![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
File: 0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft (raw, json)
Hash identifier: TolLXhK1KC5c1VhnneBtgcor+e4LW8bsB2fvwS6xLeE=
Subject key identifier: 08:A9:62:20:3E:42:F7:32:59:F4:AB:C4:21:9D:7A:58:CB:7E:91:3C
Authority key identifier: D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
Certificate issuer: /CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
Certificate serial: 0184585A0DC12A35158177EAE90C764040B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
Manifest number: 066E
Signing time: Tue 08 Nov 2022 17:46:47 +0000
Manifest this update: Tue 08 Nov 2022 17:46:47 +0000
Manifest next update: Wed 09 Nov 2022 17:46:47 +0000
Files and hashes: 1: 0wV1r-WJF0MLO1Zq89nLyc7UpWs.crl (hash: ojWgPKqsNXKJmOJPz6uI2w1AxcHqSHmN9+iTMcoEw9c=)
2: i8IR_V8cwswHdSVfbbOUCm9PHQI.roa (hash: EaSqGFdVSS9T5AY/olnnoRdMzczPdRKBRZB1wP95VqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:5a:0d:c1:2a:35:15:81:77:ea:e9:0c:76:40:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d30575afe58917430b3b566af3d9cbc9ced4a56b
Validity
Not Before: Nov 8 17:46:47 2022 GMT
Not After : Nov 9 17:46:47 2022 GMT
Subject: CN=08a962203e42f73259f4abc4219d7a58cb7e913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:28:ed:f9:d1:6c:67:b4:79:5a:8b:80:2b:
54:a1:ad:3b:7f:67:12:7e:9f:25:d8:d0:74:87:da:
21:96:2c:84:27:6c:38:12:48:be:91:3a:3f:98:75:
02:4c:76:0f:d6:d1:d1:e1:50:df:97:c1:ff:a8:a5:
6f:ac:9e:e9:87:fd:37:bd:ea:cc:51:b9:ad:5f:3f:
e2:f6:d5:24:0c:b5:f6:4d:27:0a:1c:70:74:3c:ac:
4c:01:db:d9:23:03:60:ff:2e:52:78:39:45:90:0c:
be:e0:44:a0:42:f8:04:a2:f2:ad:f7:aa:bc:98:e6:
33:3d:7c:e8:bb:11:48:d7:4a:d9:59:37:5a:81:1e:
1e:3f:cd:0d:03:61:b4:20:21:a3:4e:26:a2:9c:92:
99:88:fe:e0:75:6e:0e:c9:c9:7c:26:1d:e6:53:7b:
d8:3e:e1:c0:b3:a3:06:6c:cf:ee:00:b3:00:83:c4:
fc:c5:f4:4e:da:85:f6:c1:c8:a3:ca:93:0a:46:8b:
4c:2f:37:91:2c:21:f2:1e:e5:1c:d5:7b:1f:46:9a:
ba:3f:7b:8b:be:2f:0f:23:8c:17:ea:97:43:7c:d1:
6c:76:a4:6a:bc:d7:ff:11:14:98:b8:69:2f:c6:42:
f6:bd:56:49:45:d7:13:62:08:2d:7b:29:e2:93:59:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:62:20:3E:42:F7:32:59:F4:AB:C4:21:9D:7A:58:CB:7E:91:3C
X509v3 Authority Key Identifier:
keyid:D3:05:75:AF:E5:89:17:43:0B:3B:56:6A:F3:D9:CB:C9:CE:D4:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wV1r-WJF0MLO1Zq89nLyc7UpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/48689e-58c1-4ddd-b6bb-6d5d03f59fd7/1/0wV1r-WJF0MLO1Zq89nLyc7UpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:99:40:ac:bf:91:5c:05:54:9a:3e:35:ec:19:5c:77:4a:
9e:03:ab:15:68:34:e7:ca:c4:95:fd:17:fb:88:c3:ef:ee:c4:
4e:61:17:ec:ea:bb:e1:77:d3:74:45:c8:d8:62:ed:c9:cd:5b:
d1:87:00:b4:4b:65:bd:d9:ae:f0:0e:16:e8:ba:90:fb:9e:9b:
af:9b:c4:5f:ce:8f:c2:3b:90:54:30:e0:63:56:ef:b4:6a:37:
cc:6b:e3:3d:24:43:d8:c3:a5:ac:1a:ef:b4:af:c2:0f:4c:ac:
49:b2:53:8f:ef:49:6c:85:d6:60:28:01:52:75:88:cd:e5:f5:
63:5d:b9:a0:22:02:45:f8:6a:f0:20:b9:12:17:53:dc:85:bd:
0e:8a:9e:19:d2:55:73:f7:6d:9b:52:a8:2c:11:61:a1:21:9f:
e6:72:3d:08:70:c2:a4:55:51:9f:05:a6:eb:dd:5f:40:96:f7:
f2:3e:fe:3b:bd:c0:cc:5b:29:83:0d:80:16:3e:b4:a5:ed:aa:
1e:b8:5c:8f:6b:91:4f:4c:5f:b6:2d:0b:1c:54:16:c0:3e:af:
40:98:75:4f:74:15:6b:9a:ee:0b:5d:ef:d0:20:f5:2f:c2:c9:
c1:2f:07:50:49:3e:e5:1d:b8:e2:8a:2a:61:03:17:c5:cc:5a:
f9:2b:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:33 2025 by rpki-client