![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.mft
File: R5JYOrQ38LO9cjKmnAHHFqkRdps.mft (raw, json)
Hash identifier: MlH39oxnsb10vvv8nigT7hHaykEEomI+3lsALaT4KtM=
Subject key identifier: 2F:C9:0F:04:AC:2F:2C:43:E7:A3:71:84:51:AC:07:F5:1E:71:EC:EE
Authority key identifier: 47:92:58:3A:B4:37:F0:B3:BD:72:32:A6:9C:01:C7:16:A9:11:76:9B
Certificate issuer: /CN=4792583ab437f0b3bd7232a69c01c716a911769b
Certificate serial: 03C78BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5JYOrQ38LO9cjKmnAHHFqkRdps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.mft
Manifest number: 04F0
Signing time: Mon 21 Feb 2022 13:06:38 +0000
Manifest this update: Mon 21 Feb 2022 13:06:38 +0000
Manifest next update: Tue 22 Feb 2022 13:06:38 +0000
Files and hashes: 1: R5JYOrQ38LO9cjKmnAHHFqkRdps.crl (hash: yx7W4N3UMDLskxWe6ZcDltF/MLJ907jxyarrYKVOkn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63409068 (0x3c78bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4792583ab437f0b3bd7232a69c01c716a911769b
Validity
Not Before: Feb 21 13:06:38 2022 GMT
Not After : Feb 22 13:06:38 2022 GMT
Subject: CN=2fc90f04ac2f2c43e7a3718451ac07f51e71ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ef:3f:09:f6:c9:7e:d3:cd:e2:da:aa:09:67:
5e:c2:e6:a9:24:58:c1:02:4d:14:04:39:25:bf:01:
56:15:59:c7:7d:8c:43:76:72:89:91:af:55:4b:53:
b1:b0:3a:37:ac:de:fb:76:9a:9a:e6:71:c2:68:bc:
d7:d8:97:a5:63:96:06:b8:83:d7:2d:b7:c3:02:3f:
d9:44:46:ea:99:82:4a:c3:13:68:37:2a:8b:75:0f:
62:4a:11:57:c9:4b:74:a5:39:82:22:a3:2f:fd:ad:
fa:0c:85:e1:9a:a0:5d:96:1d:87:ef:36:4c:5a:89:
05:69:ed:fa:85:59:d5:2a:4f:10:f5:39:4d:63:c7:
0f:05:9f:c5:6f:31:48:d0:20:dd:20:ba:a9:bf:97:
3a:aa:69:f6:4d:96:f5:48:e5:b2:92:9e:1c:ed:f9:
fd:0e:a6:94:18:09:be:d3:21:53:68:fb:ca:b1:10:
0d:4f:b7:0e:2b:4b:fa:08:f0:f2:a0:60:f0:27:54:
30:ef:0c:64:08:80:81:eb:84:71:64:58:64:b8:5f:
e9:53:34:18:e5:69:d8:86:83:4e:87:ba:71:5e:83:
e2:c8:a8:e7:09:6f:4c:00:64:4e:1f:17:92:50:51:
4b:68:b7:ff:72:79:5c:8b:92:e7:52:18:33:1d:54:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:0F:04:AC:2F:2C:43:E7:A3:71:84:51:AC:07:F5:1E:71:EC:EE
X509v3 Authority Key Identifier:
keyid:47:92:58:3A:B4:37:F0:B3:BD:72:32:A6:9C:01:C7:16:A9:11:76:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5JYOrQ38LO9cjKmnAHHFqkRdps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:7f:b7:b8:04:c0:17:f2:98:32:da:fa:ee:58:7d:b0:3f:74:
d6:a7:4d:5e:84:e4:4b:76:22:5c:c8:80:1f:49:0a:63:32:8b:
51:7b:db:da:a0:b6:49:07:cb:7b:b0:3c:cc:75:02:3b:ce:cf:
63:88:b1:88:2b:70:2c:89:b1:43:0c:1b:5d:19:ec:35:8f:a2:
33:36:ba:f8:57:54:af:fc:5c:80:c5:25:35:01:59:b7:ae:ca:
0b:ba:77:1d:74:df:31:e1:38:ba:25:82:22:3d:02:05:a8:e4:
6a:ed:d9:5d:90:f0:f2:54:4f:a5:36:81:b6:fa:d7:73:7a:59:
b8:27:d7:cc:f7:3d:3d:87:ec:6f:3f:22:f6:53:4a:41:41:ff:
fe:1d:dd:59:59:f6:9c:eb:ae:f8:ca:d3:f7:e0:fc:bd:06:13:
82:6d:8e:42:a9:1c:f1:53:fd:3d:66:f6:f2:24:75:41:26:6d:
d3:bb:03:5e:e0:8e:e7:4c:b4:22:04:d4:82:1a:8c:2f:5e:af:
f0:4e:00:af:50:32:a7:a2:90:2e:79:00:1d:5a:2f:23:ea:94:
30:18:08:53:13:e5:b6:b1:dc:08:7a:dc:f2:44:c9:aa:dc:cd:
b0:e1:a7:61:31:d1:4d:3b:ca:0e:19:0e:36:48:80:65:8c:3b:
e9:65:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:02 2025 by rpki-client