![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/nSQ40Axp5tdZCpMTsRnvaWZa7bk.mft
File: nSQ40Axp5tdZCpMTsRnvaWZa7bk.mft (raw, json)
Hash identifier: CgUUwRupK5ENxD2/r19qfDzU8cTkDMQq0TRbpgfastQ=
Subject key identifier: BF:7C:B9:79:A0:F5:0F:F4:B2:04:52:1E:87:10:0C:12:15:92:F2:71
Authority key identifier: 9D:24:38:D0:0C:69:E6:D7:59:0A:93:13:B1:19:EF:69:66:5A:ED:B9
Certificate issuer: /CN=9d2438d00c69e6d7590a9313b119ef69665aedb9
Certificate serial: 0182F959B72E653F4FA0EC71C6535A5CAB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSQ40Axp5tdZCpMTsRnvaWZa7bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/nSQ40Axp5tdZCpMTsRnvaWZa7bk.mft
Manifest number: 07BC
Signing time: Thu 01 Sep 2022 13:59:42 +0000
Manifest this update: Thu 01 Sep 2022 13:59:42 +0000
Manifest next update: Fri 02 Sep 2022 13:59:42 +0000
Files and hashes: 1: GMcGj1oYszQPtjGaBFtFSSmySLM.roa (hash: dMpgwHGRWRlNoCtbC9qlrcyAqaONlbW9pjOb+bkKbJ4=)
2: nSQ40Axp5tdZCpMTsRnvaWZa7bk.crl (hash: BezfcXNnv7z1kFnROvJroTvMmbJxw7wzc1bkmP6P6WU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:59:b7:2e:65:3f:4f:a0:ec:71:c6:53:5a:5c:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2438d00c69e6d7590a9313b119ef69665aedb9
Validity
Not Before: Sep 1 13:59:42 2022 GMT
Not After : Sep 2 13:59:42 2022 GMT
Subject: CN=bf7cb979a0f50ff4b204521e87100c121592f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:55:bf:d7:54:fb:c5:ad:7d:93:b9:5d:34:
cc:ad:ac:24:4b:e8:98:d0:15:34:9c:7e:cc:b1:8b:
cf:20:8f:3c:91:8c:5a:f7:d1:e8:2c:4a:2d:6a:02:
fd:c9:0a:8b:5d:8d:97:9e:ae:05:49:a4:42:44:33:
39:59:d5:83:13:78:48:0f:7f:c3:74:b2:26:ad:7b:
da:ca:29:75:e2:9c:9b:77:7f:54:5b:c5:88:c0:9b:
ca:ff:ff:72:cb:90:29:6a:77:8d:ed:d6:4b:78:0c:
8a:f2:e1:4f:3a:64:58:53:fa:34:90:86:de:9b:2f:
23:0b:c0:fa:ed:66:bd:30:70:d0:11:a9:91:aa:ff:
0b:66:7d:73:38:3e:4c:ba:35:2e:88:7b:de:44:12:
a6:f9:5d:f9:91:08:15:44:fb:a9:e4:b9:aa:c9:ca:
5e:0e:0c:32:25:33:f9:9a:a9:3f:3f:eb:53:29:04:
cc:69:87:47:69:9c:4c:99:7b:02:20:bd:9a:0e:88:
db:2c:0e:1f:e5:1d:c7:b2:4b:9f:3e:8c:6a:f3:31:
a4:e6:e4:e1:55:59:17:15:72:fb:67:72:92:6f:f1:
09:3b:ef:99:3c:59:b9:24:eb:1a:28:23:ba:e7:66:
5e:52:c9:21:7f:2d:d4:88:a4:95:1a:cb:60:c6:bd:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:B9:79:A0:F5:0F:F4:B2:04:52:1E:87:10:0C:12:15:92:F2:71
X509v3 Authority Key Identifier:
keyid:9D:24:38:D0:0C:69:E6:D7:59:0A:93:13:B1:19:EF:69:66:5A:ED:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSQ40Axp5tdZCpMTsRnvaWZa7bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/nSQ40Axp5tdZCpMTsRnvaWZa7bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96b311-3e8d-4b30-94e8-b30e248f86a9/1/nSQ40Axp5tdZCpMTsRnvaWZa7bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6c:4f:6a:9e:a6:51:5c:f3:d6:5e:58:da:9f:26:95:c9:ba:
4a:f9:55:1b:50:9e:cc:ab:68:d8:dd:98:de:bd:32:97:9a:11:
ad:44:af:30:13:a3:c2:f8:2f:b3:7c:37:f6:b1:e3:00:e0:e6:
da:29:d8:bb:14:0e:10:70:b1:38:2e:ad:b2:6e:59:14:14:23:
af:f9:71:a2:5f:04:85:34:89:11:15:0a:c7:43:d8:29:da:48:
ae:f0:5a:fc:3e:b5:c2:c5:ce:3f:6e:4b:06:df:86:ae:89:2d:
95:7c:c6:e6:24:3f:e1:a4:0f:be:53:91:39:1a:af:19:04:b3:
d3:ab:eb:1b:a9:5e:e9:40:85:39:13:ac:52:c9:db:6e:35:3f:
5d:89:e4:34:5f:ac:bb:c1:a8:f0:26:6e:1c:71:a3:9d:5a:f7:
d8:db:4c:fa:73:92:e1:63:6c:d7:84:5e:51:02:59:1f:0c:33:
76:06:3f:7f:b0:ad:8c:94:c5:4b:cb:28:74:74:d5:54:68:df:
fe:ed:82:50:1c:cf:dc:09:d9:be:d9:66:49:14:48:d1:86:cc:
ef:56:be:2e:75:e9:8e:23:03:f6:d4:fe:93:0a:12:dd:73:d4:
0e:ce:77:32:73:17:f9:e4:f5:9e:49:77:4f:69:e5:01:7c:81:
d9:5a:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:02 2025 by rpki-client