![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
File: STYtnw4aOKZgWlnKRpGyjuTY8kk.mft (raw, json)
Hash identifier: TyCtfVrA4+8/OiJPR+RKzBbvDTXovhjQYgWVFRqHwhk=
Subject key identifier: 12:81:FE:0B:3F:DD:AD:D2:59:46:03:CB:53:9D:23:10:62:78:83:91
Authority key identifier: 49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49
Certificate issuer: /CN=49362d9f0e1a38a6605a59ca4691b28ee4d8f249
Certificate serial: 018215CAFC1F147CE798860B58EB85568E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STYtnw4aOKZgWlnKRpGyjuTY8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
Manifest number: 09A5
Signing time: Tue 19 Jul 2022 09:30:00 +0000
Manifest this update: Tue 19 Jul 2022 09:30:00 +0000
Manifest next update: Wed 20 Jul 2022 09:30:00 +0000
Files and hashes: 1: STYtnw4aOKZgWlnKRpGyjuTY8kk.crl (hash: ThXrDF/A/IKvjSyBI0hteR/SRbPNjTw1vCOwBPlsdOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:ca:fc:1f:14:7c:e7:98:86:0b:58:eb:85:56:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49362d9f0e1a38a6605a59ca4691b28ee4d8f249
Validity
Not Before: Jul 19 09:30:00 2022 GMT
Not After : Jul 20 09:30:00 2022 GMT
Subject: CN=1281fe0b3fddadd2594603cb539d231062788391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:b8:a5:ab:1b:8c:fe:f1:1e:6a:19:22:29:
7a:b0:e0:40:f6:64:67:b6:ae:11:15:6e:fb:ca:b9:
4b:cb:9e:03:54:e7:d5:05:50:fb:af:14:2e:af:2d:
14:56:5b:d1:b3:32:fb:1d:ea:f3:50:38:fb:2f:45:
81:0a:cb:b6:37:e1:33:75:1e:2d:14:d4:ae:5a:cd:
97:ca:91:94:12:3f:f9:e5:65:5b:06:90:1d:63:e0:
3d:4f:b3:2f:67:b1:e1:1f:4f:77:bd:ec:3d:ca:c0:
99:4f:8f:ff:c6:96:81:05:8d:8e:58:4b:e4:01:ae:
c0:26:05:3c:35:79:31:f1:c8:d1:c7:35:2e:1c:bb:
a7:8e:8d:2c:6d:cc:8c:bf:f9:c7:b7:d1:fd:c7:ca:
91:93:9d:da:ef:17:c5:94:aa:10:76:ee:4c:22:0d:
46:67:c3:f3:d3:b2:67:1e:a3:65:9d:4e:74:a4:32:
92:7b:6e:3a:2c:0f:2e:f7:58:a6:cd:c7:00:d9:7c:
ac:47:c7:0f:e0:87:a8:45:35:49:c0:7f:9d:3c:f6:
07:6b:e4:85:f9:7d:f5:36:e4:64:1b:cc:6f:04:41:
1f:d0:c2:c9:b3:d6:38:88:80:47:79:cc:f6:59:d1:
50:8f:e3:fa:30:0a:3d:33:b4:22:62:41:88:2d:8a:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:FE:0B:3F:DD:AD:D2:59:46:03:CB:53:9D:23:10:62:78:83:91
X509v3 Authority Key Identifier:
keyid:49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STYtnw4aOKZgWlnKRpGyjuTY8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:fa:cd:15:b2:5a:54:65:57:4e:2f:5f:8b:29:66:6a:2c:
8a:c6:74:50:f7:11:7e:81:e8:bd:20:09:51:bb:0d:2f:9c:6b:
d5:0a:64:04:ee:40:59:7f:98:79:39:04:aa:0d:0c:f6:30:45:
36:ee:70:4d:f3:a2:cc:3a:de:29:12:67:4f:37:cd:ed:62:43:
4f:96:ca:0f:01:75:bd:34:a1:01:41:59:0e:de:aa:6b:e0:b1:
ed:52:29:54:8e:c6:85:1c:e8:8a:50:5f:11:a9:1b:ec:e5:36:
c5:fd:ba:81:bf:e2:ab:67:0c:bf:98:42:51:fc:8a:19:72:56:
e9:bc:9d:ba:5a:73:f7:10:d9:79:f1:6a:52:1e:b4:d4:09:28:
c3:75:ff:0f:3a:57:2c:91:0e:4d:a7:e3:de:02:14:50:02:8e:
32:0a:8a:f6:a8:27:a2:a9:aa:e5:f8:f7:4d:07:f5:d2:f3:24:
d1:9d:1e:ca:81:19:78:da:47:64:35:80:b3:a3:d0:57:9e:b5:
ed:0b:10:03:54:1c:4b:77:38:28:1b:b5:24:ed:94:90:1c:e6:
54:0b:03:2a:61:6a:ee:ce:9c:3b:2d:13:32:34:41:34:d5:98:
19:c8:0d:58:a7:9a:80:1f:77:2a:d8:61:13:37:94:ec:8c:b7:
53:c4:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:25 2025 by rpki-client