![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
File: T-K83s4GOAT7KsUMEpagOkABBLE.mft (raw, json)
Hash identifier: S4tRXN2ztFRu9FreK+xNT/XPwzHUtB0znIjbtARVwkE=
Subject key identifier: D9:B3:EE:64:83:0C:6B:53:FE:A4:96:73:8B:73:AA:6A:9D:E9:B0:A3
Authority key identifier: 4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1
Certificate issuer: /CN=4fe2bcdece063804fb2ac50c1296a03a400104b1
Certificate serial: 019159220561A6F99CDCB0354C94543807B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
Manifest number: 04D3
Signing time: Fri 16 Aug 2024 03:01:27 +0000
Manifest this update: Fri 16 Aug 2024 03:01:27 +0000
Manifest next update: Sat 17 Aug 2024 03:01:27 +0000
Files and hashes: 1: T-K83s4GOAT7KsUMEpagOkABBLE.crl (hash: JNf1EF/eXaLwU2XMGK/yKdC47HRvdBBXbc+u3H7hXYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:59:22:05:61:a6:f9:9c:dc:b0:35:4c:94:54:38:07:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe2bcdece063804fb2ac50c1296a03a400104b1
Validity
Not Before: Aug 16 03:01:27 2024 GMT
Not After : Aug 17 03:01:27 2024 GMT
Subject: CN=d9b3ee64830c6b53fea496738b73aa6a9de9b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:8f:de:5a:bb:0d:83:09:c5:a1:30:a4:41:
49:6b:b0:20:35:d4:ec:61:e7:1d:25:c8:80:da:66:
54:07:44:cc:ca:c4:db:87:09:64:71:4c:5c:1d:cc:
5e:91:fe:64:26:61:91:fb:54:db:54:da:c5:4b:34:
3f:79:fb:59:eb:ac:dc:3a:9e:81:53:2c:58:98:23:
ed:d4:62:c2:4f:e0:3a:d8:50:99:cb:22:f0:c1:b0:
2d:85:83:c4:d9:fe:1c:2f:5e:78:9c:2f:65:cd:9b:
89:bc:67:4e:24:51:11:0e:82:a3:92:38:6c:d4:29:
94:73:dc:ab:70:8a:80:5f:c5:9e:da:b4:cf:56:c1:
d9:0c:7f:d5:06:27:46:1d:58:c1:bb:e3:dd:27:0d:
ab:51:3f:28:2b:cd:8e:74:54:2b:80:d7:7e:38:81:
82:10:3f:5a:41:05:9e:d0:ac:0d:10:b5:e4:54:62:
a3:ca:17:0a:24:57:59:29:76:bd:7c:d4:c5:f7:dd:
ae:48:7d:14:97:3b:53:69:21:0a:3e:af:2d:c3:0d:
fc:90:ba:fe:11:32:88:99:cb:60:18:2a:93:71:ef:
0b:b7:7d:29:dc:a6:8b:98:5f:37:97:5d:b7:01:f1:
a9:3d:e3:05:df:5d:9b:ed:99:8a:49:50:27:13:ae:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:EE:64:83:0C:6B:53:FE:A4:96:73:8B:73:AA:6A:9D:E9:B0:A3
X509v3 Authority Key Identifier:
keyid:4F:E2:BC:DE:CE:06:38:04:FB:2A:C5:0C:12:96:A0:3A:40:01:04:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-K83s4GOAT7KsUMEpagOkABBLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6a8454-7fee-4237-912f-2f8d7296bdb9/1/T-K83s4GOAT7KsUMEpagOkABBLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0d:da:71:df:ad:e1:9c:bd:d7:ac:fe:99:ef:bf:75:d5:23:
82:47:62:f0:a6:ab:d3:29:79:9b:90:c5:ae:1b:b9:a5:57:b8:
f7:8c:8b:78:e2:de:03:c4:36:21:e3:6e:84:30:67:a2:14:98:
ee:f2:d8:29:d6:99:95:2a:56:09:2c:58:f6:73:a3:90:67:16:
46:af:c1:c2:6c:f1:29:5d:d6:c9:ea:71:2a:96:aa:fc:0a:f4:
80:d5:2a:9b:c4:20:32:8e:c9:57:47:00:7d:82:22:77:b4:7b:
c4:fe:d8:73:5d:3c:46:62:4c:8e:ef:44:68:d3:1e:0d:73:81:
75:c2:38:44:b9:6d:72:3e:7f:f8:0d:a8:66:e7:3e:0e:3b:a3:
2f:6e:33:cd:12:42:88:c6:90:bc:a1:40:44:c3:ee:a5:57:b7:
2b:d5:ba:ff:ce:6d:75:cd:06:97:72:c2:c2:b9:ef:7e:c8:4c:
35:2a:af:ee:7f:e1:1e:a6:cc:2b:41:e8:1d:bf:af:5a:53:6f:
78:c4:96:43:d7:54:b5:ee:fa:a5:cb:e1:26:98:bf:73:fe:67:
e7:81:e1:95:5f:a5:fc:19:f1:69:8b:60:94:87:da:6c:07:75:
a1:36:6c:eb:e0:6b:e4:01:ad:28:fd:5e:42:a1:78:ec:14:58:
0d:ba:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:18 2025 by rpki-client