![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.mft
File: GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.mft (raw, json)
Hash identifier: aELD0f+/eSJW3duJcBsUjIEhbymxJB2ugngKHfkFzT4=
Subject key identifier: B1:FB:80:B4:F6:9D:E2:FE:6D:F9:89:C0:A7:6E:05:95:EB:E4:E2:9B
Authority key identifier: 1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
Certificate issuer: /CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Certificate serial: 018D622E996F6417578B523A3C4A4469BC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.mft
Manifest number: 084E
Signing time: Thu 01 Feb 2024 01:00:37 +0000
Manifest this update: Thu 01 Feb 2024 01:00:37 +0000
Manifest next update: Fri 02 Feb 2024 01:00:37 +0000
Files and hashes: 1: 4gysLe4WIdy5GF5GpusvwPbIGPk.roa (hash: H79f76jJStStQIyOaK533fnEfOTKcfep9iPnZ9+a56E=)
2: GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.crl (hash: vWy03TFLiAxtR25uQrIFXbghMNa5yQct3WqlqklMKU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:2e:99:6f:64:17:57:8b:52:3a:3c:4a:44:69:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac119ecfed677b267ef3e205fd3d035f3f31979
Validity
Not Before: Feb 1 01:00:37 2024 GMT
Not After : Feb 2 01:00:37 2024 GMT
Subject: CN=b1fb80b4f69de2fe6df989c0a76e0595ebe4e29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:65:45:b3:e5:a2:ed:25:80:54:4b:55:69:
c9:2d:a0:5c:9a:25:26:84:ea:65:6a:98:09:fe:38:
38:7b:49:0c:c0:48:4b:23:f1:8a:3d:35:bf:28:0b:
26:78:d6:08:10:5a:4e:77:f6:1c:34:45:bd:df:33:
b4:d4:d2:7a:be:82:a9:f1:c1:72:7e:0f:21:e9:ce:
26:dc:bc:e5:74:b3:b2:e8:d2:3f:2b:1f:8e:9a:20:
6b:98:ac:67:53:a0:71:ed:52:1f:37:c5:5b:16:a9:
80:8f:d1:ce:c8:a1:ec:79:3d:83:39:81:3a:d9:e1:
83:7e:26:9e:64:b4:c2:da:73:62:02:2a:89:8e:23:
79:9e:ab:4a:d1:2d:1d:50:9e:eb:ff:a4:16:25:f6:
ab:a7:f5:5d:31:f7:b3:f8:45:f3:1a:d9:74:8d:98:
42:61:4e:7b:e5:83:4f:98:0c:fd:c3:96:9e:20:35:
49:f2:fe:c1:d1:02:4c:0d:5d:fa:97:2c:9f:a4:f7:
4b:42:cb:da:97:3d:7d:e9:8c:68:9e:1e:cf:00:61:
06:81:8a:c9:f8:eb:0f:94:52:f5:7f:43:a7:1e:ca:
ab:2c:fe:8a:01:6b:7a:3d:41:cf:b4:c9:05:6e:aa:
81:a4:b1:77:0d:14:7c:96:78:8e:43:1b:d0:31:cc:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:80:B4:F6:9D:E2:FE:6D:F9:89:C0:A7:6E:05:95:EB:E4:E2:9B
X509v3 Authority Key Identifier:
keyid:1A:C1:19:EC:FE:D6:77:B2:67:EF:3E:20:5F:D3:D0:35:F3:F3:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a72e3a-05d6-4e0c-b5a7-2e90076b5e71/1/GsEZ7P7Wd7Jn7z4gX9PQNfPzGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:22:e0:a0:31:0d:de:03:27:8c:13:3c:eb:5f:3d:b7:e3:2a:
96:01:0f:b7:90:23:f7:71:37:7f:a7:fa:cd:2b:2e:c5:09:42:
b3:5d:e6:15:75:64:a4:7a:3d:0f:95:81:76:a7:f7:01:68:83:
9f:ee:e2:bc:21:4d:d2:69:6b:8f:ed:8d:d2:3f:db:d5:4f:71:
d3:cc:97:e2:7e:d4:64:5d:a1:c2:4e:b1:f2:ee:83:3c:88:03:
3d:ef:c8:a3:6f:0f:40:ec:45:a8:8a:b0:42:23:67:a5:ae:da:
b2:d6:e1:56:73:5d:e4:60:e0:84:a1:f6:7c:25:2a:d1:7a:b8:
41:3b:4a:98:9d:c0:cf:ce:b2:50:7c:c7:2a:24:4a:f7:aa:50:
64:04:95:82:40:b8:29:45:b4:dc:b9:45:6d:08:c4:c8:54:27:
4b:26:ae:1a:b4:a2:91:1b:f3:53:96:62:b2:67:40:8c:7b:98:
4c:a3:c9:e4:bd:94:4b:32:97:d8:08:6c:a4:78:7f:5b:64:aa:
2c:15:bf:59:64:6b:c6:e1:19:d0:e7:a3:d9:b9:b5:1a:28:94:
c4:7d:79:4c:1e:c3:29:be:ce:fa:a3:c6:cb:28:be:15:9d:a0:
4e:0c:c6:69:b0:9c:cb:3e:a5:bc:f0:21:df:5a:d2:89:5e:a6:
bd:20:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:26 2025 by rpki-client