![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
File: FBxyOMCfG6TRJON73uZPglqi9rU.mft (raw, json)
Hash identifier: /G1UAx/rC6VdjxZxk25XlBZZ/WvXLxm/jWtHZrOlzSE=
Subject key identifier: 09:61:11:F7:8A:34:4D:F6:23:80:B8:1F:8B:6A:3A:B8:AC:81:30:AD
Authority key identifier: 14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
Certificate issuer: /CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
Certificate serial: 0194DFDA76CC2FFE2022096A8433C0F2C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
Manifest number: 107E
Signing time: Fri 07 Feb 2025 10:00:23 +0000
Manifest this update: Fri 07 Feb 2025 10:00:23 +0000
Manifest next update: Sat 08 Feb 2025 10:00:23 +0000
Files and hashes: 1: FBxyOMCfG6TRJON73uZPglqi9rU.crl (hash: sX+GYN+FIGtp+rdyM8L/8Euvy4jwSnp8l70S/mYDuSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:da:76:cc:2f:fe:20:22:09:6a:84:33:c0:f2:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=141c7238c09f1ba4d124e37bdee64f825aa2f6b5
Validity
Not Before: Feb 7 10:00:23 2025 GMT
Not After : Feb 8 10:00:23 2025 GMT
Subject: CN=096111f78a344df62380b81f8b6a3ab8ac8130ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:cd:a1:03:85:e1:e0:1f:45:56:51:da:9b:
a7:d1:3e:0c:2e:6c:43:3c:df:44:c7:cd:cb:40:54:
00:9d:15:fe:5c:9e:cc:9c:5d:74:9f:73:24:68:29:
09:0f:26:42:27:08:08:d5:12:34:c9:cd:7f:c6:aa:
37:26:eb:8e:f6:d7:bc:81:0a:e3:16:86:c1:31:64:
2a:ca:44:4b:e5:ef:be:1c:da:e0:41:df:dc:9d:f7:
b0:eb:55:be:4b:5f:5a:50:04:65:ef:6b:a4:d5:e0:
f6:6d:91:9e:21:aa:07:d6:03:57:be:7d:95:aa:96:
d6:f7:5d:c9:f8:a2:c6:ac:c0:ba:be:f8:74:5d:52:
ec:39:67:d6:f0:0b:8b:17:c7:a5:ee:bd:c3:ce:bd:
fa:06:a2:78:00:a5:f6:85:dd:f9:28:08:83:4b:71:
5a:a1:e3:85:8e:47:0a:65:59:18:6b:d4:d8:bf:cc:
ed:6f:fd:46:44:d8:15:ec:e4:6c:2f:29:35:3c:95:
a5:bc:84:57:6a:19:11:67:c5:d2:1a:ea:a2:80:5a:
ec:f5:9a:c3:a5:56:2e:be:4a:f2:fc:86:16:9f:d5:
a4:ec:5a:53:44:3d:45:23:b3:1e:12:78:02:66:df:
d0:43:bb:10:09:c3:3e:8e:90:6e:b0:89:fa:f2:06:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:11:F7:8A:34:4D:F6:23:80:B8:1F:8B:6A:3A:B8:AC:81:30:AD
X509v3 Authority Key Identifier:
keyid:14:1C:72:38:C0:9F:1B:A4:D1:24:E3:7B:DE:E6:4F:82:5A:A2:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FBxyOMCfG6TRJON73uZPglqi9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f197ac-5c59-4e41-b3f6-50af450f4a45/1/FBxyOMCfG6TRJON73uZPglqi9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9f:77:0e:45:cd:fc:a8:cc:0d:8d:79:71:18:bc:41:b1:b3:
6c:9c:f5:78:03:4b:79:f4:fe:d4:5d:21:d2:fd:57:95:0e:47:
67:8a:e9:f7:11:7a:07:5a:87:fa:e2:0d:a3:29:b0:0b:03:f3:
3d:8e:b1:16:43:d9:70:86:5c:e7:50:91:2f:88:2e:17:94:9e:
bc:7c:33:ba:04:24:88:e7:3d:ae:60:60:70:28:31:d8:e1:0c:
fe:a7:0c:e0:cd:ee:1e:68:73:b0:54:bf:49:68:3c:64:e6:88:
ee:22:4b:0d:cc:9a:ac:99:a4:35:67:65:5e:64:9d:a5:7f:ff:
59:70:fb:05:3f:02:f4:83:f1:7b:51:ef:4a:7e:94:d3:f9:a7:
96:05:6c:a3:f7:62:1c:b5:64:8f:34:be:d9:d2:bf:d1:8e:5a:
06:b7:65:e6:2a:28:8c:31:69:e9:03:24:57:31:f3:87:87:5b:
9e:91:d3:4d:da:49:10:f7:eb:e5:ca:22:e0:8a:3d:eb:d1:f8:
36:9f:56:2b:f6:37:63:1f:b8:0e:e1:3f:f3:42:b5:a6:83:10:
3a:a5:40:8f:a3:35:e6:49:24:40:82:01:4c:34:e8:b4:6e:21:
5a:8f:06:a2:19:09:29:1e:8b:43:b8:07:9d:0a:60:eb:26:de:
41:c9:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:35 2025 by rpki-client