![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.mft
File: ebCheg6HSaT778NWdE3jqwQICTQ.mft (raw, json)
Hash identifier: MX03T+DDATDlXHUbH7LspzEB6WCLvxzZ4JYU+3fA1pY=
Subject key identifier: DF:13:85:E1:4A:74:A6:CA:EF:50:57:33:01:B8:5A:49:21:1E:57:67
Authority key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Certificate issuer: /CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Certificate serial: 01851B0E22C48417AD8722D292A912554E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.mft
Manifest number: 043B
Signing time: Fri 16 Dec 2022 13:09:49 +0000
Manifest this update: Fri 16 Dec 2022 13:09:49 +0000
Manifest next update: Sat 17 Dec 2022 13:09:49 +0000
Files and hashes: 1: ebCheg6HSaT778NWdE3jqwQICTQ.crl (hash: oQMbArdlNXPeli6D0kHr9MSYYuSp6Y9elHHUfD+s0dY=)
2: kQ3YSqxWC-uIlPvkjTm8gZljrFQ.roa (hash: j/cjadGXTUiXOX4agkHNvNijvuiTMaOqobkCdjBWCYo=)
3: zGilvVfCdUG_CSt86IS-g8BqW1Y.roa (hash: vp9aQoNKMVWdxhXJFQRJeyXneMYe/nJ1lk9tyPdT6Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:0e:22:c4:84:17:ad:87:22:d2:92:a9:12:55:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Validity
Not Before: Dec 16 13:09:49 2022 GMT
Not After : Dec 17 13:09:49 2022 GMT
Subject: CN=df1385e14a74a6caef50573301b85a49211e5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:0d:aa:05:23:ff:0d:2a:dc:ad:b1:9a:2f:
42:81:37:da:9e:b1:28:84:b5:21:63:3d:6e:8d:a5:
bd:fa:53:a5:54:9c:63:5b:1b:98:6d:cf:2a:25:f9:
38:a9:61:3e:59:f4:ce:80:e8:cb:54:ac:ab:80:b6:
55:56:9f:38:5a:4a:06:6a:bf:6e:a7:07:44:a8:16:
9c:c0:de:33:34:7b:68:6f:49:d9:98:ae:e8:73:39:
45:61:a9:33:70:6c:ad:50:df:95:6f:25:46:09:b6:
16:56:f6:d2:f9:11:ad:09:1a:f8:84:6c:3b:b1:b2:
98:52:91:81:69:40:6a:c1:a8:3d:ab:ae:62:41:66:
a9:13:a2:f2:e9:fc:af:92:12:8c:07:aa:77:ea:7e:
6d:50:c0:29:86:66:7e:06:75:5c:7a:27:e6:d8:dc:
af:05:b8:b3:e2:9b:7c:a8:1c:59:88:a9:a8:e2:c1:
5f:e4:82:d0:60:37:c9:6e:7c:8c:52:2a:a4:92:e1:
da:ac:a1:11:03:be:5b:ac:43:a5:42:02:97:dc:59:
50:ed:ec:1b:7b:80:97:bf:7b:45:e8:7e:9f:90:af:
c7:64:b2:9e:82:5d:97:d7:11:ac:6b:6b:37:85:d7:
79:91:a3:f0:66:de:4e:37:07:b1:ad:c1:90:76:34:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:85:E1:4A:74:A6:CA:EF:50:57:33:01:B8:5A:49:21:1E:57:67
X509v3 Authority Key Identifier:
keyid:79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3a:d6:31:65:21:27:8c:4f:32:96:bd:86:bd:fe:96:db:e9:
e7:1a:5c:b4:1e:27:f8:15:31:29:f2:0e:ef:98:c5:f5:0d:44:
a7:31:27:2e:0c:30:dc:a5:cf:1f:94:05:f9:a0:5f:b9:a1:d2:
1d:80:77:3d:3b:06:ee:ea:30:bc:6d:7d:84:3e:45:84:60:e4:
eb:b8:b2:84:50:7a:06:6a:b5:d1:d8:3b:0a:3e:72:56:03:e2:
78:bd:83:39:37:85:fe:99:a4:3d:ea:04:6e:36:cc:31:3c:33:
df:af:d8:df:b2:47:81:d1:06:15:a2:13:cb:ce:32:ba:ef:45:
c9:53:68:a3:46:bc:44:06:5d:29:22:12:13:dd:fe:8d:d0:28:
ef:29:52:cf:bb:57:eb:20:7a:58:8d:87:aa:fd:d8:e7:f9:6f:
f5:b3:ec:db:28:2d:8a:6a:2c:b9:de:a4:40:b4:98:78:83:c7:
42:71:06:ca:a5:16:bc:06:10:66:2e:a2:12:13:2d:46:f0:32:
7a:41:37:71:cf:b4:63:62:1e:f4:ee:26:6e:f7:57:cb:cf:c5:
b2:52:20:93:6f:56:9b:6b:60:a4:d6:0c:4b:fb:5f:57:aa:4d:
4a:ca:b6:68:18:c0:cc:3b:3a:ef:de:28:18:3b:f4:78:ad:62:
1a:1a:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:08 2025 by rpki-client