![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.mft
File: x5B4636U50x6YhyIWT1rcggQby4.mft (raw, json)
Hash identifier: isT23A4dxe+gY0h4g9j3sg7NKfMZ2Jqoz8e6M7safuo=
Subject key identifier: 81:5F:05:73:1E:3D:B8:41:5D:17:31:58:C1:C1:D1:3C:E7:E3:1E:3B
Authority key identifier: C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E
Certificate issuer: /CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
Certificate serial: 018475B43294F408C56E5C3360518C4E28D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.mft
Manifest number: 0B70
Signing time: Mon 14 Nov 2022 10:34:14 +0000
Manifest this update: Mon 14 Nov 2022 10:34:14 +0000
Manifest next update: Tue 15 Nov 2022 10:34:14 +0000
Files and hashes: 1: x5B4636U50x6YhyIWT1rcggQby4.crl (hash: TKIId9Z4210oiLxDw33GcVvifcgDtX+y/eirY6XU6s8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:b4:32:94:f4:08:c5:6e:5c:33:60:51:8c:4e:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
Validity
Not Before: Nov 14 10:34:14 2022 GMT
Not After : Nov 15 10:34:14 2022 GMT
Subject: CN=815f05731e3db8415d173158c1c1d13ce7e31e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:de:6d:e8:d3:92:23:ab:de:b5:a5:c0:ce:
9e:18:c2:02:6a:29:b6:2d:01:2b:2d:98:f1:15:22:
98:4f:5c:5a:e2:51:47:5b:01:f0:01:b9:20:14:d1:
e7:b9:93:cc:7d:15:61:25:97:39:e4:91:ee:6d:80:
81:3c:e7:90:b2:52:51:87:49:ca:de:14:40:7f:1f:
f5:6d:02:2c:0d:90:03:38:66:22:25:ba:4f:d5:c3:
c7:c0:05:08:f8:df:d9:0d:2c:bc:02:c3:e2:10:db:
e0:a8:6c:61:f5:df:28:b6:a3:a8:ad:e2:a1:d8:0e:
26:b2:96:5c:9b:dd:7a:76:0c:86:45:41:c0:48:0f:
e4:e9:a3:73:7e:d0:9e:2f:e4:46:58:ad:2d:51:c8:
51:a3:24:f7:47:e4:c6:4f:10:99:08:8c:59:1f:f8:
26:a7:21:50:02:38:e0:e9:dd:de:56:49:76:fb:d2:
fc:65:e0:4c:30:c0:4c:e1:9d:61:6f:08:d9:2f:bb:
08:67:8e:be:77:30:32:bb:12:94:62:1b:9a:85:16:
bf:af:59:2b:e5:f6:33:df:ac:08:9b:64:29:2e:97:
aa:74:ee:98:95:7c:ab:91:83:77:f1:cb:25:42:91:
18:63:3e:8a:ae:03:24:2b:67:3c:f6:6a:f2:eb:49:
ac:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:05:73:1E:3D:B8:41:5D:17:31:58:C1:C1:D1:3C:E7:E3:1E:3B
X509v3 Authority Key Identifier:
keyid:C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:6b:9a:71:3c:4f:46:fa:43:08:94:a3:f5:aa:22:0c:ae:
4f:03:fb:60:82:68:de:fe:93:6d:7d:75:f0:a2:44:a2:31:9c:
6e:ae:76:c2:e2:18:9e:60:b8:29:cc:93:a0:bf:56:68:81:d0:
1b:95:f9:14:22:22:49:19:2f:1d:e2:96:33:fa:e9:df:9d:d0:
b9:61:cf:02:9c:af:36:3b:c1:78:5d:a0:55:2e:d4:3e:2d:f8:
d0:3e:51:d7:cf:d6:7f:47:5f:1d:d2:e0:57:d4:ee:39:d0:bf:
ea:cb:50:59:c1:1b:fa:da:38:0a:88:1d:ee:7b:c2:b9:e1:5d:
af:31:ab:12:ef:4b:59:08:9d:b8:58:5e:ec:16:f2:e0:64:34:
e5:92:f1:88:34:89:bb:a3:d7:7f:54:1d:0d:c4:49:75:2d:08:
20:49:bc:22:37:d7:d2:72:b4:a2:7a:1d:3c:f1:ea:eb:96:72:
2b:7c:da:ea:51:52:87:34:62:7b:d9:a8:4c:92:79:7b:7b:df:
0b:01:a4:cc:30:b4:5c:c5:6b:18:66:93:6a:6f:f1:b9:05:40:
ff:de:c0:ea:b7:2d:7a:a4:a3:b3:39:e3:f2:aa:10:33:59:1f:
dd:8f:2a:a1:72:c6:d0:08:55:cf:76:b6:44:e7:af:84:64:b8:
51:5f:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:31 2025 by rpki-client