![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/393cbe-08a4-432e-97f6-e655439f6955/1/npeVSKsKfjf4cnZplGE6FJxQkQM.mft
File: npeVSKsKfjf4cnZplGE6FJxQkQM.mft (raw, json)
Hash identifier: /j7VpsgfagcwZnZsdO+6I8EE2HrNkfnJwD95DsanI4k=
Subject key identifier: 79:80:9C:19:22:43:22:9B:9A:72:2E:32:C7:13:FE:8C:41:4D:6A:A7
Authority key identifier: 9E:97:95:48:AB:0A:7E:37:F8:72:76:69:94:61:3A:14:9C:50:91:03
Certificate issuer: /CN=9e979548ab0a7e37f872766994613a149c509103
Certificate serial: 01934716307549CD6F90AE56ABD719909D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npeVSKsKfjf4cnZplGE6FJxQkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/393cbe-08a4-432e-97f6-e655439f6955/1/npeVSKsKfjf4cnZplGE6FJxQkQM.mft
Manifest number: 024E
Signing time: Wed 20 Nov 2024 01:00:56 +0000
Manifest this update: Wed 20 Nov 2024 01:00:56 +0000
Manifest next update: Thu 21 Nov 2024 01:00:56 +0000
Files and hashes: 1: 9C4azNGcGePgrGjcrPNsTkKfT2A.roa (hash: nfIbyaum1avHaTcy31VeNVb80QUTWFdV7bNE6Vriltg=)
2: npeVSKsKfjf4cnZplGE6FJxQkQM.crl (hash: MyUgETuo5hRYK04Dc0Uf5aVdoXHf5lR3iSylzhdlvSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:16:30:75:49:cd:6f:90:ae:56:ab:d7:19:90:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e979548ab0a7e37f872766994613a149c509103
Validity
Not Before: Nov 20 01:00:56 2024 GMT
Not After : Nov 21 01:00:56 2024 GMT
Subject: CN=79809c192243229b9a722e32c713fe8c414d6aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:15:08:89:c5:21:8b:f3:af:c2:ef:aa:84:
02:8c:4e:9e:25:65:df:dd:20:3d:69:99:7c:dc:77:
de:95:a1:6d:f4:f5:9d:91:e6:b0:b9:8d:ba:a7:f0:
ba:53:14:c0:41:bd:15:cd:f1:ff:40:19:84:df:55:
d0:01:5f:ee:34:f0:bf:49:ee:00:2e:36:b7:63:b5:
18:fd:ff:2d:0b:d5:ca:70:57:bc:62:f6:41:aa:22:
51:b6:66:3e:97:fa:1a:07:b9:1c:6e:ae:b8:52:77:
9b:84:a2:b5:1e:f4:9d:98:d3:70:c3:4b:16:b9:b6:
ef:75:42:5c:45:4f:04:59:75:08:37:a0:6e:4b:64:
4d:dd:87:1e:1f:28:a7:40:28:27:f3:99:54:06:5e:
e8:c3:87:88:9c:27:e4:64:33:ca:c9:6f:dd:34:ac:
bd:09:c5:bd:e9:00:83:8c:14:81:9b:15:b2:65:02:
19:29:97:2e:75:1d:87:a0:65:d1:3e:da:6e:fb:21:
90:4a:26:fc:78:2b:59:59:93:ff:59:e2:13:01:65:
41:bb:d4:16:b9:67:e4:ed:83:66:a7:13:f9:1c:5f:
5c:11:d9:05:4f:d1:da:15:36:11:95:ac:08:dc:89:
73:a4:1a:f6:6e:67:36:39:76:8a:39:01:53:94:95:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:9C:19:22:43:22:9B:9A:72:2E:32:C7:13:FE:8C:41:4D:6A:A7
X509v3 Authority Key Identifier:
keyid:9E:97:95:48:AB:0A:7E:37:F8:72:76:69:94:61:3A:14:9C:50:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npeVSKsKfjf4cnZplGE6FJxQkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/393cbe-08a4-432e-97f6-e655439f6955/1/npeVSKsKfjf4cnZplGE6FJxQkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/393cbe-08a4-432e-97f6-e655439f6955/1/npeVSKsKfjf4cnZplGE6FJxQkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:15:88:7b:eb:08:5b:1d:63:aa:bd:1f:c6:b1:91:4c:e6:68:
79:56:30:94:d2:7c:f3:bf:c0:fe:2e:be:9d:33:64:29:26:a8:
ea:50:57:c7:d8:61:2a:5a:77:49:3c:cd:ab:82:a2:dc:08:c7:
8f:18:47:fb:b2:37:0d:95:b2:d2:ac:b2:ce:f6:32:4a:b2:c5:
09:82:68:0e:70:59:6d:b9:6b:e0:45:d4:18:3f:d4:66:27:35:
c4:6d:f4:cd:74:17:bf:67:ae:01:db:34:6d:69:60:18:30:b0:
9b:21:95:58:82:44:13:8f:67:45:e8:be:97:76:0d:40:a4:59:
a0:2b:a9:75:19:58:cc:85:cf:be:e2:35:59:9a:3e:74:3b:5b:
ed:02:89:b0:78:45:8d:9e:88:bd:1d:f3:a0:a7:9b:1b:a8:d2:
f6:83:98:67:cf:cb:1b:77:dc:31:e9:b6:9b:f1:90:a3:23:31:
67:44:75:50:46:99:ea:2a:8a:d8:b3:79:32:36:6f:93:83:44:
84:9f:d5:41:f7:fb:0d:ec:35:0f:fc:cc:8e:b4:7f:f8:cd:01:
a4:f2:b7:54:08:b8:7d:5e:e7:da:39:6c:5a:61:28:70:4d:ab:
68:14:8b:08:1f:1d:23:b9:26:48:53:fb:f2:a3:b3:1a:74:c0:
47:d6:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:17 2025 by rpki-client