![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
File: 0flR50Xnd_DBBmaXGqcOHryLrpY.mft (raw, json)
Hash identifier: S4uc4v1tMkZOzZ/Kfsvd5vS4gzTdQx3tnXWA0sKtRQo=
Subject key identifier: DA:D0:F0:71:48:1E:1A:A6:A4:9E:9D:13:D4:12:C0:FC:B9:5B:00:D6
Authority key identifier: D1:F9:51:E7:45:E7:77:F0:C1:06:66:97:1A:A7:0E:1E:BC:8B:AE:96
Certificate issuer: /CN=d1f951e745e777f0c10666971aa70e1ebc8bae96
Certificate serial: 019168CB337EE38D7021FE6300DD4474E8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0flR50Xnd_DBBmaXGqcOHryLrpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
Manifest number: 126E
Signing time: Mon 19 Aug 2024 04:00:33 +0000
Manifest this update: Mon 19 Aug 2024 04:00:33 +0000
Manifest next update: Tue 20 Aug 2024 04:00:33 +0000
Files and hashes: 1: 0flR50Xnd_DBBmaXGqcOHryLrpY.crl (hash: X1X0Rx+MOjfat3PKweM0vuEk4gkadxz2JAiNE0BRHdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:68:cb:33:7e:e3:8d:70:21:fe:63:00:dd:44:74:e8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f951e745e777f0c10666971aa70e1ebc8bae96
Validity
Not Before: Aug 19 04:00:33 2024 GMT
Not After : Aug 20 04:00:33 2024 GMT
Subject: CN=dad0f071481e1aa6a49e9d13d412c0fcb95b00d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:67:86:b9:77:58:f6:79:62:25:fc:2d:44:
ac:5c:d5:02:8b:ba:52:a2:4e:c4:30:62:30:54:57:
65:a5:0a:74:8f:fb:e1:dc:df:ad:79:b7:d5:c7:38:
0a:09:b0:9f:7b:96:a4:47:e4:c5:b5:e1:46:18:bc:
7a:38:ca:b7:2c:11:1f:94:4c:1f:78:c7:24:f3:0a:
1a:de:03:e9:5f:b0:bb:76:15:e2:8d:04:2f:ef:ec:
bf:34:5c:da:98:12:47:0d:db:b8:6e:b9:88:08:44:
67:0a:70:80:0a:21:4a:9f:d2:f1:f7:56:9b:ee:d2:
b2:2e:8f:bd:fa:68:d0:7a:32:33:71:d0:eb:f1:d3:
e1:d6:04:01:a0:b5:63:20:f2:32:c9:86:51:19:b7:
0a:ae:71:22:f3:a9:1f:4c:d4:a8:55:5a:20:51:6a:
dd:cf:3b:6a:30:d2:21:a1:0a:a8:09:33:14:a2:fa:
09:1e:2c:60:c5:1c:90:0e:d9:3b:31:3f:12:2f:8c:
45:d3:8b:7a:b2:63:2e:e4:b2:ac:e8:fb:3b:b4:3c:
87:6a:49:5f:93:56:47:3b:4a:12:3d:40:7b:21:a4:
1c:81:9a:67:63:92:0e:bf:0f:10:6b:c1:be:bb:15:
de:29:fb:67:a2:aa:24:fd:ac:15:c5:42:86:04:87:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:F0:71:48:1E:1A:A6:A4:9E:9D:13:D4:12:C0:FC:B9:5B:00:D6
X509v3 Authority Key Identifier:
keyid:D1:F9:51:E7:45:E7:77:F0:C1:06:66:97:1A:A7:0E:1E:BC:8B:AE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0flR50Xnd_DBBmaXGqcOHryLrpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b9c89c-c774-4662-a168-83ec87ee9ddc/1/0flR50Xnd_DBBmaXGqcOHryLrpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:2f:e8:b0:c8:ec:08:9b:06:56:90:0f:77:85:0e:0b:ba:
cb:fb:ef:4c:67:77:ef:a0:44:79:1c:b5:82:d7:10:aa:57:5c:
3e:b7:21:23:45:9f:7f:a8:87:fe:88:14:c9:41:69:2a:89:69:
5e:2d:a1:2b:81:9f:19:70:eb:b4:34:27:47:ff:4f:dc:90:f0:
bb:8b:0e:57:f2:d9:d4:9b:7a:76:93:2f:17:71:ae:62:8b:49:
66:1c:05:d8:03:de:10:27:79:cb:eb:a4:e0:7d:3d:8e:26:90:
2b:ba:76:0f:6b:5c:7f:9f:12:c2:3b:b1:48:26:83:0f:0f:9a:
68:f3:00:68:61:26:e2:b7:d8:01:8d:e9:9d:39:91:92:3d:94:
fa:29:74:a5:c8:58:97:dd:67:9b:b7:a2:fc:c6:19:da:44:3e:
83:81:c6:bd:ef:ba:d8:0c:f1:93:26:92:ba:19:45:95:7e:dd:
26:aa:33:4e:0f:1c:3d:fb:d3:23:d1:a7:05:81:d5:7f:ce:c4:
4c:90:1a:64:db:4c:3d:a3:74:5f:5f:02:8e:d7:da:2b:77:ad:
b1:11:b7:30:f3:fc:46:26:9b:f9:7c:92:ae:f3:05:07:21:dd:
75:cd:36:6f:c1:94:3d:7f:e7:73:1b:e8:c4:65:37:b1:b2:c6:
05:71:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:03 2025 by rpki-client