![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.mft
File: 0LG-yY55Rx7A4Q0cNFIGcZbJHBI.mft (raw, json)
Hash identifier: OvoL4l3atifczSTnGj29QWnqJPUo/KbfYxH0je/P68w=
Subject key identifier: 12:2A:37:6C:1A:99:2C:5B:A2:83:A8:E6:40:01:C2:DB:92:85:10:D4
Authority key identifier: D0:B1:BE:C9:8E:79:47:1E:C0:E1:0D:1C:34:52:06:71:96:C9:1C:12
Certificate issuer: /CN=d0b1bec98e79471ec0e10d1c3452067196c91c12
Certificate serial: 0193B9076D7C9B656F59D71FDEFCA154A4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.mft
Manifest number: 0E13
Signing time: Thu 12 Dec 2024 04:01:31 +0000
Manifest this update: Thu 12 Dec 2024 04:01:31 +0000
Manifest next update: Fri 13 Dec 2024 04:01:31 +0000
Files and hashes: 1: 0LG-yY55Rx7A4Q0cNFIGcZbJHBI.crl (hash: O/HslkE9jskuCkX4fzCZW8MZb1II0aQViT3DYUnQpK8=)
2: 5S_0WNpG8IGKNf6h97KANaTCt1M.roa (hash: 2TrN/TUaZemPFn0+MQR5i+WdcDnP21/Tg5f63bJ5kyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:07:6d:7c:9b:65:6f:59:d7:1f:de:fc:a1:54:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b1bec98e79471ec0e10d1c3452067196c91c12
Validity
Not Before: Dec 12 04:01:31 2024 GMT
Not After : Dec 13 04:01:31 2024 GMT
Subject: CN=122a376c1a992c5ba283a8e64001c2db928510d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:19:14:ac:60:ba:60:ad:5b:e1:8d:c7:c2:
94:9b:dd:df:31:70:55:fa:b8:5a:e8:c5:5b:fa:4b:
6a:2b:38:a1:4d:0e:a0:3f:c6:62:5a:f8:ab:e6:a6:
41:e4:ed:6a:95:11:1d:a1:cc:f8:a8:c0:c1:55:35:
d3:2e:18:88:c2:97:d1:c3:cb:86:1f:fa:23:87:3d:
d3:04:2c:0f:87:cb:05:f0:f8:5d:93:5a:a3:b4:8c:
b1:3d:bb:83:9b:6f:d4:dc:93:6a:2f:92:b9:60:71:
78:81:af:fc:4b:e9:28:a3:2c:a0:66:bc:6c:eb:ff:
8e:da:55:e9:e5:ee:fe:35:3a:2b:ae:d2:1c:44:12:
7d:55:d3:f2:33:18:6c:53:19:45:f5:bf:5f:02:45:
92:e7:19:37:f0:95:14:13:d9:26:43:0a:e7:e1:ef:
d9:b5:56:e4:f6:f8:aa:f3:19:10:be:95:71:2c:29:
95:a4:99:af:e5:11:27:68:cb:0a:34:e2:15:9b:f3:
b4:6c:ee:86:dc:3a:af:be:cb:21:b2:93:a5:20:1a:
21:20:74:09:ff:b1:94:c7:39:23:3a:9a:14:cb:74:
c5:5f:87:20:a9:70:8c:26:8a:b7:2a:b9:8a:51:7b:
ac:39:35:ac:65:46:f5:d1:37:54:da:5a:89:d4:e0:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:37:6C:1A:99:2C:5B:A2:83:A8:E6:40:01:C2:DB:92:85:10:D4
X509v3 Authority Key Identifier:
keyid:D0:B1:BE:C9:8E:79:47:1E:C0:E1:0D:1C:34:52:06:71:96:C9:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:60:b0:21:33:2e:81:a6:ac:3e:9a:b8:fb:a0:f1:32:76:2d:
85:73:2c:68:9a:55:61:16:5c:0b:aa:ba:9c:44:da:cb:8e:b0:
05:0b:83:2e:51:ba:49:45:14:fc:ab:04:79:a4:3f:18:2b:a0:
48:34:21:0e:ed:6b:77:07:6b:9e:72:5a:a2:06:9c:5a:e6:b2:
cd:27:41:1b:19:ba:ab:a6:ab:4d:dd:7d:44:8e:f7:d1:c1:21:
ce:a2:39:64:2f:f6:d7:62:fc:8a:c5:4b:19:9d:85:a8:27:58:
05:3a:1a:ed:9f:11:b8:2c:41:be:3f:63:a0:c8:e5:c0:1e:3b:
34:0b:ce:41:19:07:00:e8:bf:a6:b3:32:db:77:ea:ad:4a:43:
16:f8:69:39:1f:5b:5e:22:cf:6d:97:7e:99:f1:fa:19:2b:e2:
87:b6:4a:b3:50:dd:51:64:80:6e:fc:1b:8d:4a:aa:6e:de:73:
34:fc:b9:53:ec:6f:e8:fe:9e:9e:c8:57:07:04:1b:77:f8:64:
fb:54:b7:6e:8d:af:53:a3:3a:92:52:7b:87:93:14:ba:18:35:
d5:05:a5:eb:cd:c8:4f:e7:ee:94:cd:0e:fe:2f:d2:1c:84:ef:
32:10:c6:7b:b8:ae:b5:8e:fc:c2:15:8c:99:ab:73:24:86:b6:
2a:3f:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:32 2025 by rpki-client