![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
File: ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft (raw, json)
Hash identifier: NwnW3CymVswPy3xv0UNEpGWEl8BgctC2qCewSFCo7Eg=
Subject key identifier: 73:15:F4:5D:FB:63:CA:DE:F8:E6:6B:DC:2F:4F:90:26:42:53:74:90
Authority key identifier: 00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0
Certificate issuer: /CN=00b8d561fc8262d16b746dfaa374ec47466f5bc0
Certificate serial: 018A4499F754006367AF97F116AAC0555FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
Manifest number: 080B
Signing time: Wed 30 Aug 2023 04:00:55 +0000
Manifest this update: Wed 30 Aug 2023 04:00:55 +0000
Manifest next update: Thu 31 Aug 2023 04:00:55 +0000
Files and hashes: 1: 36bPpZW6aNjlewW8wZtT3wv1_0g.roa (hash: //nF/5zMaqRg1dNblnAzcWaThDO9WYa5kIODssG/dXY=)
2: ALjVYfyCYtFrdG36o3TsR0ZvW8A.crl (hash: Ru5IeoiWqnFDnyKmwqEDO2Mwp1vPpQg/uAY/YZgQUUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:99:f7:54:00:63:67:af:97:f1:16:aa:c0:55:5f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b8d561fc8262d16b746dfaa374ec47466f5bc0
Validity
Not Before: Aug 30 04:00:55 2023 GMT
Not After : Aug 31 04:00:55 2023 GMT
Subject: CN=7315f45dfb63cadef8e66bdc2f4f902642537490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:8c:73:52:89:79:03:55:36:db:e2:ca:23:
ee:7f:1d:95:9b:0e:27:92:2f:65:b7:f7:4b:30:09:
af:7f:ba:53:26:50:16:6e:d1:1e:25:2a:f2:9f:12:
f5:29:1e:93:35:77:69:41:4c:03:df:31:73:ba:30:
ee:da:0d:0d:00:5e:92:27:08:e3:42:45:c8:a4:1e:
71:0d:66:45:a9:3f:e8:e6:97:ef:0a:19:b0:96:66:
67:c2:17:bf:96:55:ba:1a:c5:10:b7:a5:cc:45:38:
47:01:bd:eb:af:59:7b:3c:f2:fb:f8:72:e5:dc:3e:
3a:7f:0c:5d:27:2a:68:00:f3:1b:8b:45:12:f5:59:
aa:22:59:64:b9:22:a8:34:2d:97:99:e9:2e:2b:98:
f6:46:d1:be:59:70:11:46:c0:ab:18:6c:2a:51:1d:
2f:b9:3d:97:77:99:e7:47:d0:f8:cc:16:fe:c8:a0:
39:48:dc:61:69:c6:da:93:ca:51:18:c3:21:b3:62:
c8:77:53:29:eb:6f:58:4c:00:8c:6b:e2:a9:06:2c:
25:25:cd:d2:bb:08:86:5b:e6:27:a6:e6:29:cf:65:
7b:4c:16:74:52:6f:9f:1a:71:24:b3:34:53:c5:2f:
03:e2:09:49:40:bf:14:fc:92:6c:76:f0:82:13:6c:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:F4:5D:FB:63:CA:DE:F8:E6:6B:DC:2F:4F:90:26:42:53:74:90
X509v3 Authority Key Identifier:
keyid:00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:5c:25:86:1c:97:f0:a7:1c:f4:b9:44:87:c7:91:8f:82:
fb:a3:de:18:ff:e4:4f:fe:ee:b3:54:51:7b:43:69:83:47:1e:
9c:17:65:9a:53:7a:ae:42:78:27:ac:d1:77:d8:88:22:46:f6:
6f:7b:1e:52:f2:1c:80:e1:56:da:af:34:d9:ff:69:ef:1a:40:
bb:21:85:be:5f:c7:b6:e1:8e:96:43:13:46:ab:59:24:08:5c:
f7:f2:60:76:00:75:71:36:db:da:a2:f6:67:72:da:57:c4:73:
87:a6:1d:53:18:92:48:04:80:1d:35:b1:86:d7:d4:e5:bc:c9:
af:ea:c1:62:06:8a:66:4b:9b:cc:86:7a:29:8b:9e:5a:a0:3e:
2d:a4:37:8c:a7:3c:03:d1:83:bf:35:ba:c7:76:bb:0e:1b:72:
b2:ec:5b:61:65:96:36:1e:4e:98:9b:73:6e:23:aa:12:53:2c:
b8:7f:53:3a:4a:c4:0a:17:9a:a6:35:3b:64:a6:a7:64:a1:f6:
e3:47:74:df:a6:27:06:71:c9:f5:3d:19:f6:27:24:b7:43:88:
71:0f:d0:8a:45:af:07:c3:53:c3:75:13:09:9b:bd:07:92:8f:
eb:33:f5:24:01:7a:83:86:f1:4a:61:43:70:11:01:07:4c:c7:
a2:5b:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:39 2025 by rpki-client