![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft
File: paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft (raw, json)
Hash identifier: vlcL0CELfzsS6+VIRY8aRZkK3dQ2mJX+7BwL2e+zm1Q=
Subject key identifier: CB:C4:F7:40:EF:D2:BD:BE:5D:8B:C8:08:BC:FB:77:2C:BF:85:65:32
Authority key identifier: A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
Certificate issuer: /CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Certificate serial: 018A39E1AC45DF6920D3D11B5E6DFF6E7AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft
Manifest number: 05D8
Signing time: Mon 28 Aug 2023 02:03:25 +0000
Manifest this update: Mon 28 Aug 2023 02:03:25 +0000
Manifest next update: Tue 29 Aug 2023 02:03:25 +0000
Files and hashes: 1: paeSbrbcRhv-Z9_I0wKJk5Dr9JI.crl (hash: SEyUfz6v7akEFUWEARZtdw1+b10IhLtOndii1tGP5H0=)
2: stH1rtxWk08oFQSR5od5mitXms4.roa (hash: EJujyjE826OITTi0BR4FaVjOCTyd1DplEzbLM8wH+IU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:e1:ac:45:df:69:20:d3:d1:1b:5e:6d:ff:6e:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Validity
Not Before: Aug 28 02:03:25 2023 GMT
Not After : Aug 29 02:03:25 2023 GMT
Subject: CN=cbc4f740efd2bdbe5d8bc808bcfb772cbf856532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:d6:b5:ed:81:5b:39:1f:d6:0a:96:e2:e2:
52:3a:5e:d3:48:fb:af:3b:36:94:ec:57:9c:c4:eb:
86:03:24:d4:e5:73:94:70:1c:24:b8:a8:c3:bf:6b:
68:fd:f6:01:b3:c0:10:95:be:41:ec:31:8e:0c:b2:
0e:ba:7b:8b:6e:80:7e:f5:cd:8f:83:d7:df:04:d6:
d1:cc:5e:5f:40:90:d8:cd:45:d9:ba:d1:b9:92:ce:
77:47:28:c4:f5:ee:6d:77:27:07:7e:20:fc:f9:75:
42:d7:95:32:27:62:e2:a8:72:d5:58:e0:f6:4a:e5:
51:43:fa:b8:2c:00:a1:d2:40:fc:16:28:a7:6f:0b:
01:92:b4:73:da:99:9a:25:08:4e:cb:b9:ea:59:59:
d2:a6:16:39:0a:62:a5:b7:4b:89:c2:41:69:67:6b:
3a:66:1f:e0:86:7c:32:75:da:3f:2d:ee:0c:09:69:
7f:55:c4:31:00:ca:5d:f5:98:44:f2:e2:b0:75:4e:
ee:8d:68:26:6c:aa:49:fc:0d:9e:f0:f1:c7:00:a9:
6e:95:f0:c5:79:f9:16:be:92:1d:3a:37:5e:16:55:
05:46:eb:67:8c:ee:8d:6d:71:3a:e1:21:5d:38:e2:
65:2b:39:e4:ea:41:00:83:4f:5e:f8:31:5d:6d:a2:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:F7:40:EF:D2:BD:BE:5D:8B:C8:08:BC:FB:77:2C:BF:85:65:32
X509v3 Authority Key Identifier:
keyid:A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:8d:c6:94:33:2f:3d:96:d3:d0:e5:06:d6:5e:0c:b1:46:
40:16:50:b5:62:ec:e8:df:cd:88:97:45:fd:b5:c0:c9:fb:3a:
5c:ec:ae:e5:2a:cc:b0:25:92:16:88:4c:b5:b9:16:f0:e0:f0:
ba:4f:06:b2:f7:80:da:a3:a8:e8:8c:1f:d2:48:48:62:1a:8f:
4b:1c:08:8f:50:d6:3b:d2:06:46:1f:c7:b6:3e:4e:b9:b3:50:
04:2f:dd:c3:23:ce:e8:0b:06:4d:f9:d8:30:88:e5:f8:ef:86:
fe:c4:2c:af:04:1b:ca:07:4f:15:07:53:a8:73:b1:bb:02:51:
23:11:ff:22:88:ac:5a:39:20:24:b0:94:bd:34:4d:23:ec:66:
4d:d2:f4:7b:1a:50:59:8d:ad:85:c7:13:32:0a:04:0e:35:df:
bc:be:cd:2b:03:b4:7c:68:4d:49:e4:a3:86:3d:e0:96:7e:0c:
9a:65:d8:28:23:f1:d5:db:df:f5:6c:4b:d2:89:1b:a4:4e:6c:
8d:52:e2:6c:d4:e9:d9:2e:30:4a:c6:85:c8:94:d7:06:b4:68:
e3:21:c5:f0:52:87:e9:25:27:36:34:7c:73:6c:f6:2a:67:3b:
9d:05:cf:6a:80:34:81:9d:10:ae:dd:b4:f7:d2:67:c0:cc:9d:
11:af:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:20 2025 by rpki-client