![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
File: hMOh9T3IFfgQHLJuu1T15w1AFrI.mft (raw, json)
Hash identifier: rk9Oyzr/5Vt+qvbHjZoCzqO73ebzkDuImqjuo9aZo1o=
Subject key identifier: B2:D5:41:E3:1A:87:21:1A:EB:B9:7B:68:E0:39:7E:97:06:6E:26:A2
Authority key identifier: 84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2
Certificate issuer: /CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
Certificate serial: 019305DA88980BA7E37C464493BC2238A877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
Manifest number: 1349
Signing time: Thu 07 Nov 2024 09:00:28 +0000
Manifest this update: Thu 07 Nov 2024 09:00:28 +0000
Manifest next update: Fri 08 Nov 2024 09:00:28 +0000
Files and hashes: 1: hMOh9T3IFfgQHLJuu1T15w1AFrI.crl (hash: zQIdnQoFNzvOOsBvOELNdbS40AkQzVXLF/pTVPko+gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:da:88:98:0b:a7:e3:7c:46:44:93:bc:22:38:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c3a1f53dc815f8101cb26ebb54f5e70d4016b2
Validity
Not Before: Nov 7 09:00:28 2024 GMT
Not After : Nov 8 09:00:28 2024 GMT
Subject: CN=b2d541e31a87211aebb97b68e0397e97066e26a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:42:05:16:ca:e0:02:82:a2:1c:1a:17:d8:
9f:b9:0e:78:cc:ef:30:97:28:78:1d:af:44:24:28:
a8:49:7e:de:9c:5e:95:1e:3c:41:8b:61:c2:a1:83:
fb:13:86:2d:78:b9:60:c2:e0:27:ae:86:48:56:bd:
61:f2:b1:00:01:76:7d:4c:4b:c5:2c:8b:34:85:03:
eb:ec:d8:30:00:5a:bc:76:e3:af:62:e8:85:31:64:
82:fe:d5:9e:ac:41:92:5b:52:68:05:4b:06:e2:a1:
b9:8f:e2:62:7c:37:c4:af:75:d1:ef:3a:c0:37:60:
60:7a:42:71:66:75:b8:46:01:a5:9b:56:ce:f1:58:
4e:38:ee:0f:f8:07:61:4c:7f:c7:02:5b:da:b8:14:
b3:78:7e:58:df:90:0d:69:fd:60:f8:f8:6f:8d:33:
40:0a:33:01:1a:59:97:b2:dc:21:c1:31:49:2f:b7:
78:c9:b0:ea:a7:50:09:2c:34:8f:b1:e6:ab:d5:33:
68:e7:e8:ca:c8:ff:2f:d3:72:87:34:2f:fb:81:f1:
34:0f:47:ed:ce:34:6e:86:41:ef:60:55:28:a2:05:
2b:d2:1d:5b:5e:32:16:e9:48:1c:9f:40:a8:1b:b8:
cc:0b:58:7a:d7:95:24:f8:45:21:b2:9a:dd:de:73:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:41:E3:1A:87:21:1A:EB:B9:7B:68:E0:39:7E:97:06:6E:26:A2
X509v3 Authority Key Identifier:
keyid:84:C3:A1:F5:3D:C8:15:F8:10:1C:B2:6E:BB:54:F5:E7:0D:40:16:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMOh9T3IFfgQHLJuu1T15w1AFrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6fe00c-5f23-40e7-8d0b-9150c19cf9ae/1/hMOh9T3IFfgQHLJuu1T15w1AFrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:18:51:a7:5d:89:47:76:54:70:30:de:8d:82:1f:58:2d:
7d:63:41:a6:5f:2c:29:6a:97:d7:b9:9f:84:c8:32:33:27:87:
e9:c2:22:af:41:b8:7c:52:63:3a:aa:b1:d8:b4:42:4c:31:e2:
80:97:e3:73:78:95:4b:ed:21:24:e3:9c:4d:a3:7b:47:52:26:
47:0e:be:29:30:c2:99:3d:91:56:63:78:20:08:38:90:42:2e:
c7:ee:6c:f6:39:3d:bd:a9:69:22:af:f4:be:df:48:18:7f:91:
b9:cf:32:a6:d5:d6:7e:30:86:25:f7:2a:85:7a:a3:02:f6:e3:
39:45:dc:b9:95:4e:9e:66:10:f3:bd:be:a4:f9:c9:b3:b5:9c:
fd:d8:25:5a:a5:bd:b4:75:c0:a1:1a:6c:42:16:ae:12:99:6e:
6e:bc:e3:b2:88:c3:56:58:5a:9f:b3:11:a4:05:2f:93:c5:55:
1f:45:24:53:d2:f6:2b:78:c2:ba:ce:f5:b7:68:2d:f2:61:cc:
a9:88:86:45:0a:8e:0e:bd:6f:42:e9:82:6e:79:36:78:4d:82:
04:46:5f:ab:d1:3a:39:4a:aa:a0:1e:03:e8:e7:e6:15:ac:3a:
a7:b4:5f:fe:8e:04:9a:32:f4:fe:56:b3:b1:eb:36:6c:a2:9b:
f9:d3:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:22 2025 by rpki-client