![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Sw86a-oV8s_arxHlJheK9qCBGs8.mft
File: Sw86a-oV8s_arxHlJheK9qCBGs8.mft (raw, json)
Hash identifier: XDhgqUaNH1cWdm9Ub5kLw/SrNyDeEQ7UdsUIbt+qeco=
Subject key identifier: 7A:98:2A:E7:C1:84:10:B8:66:AE:3A:1E:DC:E9:01:B5:D8:EF:6B:E2
Authority key identifier: 4B:0F:3A:6B:EA:15:F2:CF:DA:AF:11:E5:26:17:8A:F6:A0:81:1A:CF
Certificate issuer: /CN=4b0f3a6bea15f2cfdaaf11e526178af6a0811acf
Certificate serial: 0191D595F500FDE0B4C544D07F06BA6802FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sw86a-oV8s_arxHlJheK9qCBGs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Sw86a-oV8s_arxHlJheK9qCBGs8.mft
Manifest number: 0BD0
Signing time: Mon 09 Sep 2024 07:01:00 +0000
Manifest this update: Mon 09 Sep 2024 07:01:00 +0000
Manifest next update: Tue 10 Sep 2024 07:01:00 +0000
Files and hashes: 1: Sw86a-oV8s_arxHlJheK9qCBGs8.crl (hash: rb2wxoqzeyZxmosIlaQftQqRHY6dpUQLdTA8hkQ/4Mw=)
2: gJhAb1MLnmNyczqZr1APrAqn-2Q.roa (hash: d/sDEXrX6u+SSdz+/39ELWI4Y7AHuXX3bJ4EOXiD39Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:95:f5:00:fd:e0:b4:c5:44:d0:7f:06:ba:68:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b0f3a6bea15f2cfdaaf11e526178af6a0811acf
Validity
Not Before: Sep 9 07:01:00 2024 GMT
Not After : Sep 10 07:01:00 2024 GMT
Subject: CN=7a982ae7c18410b866ae3a1edce901b5d8ef6be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:9d:8a:9b:10:f9:94:09:2a:21:da:ef:f9:
2e:2c:e0:72:c4:cb:6e:5b:9f:ce:2d:33:35:8a:08:
5a:3b:09:65:c6:43:c6:32:55:ec:73:c0:c5:9c:54:
5b:c4:2e:14:85:5d:3d:75:72:80:df:d4:64:96:ae:
74:68:34:f6:f2:3d:c8:1e:10:cd:a2:3d:f5:c8:f5:
8a:d1:ac:38:b5:66:6f:af:4e:96:e4:c0:9f:8d:56:
1a:63:77:ae:92:2a:90:6e:49:6f:bd:88:9a:42:53:
9b:c9:6e:47:63:1a:a2:96:ae:5b:ea:f6:8c:43:1b:
dc:0f:f6:91:54:b0:7f:11:d7:ca:4e:fe:2f:e6:3a:
e9:59:83:d6:fb:27:78:69:7b:26:6b:ea:35:08:39:
51:ed:69:d6:1e:45:b3:e4:75:d5:ef:6e:64:ed:2d:
06:03:a6:c9:b6:8c:2d:7d:bf:92:3a:d0:fe:f1:93:
ee:5f:63:f4:35:9a:67:87:b0:df:53:f3:30:24:91:
1f:d1:c2:b6:19:37:ac:55:05:2a:e0:9d:1c:f9:0c:
a5:a5:48:08:d2:1e:4e:f0:db:f8:1f:7c:3b:cf:76:
56:7e:11:f5:bd:aa:87:82:e2:b0:a7:23:26:7c:64:
f6:5d:69:e9:c8:53:68:cc:cf:4d:43:45:ab:20:40:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:2A:E7:C1:84:10:B8:66:AE:3A:1E:DC:E9:01:B5:D8:EF:6B:E2
X509v3 Authority Key Identifier:
keyid:4B:0F:3A:6B:EA:15:F2:CF:DA:AF:11:E5:26:17:8A:F6:A0:81:1A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sw86a-oV8s_arxHlJheK9qCBGs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Sw86a-oV8s_arxHlJheK9qCBGs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4688ad-feb0-4777-94d7-fff1b3a1e9ea/1/Sw86a-oV8s_arxHlJheK9qCBGs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a2:db:47:e1:57:73:94:ab:e8:9f:0e:17:ab:75:a1:eb:3f:
1f:05:1b:10:80:97:84:f5:a6:89:69:1d:e6:40:cb:2f:42:0a:
bd:98:5e:f6:6c:20:f6:a1:77:17:e7:45:e6:4b:33:5c:2b:18:
9d:fe:cd:a3:8b:17:b2:d3:8b:93:39:a3:b6:b4:d2:20:f7:8d:
3b:11:42:84:96:8c:77:5a:1d:16:a8:b0:ff:10:ea:c3:d2:5a:
9b:64:fa:3a:37:c1:2e:2c:41:84:46:53:7c:95:a7:9e:da:1a:
20:76:fb:36:5a:d7:78:ce:96:5d:d3:11:5d:92:c2:20:7c:ee:
73:e1:99:fe:80:b0:9e:23:ec:51:4f:84:a8:7a:31:3e:de:4b:
6a:04:21:28:3f:6f:7d:8f:9b:5d:ba:f3:15:69:5e:51:3b:18:
04:12:22:6d:d1:da:cf:ec:5c:7e:1b:26:bd:4f:7e:72:91:8c:
19:a1:f0:94:19:2d:04:40:6b:47:b0:20:c8:b0:72:a5:74:45:
eb:73:dc:8e:37:0c:f8:b6:36:a1:e5:c3:3d:be:7c:4b:7b:f8:
01:ad:6d:92:a5:16:48:91:1d:d6:2e:cf:cd:15:a4:a4:27:94:
5d:5e:4a:c9:07:66:3a:09:02:5c:34:f1:0f:b3:0c:a7:70:94:
d4:d2:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:43 2025 by rpki-client