![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
File: 1mHWCkcyZzg-yD8rccCO9DknpPk.mft (raw, json)
Hash identifier: 0yffmKBim8sEt/09dmxkw41iOQ2E8FWFaUSU+z8P6RI=
Subject key identifier: 1D:EB:B7:51:5E:58:5B:F6:84:19:DD:8C:4F:82:A1:BD:97:C7:40:6B
Authority key identifier: D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
Certificate issuer: /CN=d661d60a473267383ec83f2b71c08ef43927a4f9
Certificate serial: 0188E3365184293412E506BE43512898EB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
Manifest number: 06CA
Signing time: Thu 22 Jun 2023 13:06:07 +0000
Manifest this update: Thu 22 Jun 2023 13:06:07 +0000
Manifest next update: Fri 23 Jun 2023 13:06:07 +0000
Files and hashes: 1: 1mHWCkcyZzg-yD8rccCO9DknpPk.crl (hash: jLZXIsz6YQmiQbVeYi/duNZnbvphSTKrAPyeodoHYPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:36:51:84:29:34:12:e5:06:be:43:51:28:98:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d661d60a473267383ec83f2b71c08ef43927a4f9
Validity
Not Before: Jun 22 13:06:07 2023 GMT
Not After : Jun 23 13:06:07 2023 GMT
Subject: CN=1debb7515e585bf68419dd8c4f82a1bd97c7406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:94:4f:b9:ce:5f:e5:38:b0:d3:58:aa:c1:
5d:b8:ec:3f:5c:dc:4d:73:62:9e:10:0b:6a:14:ab:
81:72:1a:30:28:b0:97:2f:99:39:86:ab:e1:84:3f:
87:bd:fc:8d:02:86:b1:8c:4f:c2:ef:3f:d8:11:ea:
d4:c3:17:73:6e:48:c9:94:60:8d:c1:d6:16:94:98:
15:68:3f:7f:7b:3b:7b:8d:c4:12:f2:db:7c:34:53:
31:e4:94:79:08:0b:bc:06:cc:65:cd:61:07:80:14:
48:dc:54:d2:a2:c6:72:5f:3c:b8:a2:07:31:9c:a2:
b0:08:9d:5e:5a:23:dd:1c:5e:fc:6c:00:0c:f6:16:
71:41:50:f9:34:91:98:53:8b:b2:18:92:5a:83:b5:
dd:5a:86:aa:07:a8:aa:49:7f:9f:db:6e:59:22:ee:
f6:4c:97:c0:a6:c3:c6:88:f7:2c:29:1e:62:d6:ea:
6d:fd:09:bc:44:ee:63:c2:34:de:ac:6d:30:01:f0:
6f:ef:f8:7f:c3:f8:d7:a1:b5:ba:b1:ef:b8:af:5e:
26:61:d8:83:7b:48:b2:c8:b3:31:8b:8f:30:d6:6b:
e4:d9:77:a4:70:d2:4c:2f:fa:76:0e:77:40:56:e2:
de:1d:48:df:dd:76:62:9d:b6:4e:28:94:00:4b:0d:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:B7:51:5E:58:5B:F6:84:19:DD:8C:4F:82:A1:BD:97:C7:40:6B
X509v3 Authority Key Identifier:
keyid:D6:61:D6:0A:47:32:67:38:3E:C8:3F:2B:71:C0:8E:F4:39:27:A4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mHWCkcyZzg-yD8rccCO9DknpPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/aa479a-e6d0-4362-9317-49ba6ccde770/1/1mHWCkcyZzg-yD8rccCO9DknpPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:90:e8:46:74:21:70:bd:4d:e8:db:95:31:3f:93:ba:86:e5:
73:8e:2c:c7:24:5c:93:ff:e9:13:1c:ae:86:24:b4:4c:16:40:
91:e8:46:47:f7:ea:8a:c0:e5:af:43:73:4c:f0:5f:11:4e:10:
cd:5b:7a:77:c3:5c:01:f2:08:7f:dd:bf:b1:43:89:fb:0c:a0:
3a:e1:18:c5:00:0e:23:01:b4:d0:77:23:6c:32:14:1c:ff:6e:
3b:df:e3:6d:33:d8:2a:b7:fd:89:61:4f:01:2f:3a:a8:90:85:
c9:db:01:fe:a3:9b:6c:ec:82:34:e2:ba:90:57:fb:97:24:bc:
01:df:7d:31:16:56:91:58:f4:2c:f5:af:29:70:41:4b:92:3c:
55:57:e2:4d:64:f6:29:6a:e7:24:8d:3e:57:8a:cf:7f:b7:ad:
e0:4d:89:60:41:f3:39:59:5e:06:ac:42:2b:33:c0:7d:c4:1e:
fa:19:29:f7:22:0a:1f:ee:ff:3d:3a:17:03:f1:b4:9a:e0:52:
eb:d7:70:9e:a3:8e:d5:b2:a6:92:d8:bf:3e:85:df:3e:6a:34:
eb:06:72:1e:f6:4b:4d:9e:b9:b7:72:5e:d9:7f:75:bb:e4:f0:
f9:18:e9:e2:56:a8:ae:bb:8f:71:37:9e:f0:21:38:d2:48:26:
ff:84:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:11 2025 by rpki-client