![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft
File: Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft (raw, json)
Hash identifier: uwI7KyvItrxDVM0MnfkHAs5WZX0nTx2gvwvk2zOEeyw=
Subject key identifier: 60:F0:A5:06:DA:3F:4F:8B:1E:63:A8:1A:B7:58:C8:E4:44:84:5C:FB
Authority key identifier: 09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
Certificate issuer: /CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Certificate serial: 01874597ECEB163573CEF3F5B261568ECCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft
Manifest number: 0AAA
Signing time: Mon 03 Apr 2023 05:29:56 +0000
Manifest this update: Mon 03 Apr 2023 05:29:56 +0000
Manifest next update: Tue 04 Apr 2023 05:29:56 +0000
Files and hashes: 1: Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl (hash: Pu1GBls57VIe+ATy9VYYRsGpzGEnHaUoO+X45QE8ttc=)
2: HBTEcCGVNr2cwt8I8-hj197lIS8.roa (hash: Xqh6457AcLc0ON0hqHVMUKkiGhjWbtrB+71ptAUaapc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:97:ec:eb:16:35:73:ce:f3:f5:b2:61:56:8e:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Validity
Not Before: Apr 3 05:29:56 2023 GMT
Not After : Apr 4 05:29:56 2023 GMT
Subject: CN=60f0a506da3f4f8b1e63a81ab758c8e444845cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:4c:03:02:e7:9c:04:9c:fb:ea:7b:84:40:
f6:48:f1:59:ba:ef:cb:73:ce:bd:e4:75:0b:72:86:
ca:06:f0:c3:52:70:86:c3:c8:50:5d:94:fd:0e:0c:
73:a1:36:b0:ff:72:9c:bc:8d:dc:d1:c4:0f:77:9e:
d7:62:a8:3b:92:36:d8:63:28:6d:6c:a5:dd:08:ea:
cc:68:da:41:6c:fa:a1:00:6b:4d:25:b1:e9:94:62:
1d:5a:8b:0c:d7:c3:9e:ef:dd:54:9e:e3:1e:1f:f9:
94:a2:b4:04:f3:fe:a9:aa:8e:f4:00:31:ca:a9:ee:
8b:34:9d:d5:15:02:ef:64:70:11:ab:8f:a4:38:59:
20:46:f1:59:35:89:11:a9:73:37:43:5f:07:06:2e:
11:2c:70:24:be:34:8f:5d:f3:2c:fc:04:bb:f3:c3:
47:17:28:f6:d5:2b:ca:54:9e:07:d6:41:e6:4a:61:
60:f9:1e:69:e0:b4:ca:9d:ff:1c:c0:78:1f:15:07:
e6:ce:cc:d2:c3:ce:da:7c:6d:18:f4:f1:b1:d9:1e:
15:68:8e:23:e6:6f:46:a5:81:9d:52:7f:03:b0:3d:
2e:38:af:43:08:e4:6f:a6:3c:f3:76:95:2f:d7:e8:
82:0e:67:87:06:ea:45:2c:d7:b1:e1:47:89:4c:25:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:A5:06:DA:3F:4F:8B:1E:63:A8:1A:B7:58:C8:E4:44:84:5C:FB
X509v3 Authority Key Identifier:
keyid:09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:60:71:f9:1f:ae:c0:1e:58:d7:52:ba:a9:18:c0:11:5b:
e5:77:f2:eb:31:e4:af:3a:31:b8:47:98:d3:32:6b:a5:d6:5e:
db:4d:8f:b3:8f:48:1a:dc:48:a6:4c:78:43:48:37:0c:16:07:
6a:b7:b0:d1:5b:42:09:49:af:b8:bc:79:7c:d9:71:d1:60:dc:
bd:67:4f:48:3a:6f:dd:80:8e:50:4b:72:fe:60:92:ee:dc:ca:
0f:5a:c9:3a:a7:ed:e5:37:32:f5:3b:e1:f2:ad:6c:b6:47:a0:
e0:26:a4:b9:d7:90:6d:f9:d6:79:0f:d5:2f:33:e9:13:f2:c0:
af:aa:15:e4:a3:08:1f:90:a0:e2:25:73:3e:74:f5:49:0b:72:
39:6d:87:f8:0d:22:4b:89:a7:68:fe:bb:e0:da:c1:9f:af:6f:
da:cf:83:e4:81:57:18:cf:74:e2:12:90:4f:8f:e0:35:95:b5:
53:a7:66:d4:aa:f0:eb:cb:ea:76:c5:c6:b8:9e:db:a0:cc:b2:
94:f0:23:e8:5a:60:63:fb:03:36:14:30:99:85:47:09:28:8d:
a0:85:23:12:a3:9e:35:87:85:c8:6c:bd:3b:7e:f9:bb:d3:c5:
04:78:db:a4:94:2a:29:27:ca:22:14:05:ed:b1:0e:97:b2:bc:
80:79:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:27 2025 by rpki-client