![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
File: lIRnQROSYziNmE2x6X4DFmnGSG4.mft (raw, json)
Hash identifier: A+ArAbHs99pgnYxHMNbkQhbRVikm1tjHWfgEZR0Qob8=
Subject key identifier: 9E:88:9F:66:34:60:4B:6C:3D:E3:04:1E:26:E6:F3:F2:B6:8B:3E:F7
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 01922D9053196B43B2FB84E27FC3A6DF8B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
Manifest number: 0D71
Signing time: Thu 26 Sep 2024 09:01:25 +0000
Manifest this update: Thu 26 Sep 2024 09:01:25 +0000
Manifest next update: Fri 27 Sep 2024 09:01:25 +0000
Files and hashes: 1: M71rkgVhZDqP4B_t5dC8Miuy3ms.roa (hash: 4yplD7zVgbgGhdfxRWUK6ZvF6wE7uluJDS5UUI+VQFw=)
2: lIRnQROSYziNmE2x6X4DFmnGSG4.crl (hash: CZltpoFESm0y4Ezvwu9IkMDOyiM/HFkJN6w0hLDh9c0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:90:53:19:6b:43:b2:fb:84:e2:7f:c3:a6:df:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Sep 26 09:01:25 2024 GMT
Not After : Sep 27 09:01:25 2024 GMT
Subject: CN=9e889f6634604b6c3de3041e26e6f3f2b68b3ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:e8:3c:55:21:f0:ff:4b:a3:d4:42:7b:4d:
5e:63:03:19:db:11:a7:ff:4a:df:eb:74:ed:98:25:
ef:54:c5:b7:4b:dc:01:32:32:ec:05:10:7a:9e:bb:
21:98:b4:e3:b7:14:c0:a1:4b:5a:23:0c:cb:75:37:
71:07:36:7c:2d:4f:f2:37:5c:01:ff:b8:f3:4f:ef:
83:00:5e:a0:55:a6:d8:4f:2c:51:98:30:3a:fb:95:
91:a1:dd:29:cc:db:86:bc:aa:d6:b2:0a:84:ac:c9:
f1:b1:a0:01:46:7f:04:aa:2c:a9:40:98:00:98:5e:
65:ff:f1:d9:12:1c:69:3e:cb:27:04:cf:fe:2b:7f:
06:1c:5a:34:ee:ba:3b:16:b1:1f:65:3d:26:26:83:
73:e7:61:33:c6:e5:b0:c8:57:58:42:c7:e7:de:f6:
ec:d4:95:f4:a8:1c:66:47:02:9c:85:37:ef:23:15:
0b:d2:8c:00:16:a8:73:f5:06:c3:4e:23:0c:1e:4c:
cc:05:6d:de:37:22:19:23:fd:9e:39:0b:00:35:5a:
b9:1d:4e:34:2c:a5:b9:17:6d:0a:75:3c:6b:2e:4c:
a3:8d:f0:4e:8a:08:54:83:f0:5f:55:a7:c7:70:a4:
79:01:54:20:d8:b7:0f:01:89:02:8e:0d:7a:37:e8:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:9F:66:34:60:4B:6C:3D:E3:04:1E:26:E6:F3:F2:B6:8B:3E:F7
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d8:32:ab:0f:ab:6d:73:22:fc:74:8f:53:94:47:dc:3b:91:
c1:f5:ac:5b:a9:cc:1b:07:b7:3d:e0:ea:82:10:46:3f:05:b4:
99:ec:85:38:86:91:30:31:4a:aa:c0:68:da:d4:e4:2c:e3:bc:
dc:dc:a0:d2:5c:5f:e2:ae:28:b0:c7:00:3c:50:cc:ac:93:56:
6d:b2:37:d2:dc:de:50:ea:ec:e3:55:28:f0:78:44:62:f2:b3:
22:c5:7d:47:cc:8a:7d:7a:6b:73:44:36:6a:be:b6:f4:87:1e:
e2:41:6d:d9:21:84:16:be:98:83:20:4e:ed:14:13:14:e0:d9:
b5:95:66:14:7a:be:c5:f7:75:45:9a:ed:13:de:59:e8:27:10:
e6:bd:49:e2:0b:4b:50:ee:5c:4e:45:41:7f:dd:1b:fe:79:65:
aa:32:43:e2:8e:93:c8:80:93:82:60:e7:6a:52:b7:41:9c:15:
2e:8f:2b:66:78:ba:14:fe:a3:70:a7:00:e2:b7:6d:ee:77:d5:
da:f7:95:ee:3a:5f:5b:79:9e:da:79:ee:2e:53:48:ee:2f:ad:
a9:55:e2:93:2f:07:36:80:ec:90:12:3e:06:62:a2:0c:3a:38:
5d:ae:3b:b0:ef:1d:4d:71:ef:62:3a:b6:45:49:ef:56:3f:e0:
fa:3a:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:37 2025 by rpki-client