![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.mft
File: f2W_9k2Kh5d-M02JxOOMDRCVr2M.mft (raw, json)
Hash identifier: iDQAEUY4S9UawmUTiRnnJA3K3y1mgZ2dgKLgBCpuc14=
Subject key identifier: 63:D9:99:1D:34:86:CD:3D:C7:B6:7E:8F:53:EF:48:14:11:9F:60:3D
Authority key identifier: 7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
Certificate issuer: /CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Certificate serial: 018E36F05A29A4A5B983FE9B00C295568D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.mft
Manifest number: 08F1
Signing time: Wed 13 Mar 2024 08:31:45 +0000
Manifest this update: Wed 13 Mar 2024 08:31:45 +0000
Manifest next update: Thu 14 Mar 2024 08:31:45 +0000
Files and hashes: 1: Bl6v353_yYBSjoZ30HFWFigg6fY.roa (hash: cenoNokIZEWjuaKgJ+VyQiF2ndLw92Mw7LHijEutxl8=)
2: f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl (hash: 0uETDUj2SEejY97tIUiC/m7JEvGwyhVMrNpZ8lMo8NA=)
3: xEJwMFm64ga7mCYZbMYuGflNZjY.roa (hash: sbA5HykJFJFKqNo0Pp0Gp/35V05n7g4jgXUTjxOJpvY=)
4: xeWqLQWdMa3nVNh-dR7d3BA3HsU.roa (hash: fLtD4ELSuzvuOUAdn2xxAlbIDNwfi4tf3moABoOjKSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:f0:5a:29:a4:a5:b9:83:fe:9b:00:c2:95:56:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f65bff64d8a87977e334d89c4e38c0d1095af63
Validity
Not Before: Mar 13 08:31:45 2024 GMT
Not After : Mar 14 08:31:45 2024 GMT
Subject: CN=63d9991d3486cd3dc7b67e8f53ef4814119f603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:e4:1e:f8:ac:4f:82:d6:55:9b:c9:f7:98:
f6:6a:de:32:7d:89:08:ff:9e:bf:4e:60:f1:17:da:
8a:07:70:a0:59:95:1c:b8:be:0a:44:01:1d:20:08:
d5:e4:e3:a4:8f:4d:b2:99:bf:56:a9:ec:32:ff:31:
61:64:e8:8e:57:f4:39:71:41:df:e2:e0:4b:f6:cf:
66:96:a3:41:52:cc:e9:4c:7f:c6:ff:f8:8d:d2:84:
34:67:63:8e:f4:5e:2c:7b:29:0c:c7:aa:8d:7f:20:
5e:c3:56:95:14:3e:7a:38:ad:07:f6:a7:5f:50:98:
f4:93:be:dc:e7:9c:4f:57:34:f4:42:fb:01:a4:19:
33:22:18:af:b9:c3:04:72:f0:ae:65:e3:a1:52:5e:
9f:ad:9f:4c:74:03:11:e8:45:d8:01:c3:60:29:e6:
f0:f2:c9:19:bf:36:57:03:a3:52:a2:b0:80:f8:76:
83:3f:8f:7c:fb:82:e1:72:45:52:dc:92:66:29:0c:
79:fb:5d:e4:f3:43:e9:4f:8a:b1:33:d0:1b:64:cf:
a3:bd:76:bb:52:30:9e:5b:af:26:8a:18:ad:d4:24:
4f:68:e6:28:4f:80:6b:d0:07:31:7b:6e:74:c9:01:
b8:e7:35:3b:8f:06:f3:2e:d8:a7:7d:0d:fc:66:0f:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:99:1D:34:86:CD:3D:C7:B6:7E:8F:53:EF:48:14:11:9F:60:3D
X509v3 Authority Key Identifier:
keyid:7F:65:BF:F6:4D:8A:87:97:7E:33:4D:89:C4:E3:8C:0D:10:95:AF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2W_9k2Kh5d-M02JxOOMDRCVr2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3a803c-872d-4927-afa7-15374177739d/1/f2W_9k2Kh5d-M02JxOOMDRCVr2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:25:94:81:91:e9:47:bb:3c:fb:9c:9e:b0:78:32:8e:cd:85:
4e:b9:6b:9d:51:de:58:4f:e5:1b:c6:93:41:4d:60:7f:9b:a4:
da:0c:e4:1a:d1:71:d2:f3:9f:9c:6c:5f:bb:bd:4a:48:70:03:
b9:0d:6d:0b:3d:c1:42:0a:70:28:5c:26:6c:6a:b7:4b:1f:64:
8e:6d:df:dc:24:a9:76:1c:2c:6b:8d:5e:c6:12:39:b5:42:a4:
41:db:bc:75:d3:01:20:c6:29:ed:59:7f:4e:37:93:c4:2c:94:
e4:bd:39:63:85:d9:1e:2e:e6:9d:2e:58:97:65:46:fb:34:ba:
9f:df:8d:db:e0:9e:4e:2a:f6:d2:f9:72:37:20:7f:b6:a7:04:
46:d2:d4:f2:07:62:35:c7:c2:d1:2d:7f:c6:4b:ff:b6:34:f6:
c7:e6:6f:01:ad:37:ba:9f:49:9f:fb:77:84:98:22:56:e5:cd:
20:e7:71:88:8c:92:06:97:46:0a:4d:fc:a2:8c:bd:6f:d0:0c:
96:f9:13:d1:64:57:fa:4b:4a:d5:39:48:10:e2:8b:4d:1e:a3:
90:8b:55:7d:f6:5d:a4:35:df:67:c8:bd:7c:7c:5f:17:78:4c:
e8:5a:e6:a8:76:bd:57:20:6e:c2:39:c4:29:b9:07:89:30:86:
26:52:aa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:42 2025 by rpki-client