![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.mft
File: mZGj6HndRdmEELBIuC4673R9nxM.mft (raw, json)
Hash identifier: SxJVa2jyFBmPqhNH+7kbQNWwUj3p+iYi/afIaVJn4Ms=
Subject key identifier: 1A:6E:23:C8:3C:F1:94:ED:F6:1A:E9:13:B6:FB:4D:7F:33:8D:A5:C5
Authority key identifier: 99:91:A3:E8:79:DD:45:D9:84:10:B0:48:B8:2E:3A:EF:74:7D:9F:13
Certificate issuer: /CN=9991a3e879dd45d98410b048b82e3aef747d9f13
Certificate serial: 0188BE10C8235720FC11E219236856DFEEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZGj6HndRdmEELBIuC4673R9nxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.mft
Manifest number: 0DDD
Signing time: Thu 15 Jun 2023 07:59:10 +0000
Manifest this update: Thu 15 Jun 2023 07:59:10 +0000
Manifest next update: Fri 16 Jun 2023 07:59:10 +0000
Files and hashes: 1: mZGj6HndRdmEELBIuC4673R9nxM.crl (hash: fdCYZe01qsxgQr5sJ0V8pZ0OvywhQr8wixmkUuQN3I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:10:c8:23:57:20:fc:11:e2:19:23:68:56:df:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9991a3e879dd45d98410b048b82e3aef747d9f13
Validity
Not Before: Jun 15 07:59:10 2023 GMT
Not After : Jun 16 07:59:10 2023 GMT
Subject: CN=1a6e23c83cf194edf61ae913b6fb4d7f338da5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:a3:d2:86:55:c3:de:5d:6a:9d:d5:e7:1e:
41:af:48:99:25:24:16:ed:31:a0:cf:e6:dc:d9:94:
4d:53:42:e8:3b:e5:3c:cd:e2:73:c7:c1:bd:0a:62:
25:da:af:4d:55:5a:3d:58:e3:01:7f:6d:b9:e0:cd:
5f:06:0d:a9:24:e0:0d:ac:7e:28:6a:6b:9a:7b:f8:
b2:5e:b2:af:0d:5e:67:f2:0c:72:fd:4b:07:0c:00:
1c:33:62:fa:ea:a4:72:ad:32:2c:d1:e4:f7:45:41:
63:74:5b:50:a9:fc:3e:eb:d5:a2:ab:09:94:33:77:
62:89:d9:29:12:db:01:f6:57:5c:f7:78:ea:fc:03:
41:56:2b:29:3b:d8:cc:14:56:13:d8:0a:38:19:de:
a7:76:fa:f2:87:78:32:7a:bf:32:34:19:f2:41:69:
a9:0e:7d:5e:9c:86:4d:54:6d:34:b3:6a:f5:2d:71:
6b:72:8e:a7:a8:a9:a5:a2:9d:b5:7c:35:2b:2f:b3:
af:2d:7f:51:2c:a1:82:d7:ef:44:f2:11:f3:5b:57:
3c:e0:dc:4e:b4:01:b1:68:15:4e:8d:e7:f8:a3:90:
bc:04:62:98:62:07:0b:19:58:73:41:e9:ed:03:f8:
84:6f:e1:67:32:77:8b:67:01:d4:0b:fd:8b:f9:3c:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:23:C8:3C:F1:94:ED:F6:1A:E9:13:B6:FB:4D:7F:33:8D:A5:C5
X509v3 Authority Key Identifier:
keyid:99:91:A3:E8:79:DD:45:D9:84:10:B0:48:B8:2E:3A:EF:74:7D:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZGj6HndRdmEELBIuC4673R9nxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cb:08:da:2c:af:4a:8b:40:65:ac:f2:6a:7a:bb:c5:2d:00:
25:04:2c:3c:4a:ac:20:22:16:76:61:8b:15:4f:ae:49:1a:14:
fb:60:e4:8f:9d:90:37:5a:83:75:47:2e:d1:26:0e:32:c1:34:
93:16:17:46:ea:a9:fd:a8:85:91:a7:94:67:8e:32:07:69:a9:
78:87:fd:1e:fd:5d:25:2b:67:90:bd:b9:5e:e7:63:6e:37:49:
59:c9:a9:8e:d6:f4:a3:12:89:48:a4:cb:3c:92:75:d6:6a:51:
9e:08:e0:fe:21:64:7e:9f:67:df:04:75:54:5d:33:15:b7:53:
04:7d:92:36:58:ff:ad:ee:b3:2e:b9:e0:85:8f:7f:32:5b:31:
22:5c:01:a8:b1:48:31:9e:d9:be:45:e3:4f:2b:23:f9:37:7b:
f5:98:2d:ee:5e:ad:b9:a7:0f:7e:25:a7:2a:3b:90:40:2e:ce:
0a:37:0a:54:95:b5:b5:52:84:ed:5b:e9:e4:45:42:12:f1:31:
23:26:e0:b3:e9:bb:29:00:5f:0e:fa:e3:f2:23:cb:54:9d:04:
e8:31:4d:2d:ef:7d:c9:d1:6b:5b:76:e5:5b:7c:41:d1:2d:da:
44:f2:ba:4c:d9:fc:0f:71:61:38:2f:31:13:b9:29:d5:88:42:
73:d8:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:59 2025 by rpki-client