![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.mft
File: oe5llaLG0UzqBkW0jCGPJNSR4xg.mft (raw, json)
Hash identifier: tmAGV1JV7TzSe75E2c0OLlWp/Bq6Jj3v/GeW+QMT7UA=
Subject key identifier: 49:32:99:6D:D5:BF:D8:41:A1:D4:CA:5C:8B:C9:31:14:56:EE:8A:5D
Authority key identifier: A1:EE:65:95:A2:C6:D1:4C:EA:06:45:B4:8C:21:8F:24:D4:91:E3:18
Certificate issuer: /CN=a1ee6595a2c6d14cea0645b48c218f24d491e318
Certificate serial: 0183CB31508CD8A4ED77013D781ED496ADBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oe5llaLG0UzqBkW0jCGPJNSR4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.mft
Manifest number: 0B0B
Signing time: Wed 12 Oct 2022 07:55:50 +0000
Manifest this update: Wed 12 Oct 2022 07:55:50 +0000
Manifest next update: Thu 13 Oct 2022 07:55:50 +0000
Files and hashes: 1: EXErO9ZB1GAEyIVAUUSQDCOz0Ik.roa (hash: fsL0wxJXWpFHLqO8yn/C+Hd7b7M2H6NqD4AK/LoX9EY=)
2: oe5llaLG0UzqBkW0jCGPJNSR4xg.crl (hash: O4pcUMbGfrIFcnIM6HlxqzVjGEj05alVKFNNl/Rz/XQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:31:50:8c:d8:a4:ed:77:01:3d:78:1e:d4:96:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ee6595a2c6d14cea0645b48c218f24d491e318
Validity
Not Before: Oct 12 07:55:50 2022 GMT
Not After : Oct 13 07:55:50 2022 GMT
Subject: CN=4932996dd5bfd841a1d4ca5c8bc9311456ee8a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:bb:34:ce:d4:af:8c:3c:b6:e1:01:34:f0:
d2:59:65:3d:0f:c9:45:71:d3:8a:e6:6a:49:97:25:
8e:71:1e:04:d1:6b:04:b6:68:7f:e8:f8:5b:d5:43:
12:14:5e:3c:17:89:a4:42:c1:8c:f5:4d:23:fa:19:
46:a3:17:a4:8c:25:d7:7e:68:c0:fe:78:22:a4:d3:
86:08:49:ab:5d:bf:5e:00:8a:cd:34:6a:43:9c:56:
bc:a4:7c:55:0c:26:84:5f:f4:9c:c5:3b:29:ac:ba:
66:ec:9c:1d:cd:35:4a:a0:6a:19:b5:f6:54:6f:4b:
c5:9d:4f:b4:77:22:7e:a2:09:33:95:72:ec:28:3c:
fc:58:47:48:ff:c3:f9:17:ca:45:4e:60:93:0b:16:
e3:20:80:30:f8:28:9a:67:49:f8:3d:0a:b7:2d:59:
11:01:81:83:16:b5:b7:28:17:88:c9:8d:12:e6:b2:
1f:b6:2b:56:e2:02:f7:43:e6:f7:f3:d3:a4:06:6e:
79:9c:53:00:e4:99:b8:52:67:37:06:e3:40:63:d7:
b4:e4:f3:2c:98:ac:6b:f3:33:45:bc:5a:f4:ee:e5:
2d:b8:06:e7:18:d8:ca:7a:6f:e0:0e:b2:db:25:75:
c0:29:89:98:2f:ba:75:9e:b7:52:7a:29:31:81:ba:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:99:6D:D5:BF:D8:41:A1:D4:CA:5C:8B:C9:31:14:56:EE:8A:5D
X509v3 Authority Key Identifier:
keyid:A1:EE:65:95:A2:C6:D1:4C:EA:06:45:B4:8C:21:8F:24:D4:91:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oe5llaLG0UzqBkW0jCGPJNSR4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a19a2-230e-467c-8e37-266540e30e5b/1/oe5llaLG0UzqBkW0jCGPJNSR4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9c:6d:84:89:8c:19:93:1f:14:ec:63:ff:73:fe:21:5b:11:
63:33:f0:32:64:a7:74:41:2c:f7:d1:0e:4f:19:d1:e5:ea:64:
ec:d8:4d:61:35:f9:ec:46:4f:57:33:d5:20:20:cd:e6:fd:89:
a8:19:ce:dc:5b:65:8f:fa:98:aa:a2:a2:5f:bd:f8:8b:55:7c:
f5:0d:f1:e5:3a:28:ba:c3:ce:ef:e0:2c:e0:c0:e9:e4:b0:c9:
72:f9:98:c1:6f:4c:25:1a:dd:ab:c2:31:ff:86:b1:38:9e:5a:
b6:3b:db:80:11:09:18:70:20:61:b1:e7:9e:3f:c1:fc:25:44:
39:c2:b4:53:cc:7f:3c:8a:6d:e9:ff:f5:0f:a3:99:4e:71:90:
75:24:03:37:8a:b5:5c:d5:04:dd:5c:d2:6f:2a:74:ca:ef:2a:
cd:04:ea:91:27:e5:63:f8:f1:14:6d:83:d4:b6:b7:04:51:19:
54:30:97:5d:8f:f0:77:00:ba:98:85:be:aa:04:a3:ed:d4:34:
c0:1a:bc:61:ee:b5:b3:bf:20:73:c5:aa:83:df:af:46:f3:b4:
84:92:a4:05:4e:35:3d:02:bd:33:8e:85:92:b2:91:a6:23:d1:
87:c3:5c:99:ad:02:45:ae:83:1a:cb:d9:5f:d7:4e:d0:8d:a1:
0a:8d:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:54 2025 by rpki-client