![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/335961-9ee4-43c3-a293-e1916d38e689/1/ZrcWGKtIMWv_qDWMcXAAflpwNhk.mft
File: ZrcWGKtIMWv_qDWMcXAAflpwNhk.mft (raw, json)
Hash identifier: Jckb6Y2Xmwlr4589/RwaLNKZUaTVj65TFKQhfdDS5jY=
Subject key identifier: 03:73:98:33:87:1A:92:84:A6:33:6A:6F:62:D6:14:2D:14:78:4C:89
Authority key identifier: 66:B7:16:18:AB:48:31:6B:FF:A8:35:8C:71:70:00:7E:5A:70:36:19
Certificate issuer: /CN=66b71618ab48316bffa8358c7170007e5a703619
Certificate serial: 018E4158135A0375AD70C812C5A000E4DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrcWGKtIMWv_qDWMcXAAflpwNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/335961-9ee4-43c3-a293-e1916d38e689/1/ZrcWGKtIMWv_qDWMcXAAflpwNhk.mft
Manifest number: 0A4B
Signing time: Fri 15 Mar 2024 09:01:14 +0000
Manifest this update: Fri 15 Mar 2024 09:01:14 +0000
Manifest next update: Sat 16 Mar 2024 09:01:14 +0000
Files and hashes: 1: ZrcWGKtIMWv_qDWMcXAAflpwNhk.crl (hash: 9jXfT0DyHiYq4a0whxArh3OZNs3FKJlyu5zfNNiRqHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:58:13:5a:03:75:ad:70:c8:12:c5:a0:00:e4:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b71618ab48316bffa8358c7170007e5a703619
Validity
Not Before: Mar 15 09:01:14 2024 GMT
Not After : Mar 16 09:01:14 2024 GMT
Subject: CN=03739833871a9284a6336a6f62d6142d14784c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:b7:1a:d8:af:7c:1c:0a:41:a2:fe:bd:12:
4a:c6:8d:70:5c:58:dc:6b:24:fe:f6:0b:a5:2f:cd:
7e:66:23:db:af:ac:20:3d:72:46:2c:61:e7:d3:e7:
4f:5e:25:6c:25:4b:bb:02:d8:09:a7:60:e5:2f:2b:
3f:25:d9:4b:56:6f:2f:83:ee:f7:e6:d2:f0:c1:89:
ee:34:5b:46:96:c9:9c:47:ed:a4:13:9b:05:1c:07:
50:27:e9:45:e4:c2:78:11:bc:59:4a:a5:3c:dd:67:
62:09:bb:02:99:74:b2:7f:c1:5f:c4:d6:10:5c:58:
bc:55:e5:40:44:3e:6f:2c:52:e8:52:ae:25:2b:a5:
68:90:96:ed:8b:dc:61:92:c5:74:37:ab:6a:0c:1a:
75:03:65:f0:7e:e5:38:08:e4:2a:ad:fd:0b:49:c3:
37:b5:d8:b6:c3:2c:33:38:18:19:9d:02:2f:20:7f:
5b:52:e0:9d:81:be:c8:3f:15:23:0e:9f:cd:24:40:
23:0a:33:d6:b1:61:4c:45:51:aa:7b:4f:a1:c6:e8:
54:91:02:74:7c:ee:8c:68:d8:a4:28:a8:28:ff:ad:
7a:c5:79:a0:81:7a:3b:b5:b9:0c:a3:0b:db:35:00:
ad:40:d1:96:c6:4b:3d:a3:a9:bb:d6:b0:7a:58:9c:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:98:33:87:1A:92:84:A6:33:6A:6F:62:D6:14:2D:14:78:4C:89
X509v3 Authority Key Identifier:
keyid:66:B7:16:18:AB:48:31:6B:FF:A8:35:8C:71:70:00:7E:5A:70:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrcWGKtIMWv_qDWMcXAAflpwNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/335961-9ee4-43c3-a293-e1916d38e689/1/ZrcWGKtIMWv_qDWMcXAAflpwNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/335961-9ee4-43c3-a293-e1916d38e689/1/ZrcWGKtIMWv_qDWMcXAAflpwNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1b:3e:60:64:96:87:eb:eb:95:f4:28:71:ce:bd:b7:5a:46:
68:53:3a:e4:6c:fe:b2:f6:a0:b5:66:b6:bd:44:7e:74:c9:ba:
94:5a:db:92:71:d3:52:58:a6:a4:a0:41:0a:c9:33:ee:d2:c7:
e8:df:b3:cd:60:34:5d:ab:f6:3a:d1:62:26:5a:f8:43:86:25:
cb:61:06:89:6a:8e:5a:f7:0b:b1:ff:42:ef:e0:a8:5f:c5:2e:
c1:10:87:63:8a:3a:a1:82:84:a8:38:4e:37:cf:dd:ce:9f:ed:
b6:44:39:95:1f:a1:6d:3b:e1:28:8f:0b:f8:19:bf:77:ba:05:
7f:37:d3:7f:1b:4b:6c:73:94:69:5a:cc:9a:b7:16:c0:c2:f2:
64:97:a2:b6:87:17:f8:c5:bc:17:4a:ed:a7:96:10:4d:54:80:
e4:9c:7c:2e:d2:ae:c6:f8:40:ad:d0:04:5a:b8:f4:b6:b4:bf:
48:0a:c8:89:52:21:21:fb:b6:bf:ef:9a:26:cc:2b:4b:35:cf:
6c:27:9c:32:2a:23:c6:75:ab:b7:81:4e:5b:74:ca:42:4b:50:
ad:92:7b:9d:d8:03:7f:cc:11:11:6d:20:a5:3e:67:11:0a:e4:
54:4f:33:a6:99:a1:5e:ff:72:36:ef:0a:cf:e3:98:02:64:0c:
f1:da:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:13 2025 by rpki-client