![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.mft
File: y80JDbQoA9dK3hOhNj2kKMpxhTw.mft (raw, json)
Hash identifier: i2nvvSBCIbxi3L9eLqbqq97JYWpWlcA7lZ4THS5FJUs=
Subject key identifier: F7:BC:34:65:6A:C2:2C:F0:A6:58:50:3F:AE:B9:F9:E6:0B:C1:1D:DD
Authority key identifier: CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
Certificate issuer: /CN=cbcd090db42803d74ade13a1363da428ca71853c
Certificate serial: 0189D7F360A97D0654D099B6A3B4B1EC6A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.mft
Manifest number: 07B6
Signing time: Wed 09 Aug 2023 01:39:58 +0000
Manifest this update: Wed 09 Aug 2023 01:39:58 +0000
Manifest next update: Thu 10 Aug 2023 01:39:58 +0000
Files and hashes: 1: _3v1Rde0UYtV6Mgi18zYvkgmp6g.roa (hash: AFHJPoCH/Z3ev1sJ/P+QYcJToJiMznreltd83qWJBBM=)
2: y80JDbQoA9dK3hOhNj2kKMpxhTw.crl (hash: TIQ76LvY1SkmjdG5XM8wx39ZAWQyNFF4d6/T2L8JSU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:f3:60:a9:7d:06:54:d0:99:b6:a3:b4:b1:ec:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbcd090db42803d74ade13a1363da428ca71853c
Validity
Not Before: Aug 9 01:39:58 2023 GMT
Not After : Aug 10 01:39:58 2023 GMT
Subject: CN=f7bc34656ac22cf0a658503faeb9f9e60bc11ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:53:63:4b:15:1e:92:ea:24:65:33:bd:00:
f0:39:da:d9:49:11:c9:40:19:cc:34:de:8e:56:03:
7a:2b:de:31:71:f5:55:26:d9:b2:40:a7:30:79:9e:
ac:67:a2:8f:83:91:65:34:41:1a:58:8b:62:ad:03:
2b:a0:62:39:64:fc:03:a4:ae:72:da:71:20:d3:fb:
93:6f:6a:76:17:e7:04:ff:19:4b:0b:7b:18:77:df:
9c:7b:82:a0:c8:bc:68:79:ef:d0:ed:f7:4f:d1:2d:
a4:73:3f:16:1b:c4:05:24:0d:78:9e:32:8e:60:d7:
f0:f8:85:bf:ed:0d:c6:6b:2a:cc:d4:03:d4:59:7c:
5c:77:ea:b4:03:35:41:36:93:ca:da:35:f4:c6:e4:
fb:c9:1d:ed:f4:67:2d:72:51:13:57:49:2a:41:1e:
eb:21:ed:b2:16:c4:78:02:95:45:37:96:cd:55:33:
e9:c5:80:5a:75:aa:b6:a3:b5:13:37:f8:e9:b5:0a:
4a:b2:33:b7:38:a9:32:d3:fc:90:8d:14:4a:29:26:
b8:71:36:7f:2d:6d:40:61:1f:90:d0:78:e6:62:cd:
d9:95:9d:c1:c1:5c:e3:66:46:4a:0a:b8:73:4e:33:
43:05:94:0b:92:6e:f6:ab:5b:b2:30:99:a7:9a:77:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:34:65:6A:C2:2C:F0:A6:58:50:3F:AE:B9:F9:E6:0B:C1:1D:DD
X509v3 Authority Key Identifier:
keyid:CB:CD:09:0D:B4:28:03:D7:4A:DE:13:A1:36:3D:A4:28:CA:71:85:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y80JDbQoA9dK3hOhNj2kKMpxhTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7d6ed-074f-4816-b987-db8d31f926c3/1/y80JDbQoA9dK3hOhNj2kKMpxhTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5b:a5:af:23:58:f2:05:f4:4d:c0:74:04:39:3c:58:30:f3:
ab:0d:db:49:24:81:3a:a6:35:25:12:17:d4:44:cc:4c:80:96:
4b:62:7e:8c:a5:aa:8c:3e:fe:76:44:70:cc:31:02:f6:cc:3d:
2b:42:24:81:7f:1d:ec:0d:77:a3:61:7c:2d:93:72:3b:cf:ca:
25:28:e6:a4:a3:a2:b0:b5:b3:d8:20:33:e4:e0:6f:f1:c5:4f:
7e:dd:bd:87:ce:74:e7:57:f9:10:b3:23:c8:38:2a:59:a4:a0:
0f:41:42:91:b2:40:6a:39:d8:34:e7:23:11:e5:d1:d0:34:b0:
c5:cb:79:ed:5d:f6:b7:79:14:5e:6b:2f:79:5d:1c:19:53:65:
70:d8:a2:b7:53:8a:d0:57:8b:e5:a2:a7:37:0d:ed:66:50:69:
2f:2f:1b:b5:4e:09:00:09:09:68:3a:80:90:3b:5d:a2:c8:3f:
99:94:ed:6e:c1:14:67:95:5a:fc:ca:c6:82:88:7b:35:cf:d5:
9f:12:8f:7e:6d:af:46:27:60:30:c0:36:f1:aa:71:6c:03:b0:
7c:66:f6:e9:1c:64:ca:ef:76:50:88:a7:08:25:97:a2:68:b6:
da:94:de:fc:b1:64:18:c2:6e:ad:e4:b7:5a:85:23:34:0e:2c:
e0:75:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:40 2025 by rpki-client