![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft
File: Gjt547STLIPQqVu5Gl0TeGc16CA.mft (raw, json)
Hash identifier: dTiiNfpbnsPwSURIteMdgRXTnefSswwApbnVBXt2xoU=
Subject key identifier: 2D:1C:21:2E:F8:47:3B:58:1B:DF:02:C0:ED:58:07:D8:F3:A1:3B:F8
Authority key identifier: 1A:3B:79:E3:B4:93:2C:83:D0:A9:5B:B9:1A:5D:13:78:67:35:E8:20
Certificate issuer: /CN=1a3b79e3b4932c83d0a95bb91a5d13786735e820
Certificate serial: 018C6D5971387E5821BCFA9C24C676374B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjt547STLIPQqVu5Gl0TeGc16CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft
Manifest number: 0B69
Signing time: Fri 15 Dec 2023 12:00:27 +0000
Manifest this update: Fri 15 Dec 2023 12:00:27 +0000
Manifest next update: Sat 16 Dec 2023 12:00:27 +0000
Files and hashes: 1: Gjt547STLIPQqVu5Gl0TeGc16CA.crl (hash: 7p4zqDoxTqdFEYNmg4oY269tTTFR/+NnseKGHAuYySQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:59:71:38:7e:58:21:bc:fa:9c:24:c6:76:37:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3b79e3b4932c83d0a95bb91a5d13786735e820
Validity
Not Before: Dec 15 12:00:27 2023 GMT
Not After : Dec 16 12:00:27 2023 GMT
Subject: CN=2d1c212ef8473b581bdf02c0ed5807d8f3a13bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:d8:4a:84:ff:39:00:c2:48:47:26:a6:64:
77:02:ca:c3:13:41:e3:70:d2:f3:b0:2d:54:c4:51:
cb:57:08:5f:7c:07:96:1d:70:37:1f:3a:15:da:5f:
be:c3:71:40:b3:01:22:5c:9d:1b:e6:29:08:8b:52:
60:e4:02:28:6e:d5:dd:dd:dc:bc:71:a2:c9:fd:ab:
cc:93:58:f3:0c:b0:9a:4d:32:56:ad:47:a5:31:72:
dc:a1:8d:97:1f:da:a7:a2:92:5b:93:41:b0:68:8a:
8a:fc:cc:06:79:8a:cd:67:33:0e:8d:03:26:41:97:
d1:fd:07:e2:50:9e:e2:58:83:93:e4:8f:b9:1b:4a:
f1:63:14:d1:09:cf:03:54:a8:8a:fd:3e:c2:40:bd:
3d:d5:bb:4a:e8:82:49:fe:99:c6:34:ad:f4:c7:e1:
2f:92:f6:18:f8:4b:d6:9d:c8:29:0b:5d:3d:3c:b2:
6f:43:01:d6:00:b3:b7:86:d9:4c:e2:92:dc:b6:d5:
b4:cd:68:d1:07:d7:68:1b:05:2d:62:4e:2c:02:bf:
11:51:f5:b2:83:50:cf:8c:b0:3d:b3:5e:4b:78:76:
66:3c:86:1b:3f:8d:f2:3c:a1:14:8c:32:ec:ce:42:
5d:fc:b8:e5:16:8a:e2:be:ee:21:c6:a9:07:36:a5:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:21:2E:F8:47:3B:58:1B:DF:02:C0:ED:58:07:D8:F3:A1:3B:F8
X509v3 Authority Key Identifier:
keyid:1A:3B:79:E3:B4:93:2C:83:D0:A9:5B:B9:1A:5D:13:78:67:35:E8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjt547STLIPQqVu5Gl0TeGc16CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/bb2775-69ae-4985-94c3-5f0471864166/1/Gjt547STLIPQqVu5Gl0TeGc16CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4b:e3:ed:bb:b2:87:8c:45:84:8d:36:fd:37:39:e0:06:e2:
ba:ab:df:31:0a:75:37:6d:25:65:52:79:d7:cb:9d:40:26:0a:
a8:38:32:48:9d:4d:df:24:31:d8:b6:bf:01:c7:47:08:9a:5d:
be:fc:35:c1:4e:52:68:a5:f9:fa:1e:d8:13:ec:c5:0b:aa:6b:
cf:6d:d0:0d:07:80:1f:b8:4c:9d:cf:a6:9e:e0:0b:c5:38:c6:
01:98:40:f5:ed:ad:2a:24:3e:96:7c:46:91:f2:b1:26:d6:a2:
79:f8:5e:fc:7f:6e:64:5e:fd:2c:57:72:b6:92:cd:07:a2:85:
9c:39:0f:7e:66:c6:4a:dd:b2:98:26:7d:8c:af:8d:99:f2:b8:
00:11:bf:e8:6d:d0:4f:65:eb:9a:80:0c:bc:46:44:fa:a0:fb:
c6:bf:80:34:ee:df:69:f2:81:0f:66:15:b4:3e:f5:39:db:41:
64:c9:c2:e4:ef:07:92:cf:e1:b4:c9:2a:ce:1e:d5:8b:3b:8d:
dc:51:49:ba:12:c8:af:43:6d:8e:2a:c4:c3:db:ef:a9:b9:76:
b6:b5:2f:e0:1e:8b:1d:25:39:fd:e3:da:ba:8c:88:5c:f6:71:
86:6b:c6:d5:bb:c1:6b:90:b1:38:ef:71:f5:04:03:88:9a:89:
c4:a2:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:45 2025 by rpki-client