![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/cJsSpBMHL-Ec103xBLHKVhbvxWs.mft
File: cJsSpBMHL-Ec103xBLHKVhbvxWs.mft (raw, json)
Hash identifier: 63nv2FDBs6M5d39xmwUVBTbSgiNs3YBw5dS5KXrYB0o=
Subject key identifier: 01:79:84:B5:BC:2A:F5:F7:90:3D:55:27:6A:C0:FD:29:A9:4D:97:88
Authority key identifier: 70:9B:12:A4:13:07:2F:E1:1C:D7:4D:F1:04:B1:CA:56:16:EF:C5:6B
Certificate issuer: /CN=709b12a413072fe11cd74df104b1ca5616efc56b
Certificate serial: 018320A5ACD718A4BA344C2351A9DA5FC038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJsSpBMHL-Ec103xBLHKVhbvxWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/cJsSpBMHL-Ec103xBLHKVhbvxWs.mft
Manifest number: 018A
Signing time: Fri 09 Sep 2022 05:07:51 +0000
Manifest this update: Fri 09 Sep 2022 05:07:51 +0000
Manifest next update: Sat 10 Sep 2022 05:07:51 +0000
Files and hashes: 1: cJsSpBMHL-Ec103xBLHKVhbvxWs.crl (hash: FWpIQARIULrxAofxKYe3lb+raIulYL4HLfx+b9Tauxg=)
2: to5-SODd8XOTembzdTIKVhK0WOs.roa (hash: VutRYSLH9VN9vrt+3mUHim1E1GM+yHJ9AyYMSJbaSG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:a5:ac:d7:18:a4:ba:34:4c:23:51:a9:da:5f:c0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709b12a413072fe11cd74df104b1ca5616efc56b
Validity
Not Before: Sep 9 05:07:51 2022 GMT
Not After : Sep 10 05:07:51 2022 GMT
Subject: CN=017984b5bc2af5f7903d55276ac0fd29a94d9788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:a6:5c:98:cc:86:91:b1:20:18:b3:57:8e:
e4:79:a2:7c:60:4b:90:bc:80:9c:56:f9:ab:e3:57:
55:fd:8f:37:2b:8d:2d:5f:6f:b3:b2:12:d1:98:88:
9a:63:e3:04:51:e4:6c:46:57:a8:79:a3:65:b0:d7:
d5:00:ad:94:bc:e8:73:9f:69:ae:7b:8f:59:6a:98:
d6:6c:54:5c:4f:e4:f8:68:2d:be:0d:99:42:73:76:
f3:2a:68:9f:02:c3:84:0b:5b:f5:5c:f9:a9:2e:2f:
5f:6b:75:d3:1f:ad:e0:b2:5e:a3:34:d2:d6:30:27:
89:f6:7a:27:18:23:04:f0:db:06:46:be:2f:65:06:
46:c3:06:1b:0f:35:a2:3d:2d:68:e9:23:8b:69:ef:
87:67:b6:03:03:8a:35:ba:8b:0a:79:a6:28:85:69:
78:ce:ed:2e:51:a5:06:5d:ad:a7:54:38:49:50:f8:
0e:2d:99:1b:b7:34:27:2a:00:2f:5c:bd:04:13:95:
b3:3f:e2:19:9a:48:91:fd:71:fd:f0:ee:b4:d8:d4:
19:25:84:a7:c2:de:f7:11:81:dc:88:7d:1b:b2:0b:
6e:b2:80:e9:a0:ab:35:8c:96:c6:d7:d0:3c:eb:25:
bb:e3:7c:7a:96:44:9a:6a:e4:59:2a:01:3a:67:d1:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:84:B5:BC:2A:F5:F7:90:3D:55:27:6A:C0:FD:29:A9:4D:97:88
X509v3 Authority Key Identifier:
keyid:70:9B:12:A4:13:07:2F:E1:1C:D7:4D:F1:04:B1:CA:56:16:EF:C5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJsSpBMHL-Ec103xBLHKVhbvxWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/cJsSpBMHL-Ec103xBLHKVhbvxWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/1b23a0-8aa6-4645-81dd-3ec9a85e906f/1/cJsSpBMHL-Ec103xBLHKVhbvxWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b8:b8:52:21:0e:df:02:21:71:30:00:dd:55:3e:18:29:78:
79:d4:6b:77:00:85:07:bc:bd:8e:d6:ca:31:ce:80:c3:89:d2:
13:fc:40:91:47:e1:c4:6c:2b:0f:6b:2a:1f:13:1a:90:0e:c6:
42:b3:c1:91:6b:87:4d:42:f5:67:f9:a1:d8:8f:b4:89:e1:69:
5b:79:93:cc:67:88:40:6f:7d:9f:33:06:ae:28:72:71:e5:1e:
05:5d:2b:09:52:eb:e9:85:2f:e9:4a:fb:49:61:5e:21:e0:9c:
69:82:5c:fe:e0:8e:7c:70:7e:32:ed:22:9b:ee:61:d2:5d:9f:
9b:83:43:60:5a:92:2a:8c:36:fc:19:09:b7:75:2d:f1:ec:7b:
9a:d6:ba:7b:31:11:71:a0:06:4b:34:ca:b1:88:46:72:f1:7f:
44:55:c0:35:73:eb:cc:a0:c4:71:fd:4d:54:c5:db:f1:c8:2c:
e7:f8:22:1c:51:59:5c:e1:be:41:51:39:2b:84:83:c0:ea:7e:
5f:07:6b:14:ab:dc:09:a9:0f:f2:25:95:25:42:20:75:31:19:
df:88:6c:1a:b8:bd:4b:93:c5:05:28:d5:99:64:8e:ff:8f:c5:
13:d8:e0:34:b4:dc:1c:25:63:a9:9c:a9:a8:5a:96:44:18:ab:
23:6b:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client