05:ce:89:be:
64:95:49:c3:7c:7a:74:ac:85:5d:b5:3a:46:ea:31:
28:fc:c6:c9:8e:d3:ff:50:85:15:fd:fa:1c:1b:ec:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:EF:E4:C4:77:14:57:BF:50:8E:BE:B2:7A:70:29:E0:B5:BB:73
X509v3 Authority Key Identifier:
keyid:4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:09:fb:31:20:ba:96:57:b5:f6:06:c8:7c:e8:f5:39:28:38:
3e:4d:1c:aa:73:9c:4c:d6:3c:05:03:ac:41:36:ef:fe:03:87:
a8:87:f1:ea:99:d0:15:19:c4:c9:a7:6a:c0:0a:9b:6d:62:c7:
f3:1b:5f:7d:aa:61:d4:1d:8d:d4:a7:58:14:fa:55:cb:57:ec:
e1:ec:2c:aa:f4:d4:45:ae:2d:5d:f0:20:75:fa:09:eb:47:55:
bd:f6:d7:38:b8:fd:c4:69:09:30:2a:e5:da:13:4f:a2:a8:e1:
3d:7e:65:e2:46:0a:fa:d6:50:f8:92:b9:49:e9:75:81:44:a9:
16:b5:37:4f:e8:1e:10:fe:6b:fc:cd:5d:84:a8:b5:4b:f1:d0:
88:64:94:4f:c3:ab:a5:0d:2e:fc:04:fb:39:49:c6:48:3d:b4:
a2:b9:cc:13:fc:f1:65:8e:62:14:67:c4:ac:b0:de:2d:62:04:
9a:77:00:cc:8b:80:5d:bb:57:25:6c:4b:c8:f1:ee:6c:95:16:
bb:fa:15:a3:a3:7f:d6:68:25:7c:03:49:97:3f:d1:35:46:3e:
a2:d3:02:72:f0:60:b2:b4:89:ef:0e:94:86:e0:5f:3b:a9:df:
46:ed:fe:72:6c:01:b8:d4:4a:31:6e:f1:0c:93:e9:34:bb:82:
66:8e:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:42 2025 by rpki-client