![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
File: BjYJAf_k8jwYxFtUSrh1nbVSkss.mft (raw, json)
Hash identifier: gtG0d5MBbSIx+Pc3AWCo0JPZH1YwPo8HpT2UP9qnAqg=
Subject key identifier: B3:DA:6E:60:EC:03:70:D3:A3:A1:CA:6D:0C:F0:A8:C6:C1:D2:D4:F7
Authority key identifier: 06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
Certificate issuer: /CN=06360901ffe4f23c18c45b544ab8759db55292cb
Certificate serial: 018B8F43151CD005FE317A81C4DE27D0D78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
Manifest number: 0876
Signing time: Thu 02 Nov 2023 09:00:20 +0000
Manifest this update: Thu 02 Nov 2023 09:00:20 +0000
Manifest next update: Fri 03 Nov 2023 09:00:20 +0000
Files and hashes: 1: 28UldnFsmAafUI8I4dWBUzZX9S4.roa (hash: FNFeofRb0EhHNxQES6o+h9KrzLPy2kZ2DJpQ8GR/Xbw=)
2: BjYJAf_k8jwYxFtUSrh1nbVSkss.crl (hash: qYJEbhE+HD1+Kg5rekqPO1eVmDCrBDqLfinc1+xmPcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:15:1c:d0:05:fe:31:7a:81:c4:de:27:d0:d7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06360901ffe4f23c18c45b544ab8759db55292cb
Validity
Not Before: Nov 2 09:00:20 2023 GMT
Not After : Nov 3 09:00:20 2023 GMT
Subject: CN=b3da6e60ec0370d3a3a1ca6d0cf0a8c6c1d2d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:09:98:c1:11:7b:80:85:8b:a8:f6:a8:a4:
07:65:b6:c8:e4:68:ec:49:ca:21:cf:3a:e5:d0:fa:
eb:7a:38:70:36:cf:cc:f8:c6:9c:7f:3e:46:15:f3:
15:94:d4:bb:71:09:3d:05:0f:fd:5f:92:b3:91:7f:
b7:62:c2:5f:19:7a:d6:e6:4a:ec:a4:ce:57:a1:2a:
a5:dc:75:98:83:28:86:32:63:a3:97:c6:e8:2e:f9:
1d:64:57:1d:c9:f5:5b:ce:57:6d:b5:84:a8:99:db:
10:50:84:fa:1f:5a:05:03:4d:2c:cf:3d:09:fe:29:
d3:bb:30:ff:0f:88:c7:26:ff:14:dc:5d:19:6b:4c:
02:85:8a:ab:56:02:b0:2c:c1:3f:b7:21:75:3c:1b:
92:e2:d2:4b:c0:6f:4c:84:41:b0:03:70:84:4e:d2:
3f:76:8e:f4:f9:ce:66:c5:13:3c:b3:84:43:c5:63:
4e:50:bb:3c:c4:f9:01:93:90:94:46:fc:ea:f8:bd:
d2:bb:3f:15:cf:33:83:28:ab:7f:a1:19:59:20:a0:
77:ba:2f:94:7a:05:67:2b:ab:32:9e:62:2c:8e:25:
40:f4:0b:42:36:40:31:12:22:36:6e:3b:cd:d5:fc:
60:21:6a:e7:9a:05:89:b8:be:35:95:af:fc:00:fd:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:6E:60:EC:03:70:D3:A3:A1:CA:6D:0C:F0:A8:C6:C1:D2:D4:F7
X509v3 Authority Key Identifier:
keyid:06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:b4:0c:72:e3:c0:07:5d:25:79:8f:e6:c1:42:65:41:2d:
3f:cf:c2:c2:0c:38:0b:6b:e2:28:94:ee:03:05:52:90:16:1d:
dd:36:25:77:a8:21:1d:14:fc:74:e2:be:04:a5:52:71:0b:be:
0b:8d:4e:9c:97:4b:7c:fe:97:48:58:74:6d:b4:74:c7:16:20:
cd:ab:b4:c7:f8:b2:64:e8:82:99:42:dc:fa:e3:d5:28:7d:86:
df:06:ea:bc:17:4b:9f:a2:52:e7:80:6b:dc:e5:59:0b:18:fa:
9e:92:c0:b7:57:b4:5b:af:2f:43:03:e9:93:58:59:b8:e1:a1:
71:5f:d2:ef:61:e1:a4:6d:5e:f1:da:6e:d2:ea:82:1b:cd:e5:
08:ad:e1:c1:e1:23:23:77:36:4e:22:da:8b:9e:99:da:a2:25:
9b:b3:99:5d:4b:0c:43:fa:93:e6:9c:92:74:86:72:78:19:51:
2c:f1:7e:e6:51:fe:70:94:73:9f:1a:c2:89:9a:78:c8:87:1c:
5a:99:21:66:fb:c4:85:c4:ee:1e:65:96:d5:9d:ff:c7:b0:62:
ae:73:af:1d:f1:6d:73:8d:49:c0:71:1c:c7:87:3d:7a:02:c0:
45:e5:a4:b4:38:09:bd:9b:fb:ca:6f:0b:c7:a5:89:37:71:3f:
3d:75:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:01 2025 by rpki-client