![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft
File: 2F7imcSKXFxe0OETaMUntmykBcE.mft (raw, json)
Hash identifier: WFRCYRYQ7iM3sChQwsItu3eWPuTD9EF9ZFKO2tUbnBM=
Subject key identifier: A3:A1:24:27:64:1F:C5:1B:4A:4E:23:27:19:36:23:67:C0:D1:51:8A
Authority key identifier: D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1
Certificate issuer: /CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
Certificate serial: 018A078F0911E7C4ECAA6ADCCEF9B58CABB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft
Manifest number: 061C
Signing time: Fri 18 Aug 2023 07:32:08 +0000
Manifest this update: Fri 18 Aug 2023 07:32:08 +0000
Manifest next update: Sat 19 Aug 2023 07:32:08 +0000
Files and hashes: 1: 2F7imcSKXFxe0OETaMUntmykBcE.crl (hash: JMTF0zwnb1QKLKAaNAd7EkBE2yGSrP+/aruH40YgapE=)
2: cWazi8ZvhPz8eNV7LSXnOnf58oQ.roa (hash: Z9elirKd+Foh1Pjdc7ZcdVyVnbKX1jmQ+pnEL/kSjSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:8f:09:11:e7:c4:ec:aa:6a:dc:ce:f9:b5:8c:ab:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85ee299c48a5c5c5ed0e11368c527b66ca405c1
Validity
Not Before: Aug 18 07:32:08 2023 GMT
Not After : Aug 19 07:32:08 2023 GMT
Subject: CN=a3a12427641fc51b4a4e232719362367c0d1518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:a2:21:f9:43:a7:66:29:14:78:35:f9:4a:
a7:42:34:63:65:af:13:23:c1:b5:27:14:a3:fb:af:
16:b7:f9:f0:c6:99:39:ad:a3:1b:b8:3a:65:c4:71:
f4:08:1f:16:d1:5b:ee:5f:cc:d9:60:f4:d0:90:2f:
28:33:c7:43:b3:35:8f:ee:49:10:5c:d4:69:5b:d8:
c0:87:c4:d9:27:4c:31:69:be:6d:74:22:38:14:f2:
4c:4a:42:35:f9:34:f4:6a:fe:b8:7b:5e:82:10:dd:
33:c8:dd:e6:7d:36:bc:bf:ca:53:ae:1b:f2:46:48:
83:6d:a1:03:2f:2f:24:b7:37:41:4a:2b:4b:81:f9:
7f:5d:e6:ff:09:67:a8:af:36:0d:32:ca:8b:c6:79:
66:3c:19:42:39:82:0a:b0:9c:1b:f4:ba:6d:97:3e:
03:f9:44:02:e7:59:bd:87:d3:62:be:7c:c6:52:12:
f2:e5:17:29:9b:a9:f6:1c:20:65:51:76:4c:4d:c5:
fd:05:1c:16:cc:35:be:64:10:f2:b4:b9:c0:e6:b5:
02:13:0d:75:9b:e3:16:88:66:63:3d:ca:34:c5:aa:
b7:0e:cc:99:7b:2d:ec:d5:c3:dc:fe:e8:20:47:e1:
ed:90:b9:7b:07:42:7a:ea:7c:0d:33:8c:38:0b:57:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:24:27:64:1F:C5:1B:4A:4E:23:27:19:36:23:67:C0:D1:51:8A
X509v3 Authority Key Identifier:
keyid:D8:5E:E2:99:C4:8A:5C:5C:5E:D0:E1:13:68:C5:27:B6:6C:A4:05:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2F7imcSKXFxe0OETaMUntmykBcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c1fd4-91e9-4fff-88da-224fd32260e7/1/2F7imcSKXFxe0OETaMUntmykBcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:6b:cc:7f:4e:5e:75:bf:06:8b:b4:71:75:a0:8a:c0:de:
0e:d8:9a:76:16:61:f6:1c:7f:00:0f:cd:09:3b:76:82:fa:8c:
2b:e6:41:83:59:23:62:a1:23:75:70:18:8b:f9:79:de:78:ed:
35:a1:b9:42:02:36:bd:a4:da:f2:93:79:94:ed:f3:cc:a4:43:
d2:3e:a4:fb:27:aa:87:ab:b7:04:9a:84:da:aa:78:7b:af:b0:
a5:79:7f:23:08:7c:12:96:32:98:54:4c:e1:b3:79:5e:22:3c:
79:84:a3:f4:e3:3b:05:81:39:84:f9:e7:8d:45:de:26:1c:bb:
23:2f:c0:f5:23:26:44:8c:d6:a6:5c:18:81:0a:4f:8d:02:e6:
06:9c:73:55:4b:20:93:5c:65:be:fe:b6:6f:e3:23:38:7a:33:
13:8c:7a:19:98:46:ad:bb:51:85:49:b9:e2:07:e7:6f:3c:e8:
0b:eb:7d:49:4f:2f:88:05:bf:2c:6c:0b:98:4f:ae:49:31:be:
20:43:51:22:87:41:32:e8:f4:b8:ff:6b:ed:2a:51:ac:be:dd:
48:50:ae:b4:6a:46:c1:65:dc:2b:92:60:d2:1d:50:6b:ed:ec:
7b:8c:82:d1:8e:fd:c0:15:54:95:ac:e4:83:45:93:24:6c:97:
7e:d9:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:39 2025 by rpki-client