![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.mft
File: trt5TOh6qGfIp1c0L4DQ2l_oFZQ.mft (raw, json)
Hash identifier: KlnE1yMCbTTB+lBHjinL9WuM4LGnfEX373S5pjKSy58=
Subject key identifier: B7:4C:EB:28:C9:2F:8E:E0:9D:B2:1B:51:86:F1:11:F3:21:5F:BE:48
Authority key identifier: B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
Certificate issuer: /CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Certificate serial: 01931E887CD83B36C7775ED8482465B0FA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.mft
Manifest number: 0A77
Signing time: Tue 12 Nov 2024 04:01:21 +0000
Manifest this update: Tue 12 Nov 2024 04:01:21 +0000
Manifest next update: Wed 13 Nov 2024 04:01:21 +0000
Files and hashes: 1: trt5TOh6qGfIp1c0L4DQ2l_oFZQ.crl (hash: BpDEVaWe5bV4JXtWcbb6EbE5j+Z3hvJ+9Ltn9WhSs0A=)
2: wBxf_DK6Jdp9y6yd23EHtXiCWuI.roa (hash: MsYwsmZajqqYOBzNUradVezZdFi2fuyXukuS/VG8t5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1e:88:7c:d8:3b:36:c7:77:5e:d8:48:24:65:b0:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6bb794ce87aa867c8a757342f80d0da5fe81594
Validity
Not Before: Nov 12 04:01:21 2024 GMT
Not After : Nov 13 04:01:21 2024 GMT
Subject: CN=b74ceb28c92f8ee09db21b5186f111f3215fbe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:34:14:92:43:e4:9f:fb:57:16:fe:49:6d:
61:9c:5c:5a:8e:49:58:40:2e:bd:06:fa:71:e2:9a:
ba:72:79:d1:4a:64:ca:56:ab:c7:21:b3:92:43:d2:
a1:de:0b:4c:dc:00:ce:6f:51:22:a7:6d:48:55:cc:
9d:dd:6d:f2:ca:58:d5:c2:10:b1:95:a4:85:94:de:
b1:2f:05:c5:79:da:bd:06:32:95:e2:27:db:10:45:
8a:d5:31:70:9e:ba:99:dd:1a:70:78:ca:5e:a7:83:
8d:3d:c7:98:15:6b:e2:c8:f8:da:21:24:65:53:df:
39:98:6f:46:3c:45:93:bc:a4:1c:fe:14:d0:57:a3:
f2:e5:b2:eb:cb:8f:c5:82:ff:3c:a2:65:b6:7e:cf:
ae:9b:7e:50:a9:fa:88:17:48:d0:b3:af:e2:80:8b:
e0:f1:9a:cb:7f:0c:24:7d:3e:4c:2c:f1:3b:3a:a0:
79:9d:2b:87:c6:1a:56:70:b9:ad:06:1c:31:c5:ce:
f9:45:b0:78:0f:f0:d5:78:45:73:08:1c:a4:07:1f:
e7:9b:5a:de:3a:1d:be:e7:2e:0c:a0:d6:39:7c:fe:
e7:34:21:2d:db:4a:44:8c:e6:da:d4:fe:21:a3:09:
75:43:ad:33:90:a9:d7:b2:41:1d:39:9b:0b:68:c6:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:EB:28:C9:2F:8E:E0:9D:B2:1B:51:86:F1:11:F3:21:5F:BE:48
X509v3 Authority Key Identifier:
keyid:B6:BB:79:4C:E8:7A:A8:67:C8:A7:57:34:2F:80:D0:DA:5F:E8:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4dc05b-7da2-4e98-87bd-a7323d393050/1/trt5TOh6qGfIp1c0L4DQ2l_oFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:a1:a3:a3:b6:c8:6f:ec:80:ce:53:99:31:d9:46:94:df:
3d:d6:e1:d9:f9:53:b3:f3:78:d7:62:c3:62:22:cc:cb:e4:1e:
f0:a4:41:f2:0e:4a:7d:4d:f9:12:80:ca:93:58:0b:f0:b4:5f:
fa:38:3e:eb:56:15:39:0d:da:5c:4f:9f:99:d4:81:66:9d:2d:
4a:f6:9d:99:76:f4:fb:a7:dd:e6:93:9f:e3:c8:00:b7:a7:d7:
f1:aa:87:a1:cf:19:b4:06:65:69:91:97:3e:6c:98:ea:45:ab:
1b:d2:f8:f8:e8:db:ac:a6:b5:94:ed:55:27:b2:cf:cd:a4:42:
df:fc:71:0d:b8:69:32:a5:a3:c0:19:8e:ef:5d:37:48:0a:0b:
6d:17:a9:ba:52:a9:ce:48:54:e6:ee:0e:49:07:92:ca:8d:7b:
b6:cb:74:95:d1:83:f8:2d:13:46:6d:19:5f:c8:c4:6a:d5:5c:
dd:fd:f9:ad:95:27:2d:fd:22:d9:cf:f4:7f:01:d2:1b:3a:62:
3d:c4:66:69:d5:5e:cb:c7:81:bb:2d:e3:58:22:ca:a7:ae:e0:
e0:66:de:6f:e5:58:98:d6:47:5d:7e:32:18:6a:86:23:06:6f:
cc:8c:25:f0:dd:e6:38:e6:d8:16:55:6f:88:70:d6:af:d5:88:
5a:8d:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:27 2025 by rpki-client