![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.mft
File: 910sBTtilmognU0hEiXJGxO82xM.mft (raw, json)
Hash identifier: wTAn4Qw3kAlH+3ogOtk47WckhvC/io+xPd7UPdwBHC0=
Subject key identifier: 07:7A:B0:4F:6D:DD:42:4E:90:21:F2:74:3C:B1:AC:BE:DE:5F:41:C8
Authority key identifier: F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
Certificate issuer: /CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Certificate serial: 018DCEF98005F8737A4A98706B5D3CA5CDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.mft
Manifest number: C5
Signing time: Thu 22 Feb 2024 04:01:14 +0000
Manifest this update: Thu 22 Feb 2024 04:01:14 +0000
Manifest next update: Fri 23 Feb 2024 04:01:14 +0000
Files and hashes: 1: 910sBTtilmognU0hEiXJGxO82xM.crl (hash: bShOPFHOiSY/RJNJvgimlOM53gpfvGuvMLIOtmgEUHs=)
2: wrbhuxMd3Jb1xFpyMGCxm3d6n4E.roa (hash: YmCb6Z1YJNROklXVQubCD14EcMfzW2WZ+05WXGmEPyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ce:f9:80:05:f8:73:7a:4a:98:70:6b:5d:3c:a5:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Validity
Not Before: Feb 22 04:01:14 2024 GMT
Not After : Feb 23 04:01:14 2024 GMT
Subject: CN=077ab04f6ddd424e9021f2743cb1acbede5f41c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:ed:6d:30:35:8f:74:ba:ea:a6:dd:51:f2:
7e:dd:dd:ea:14:97:1b:a8:ac:7a:ca:01:be:3c:27:
b9:02:23:11:55:c0:4d:26:b5:c3:22:3d:30:f2:25:
86:3d:fa:1f:84:e6:99:f4:7b:e7:78:ce:b7:92:dc:
e7:e9:35:f0:c9:c9:66:de:a1:52:e4:bd:e2:df:03:
1e:3d:ce:bd:f8:a0:61:15:f4:f1:fb:27:24:0c:c3:
87:1f:ab:1e:0e:5e:e1:ed:8f:98:66:a1:35:58:b2:
bd:14:28:58:3c:96:ff:d5:88:a1:bc:bd:bc:1b:71:
1a:99:f6:da:5c:15:27:83:5d:28:5b:27:99:6c:8b:
7c:40:fb:b1:07:2c:47:c6:7a:80:4c:09:12:6b:07:
2b:c4:8a:b6:7b:cd:e6:44:cd:d7:3a:dc:9d:9f:f6:
93:9e:1e:03:f7:7a:bc:28:57:b9:bc:0f:2d:2b:7e:
0a:dd:47:27:c8:0d:87:78:a3:85:3a:48:4b:60:64:
26:9e:9b:91:83:4d:0c:5d:db:94:09:88:12:0d:bf:
df:3f:d7:33:ba:45:1a:c9:71:db:b0:5e:2f:54:94:
3c:9e:a3:36:f7:c6:55:43:7d:d3:75:ba:c7:d6:3d:
0f:97:b5:66:66:fc:36:0d:e1:5c:2c:d9:f3:cf:d3:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7A:B0:4F:6D:DD:42:4E:90:21:F2:74:3C:B1:AC:BE:DE:5F:41:C8
X509v3 Authority Key Identifier:
keyid:F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:72:90:6b:f9:8c:90:07:86:ad:07:49:f0:ed:47:26:13:
b8:81:1b:65:19:82:aa:d8:43:76:21:75:67:78:62:87:09:a5:
1b:63:3c:3d:71:7d:31:d3:1d:d4:d8:50:36:3f:55:b6:57:a3:
46:be:25:fb:18:f8:59:a1:0e:ce:df:0e:9c:c5:f3:79:8d:82:
5b:70:a9:10:95:37:ec:14:39:d4:67:2a:30:72:cd:d0:f2:70:
9d:46:d6:a3:a4:a3:0d:df:3f:a2:a4:cc:3d:dc:5f:41:80:1a:
5d:db:8d:bf:67:f8:54:7b:76:7c:94:d9:ab:29:c6:94:e5:f0:
8f:0e:57:c7:ce:3e:97:d6:5c:fb:96:62:e3:2a:f1:a1:33:62:
60:ec:cc:56:54:b1:62:44:a5:c7:4f:00:e9:d6:da:47:8b:c6:
12:fd:76:da:1c:b8:84:19:2d:50:80:8f:66:27:39:ff:3b:26:
53:b6:d0:44:f3:57:13:4e:b5:5e:32:6d:0b:12:67:93:e2:fe:
fa:29:5e:63:93:a1:74:77:40:65:3a:02:41:f4:4e:32:b6:a6:
98:da:89:78:78:43:9f:f0:f3:18:3e:06:67:dd:a3:10:0a:f4:
ef:be:20:53:e6:41:31:0e:a1:57:28:b6:f1:87:bc:74:9d:c9:
3e:f9:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:44 2025 by rpki-client