![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft
File: 3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft (raw, json)
Hash identifier: 9zvN7JFr4jpEhA1nwKtmc4psofwqKMhFFJsk9S0VcCk=
Subject key identifier: 19:7E:ED:1F:78:BE:F4:F9:76:97:1A:BC:AD:12:D1:B4:3C:A8:7C:4B
Authority key identifier: DE:82:52:55:36:7B:38:D1:4E:52:EE:6F:3A:8A:16:5F:84:98:DC:D9
Certificate issuer: /CN=de825255367b38d14e52ee6f3a8a165f8498dcd9
Certificate serial: 018EDF4754D7A83CB84334CE8A34AE4DC28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft
Manifest number: 1007
Signing time: Mon 15 Apr 2024 01:02:57 +0000
Manifest this update: Mon 15 Apr 2024 01:02:57 +0000
Manifest next update: Tue 16 Apr 2024 01:02:57 +0000
Files and hashes: 1: 3oJSVTZ7ONFOUu5vOooWX4SY3Nk.crl (hash: l0p51ULcjisoOPk3NAMAMTKHvfYgP4chUJuXReJyJsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:df:47:54:d7:a8:3c:b8:43:34:ce:8a:34:ae:4d:c2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de825255367b38d14e52ee6f3a8a165f8498dcd9
Validity
Not Before: Apr 15 01:02:57 2024 GMT
Not After : Apr 16 01:02:57 2024 GMT
Subject: CN=197eed1f78bef4f976971abcad12d1b43ca87c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:e0:b5:77:ae:2c:c8:78:9a:a9:4f:52:84:
54:2c:7c:1e:4d:55:44:2b:e2:6a:33:e0:a3:52:4b:
ae:2e:8d:82:07:cd:30:62:5d:1c:5c:c4:39:4d:18:
17:63:b1:b1:ca:e1:78:07:70:2b:3a:e5:61:bd:ac:
a1:22:66:89:2d:bf:b6:b8:09:e0:a0:95:9d:4f:38:
ae:11:f8:84:bd:da:8f:39:12:80:33:eb:56:a9:63:
85:39:a1:21:ee:a1:8a:1f:93:92:a2:f4:59:28:29:
6f:25:67:8e:c0:cb:e6:29:20:14:77:8b:c6:02:12:
b7:71:e9:91:47:11:65:65:b4:45:47:d4:4e:a4:37:
99:8b:b4:cd:68:09:d0:84:78:f1:50:c2:d7:79:58:
67:ba:af:6a:bb:69:4f:44:77:3d:fa:1c:56:66:55:
7d:4b:25:b6:c9:5e:f3:c1:db:b4:19:a3:72:93:69:
de:78:1f:5d:d1:b7:19:94:67:89:8e:12:79:3f:d8:
4b:7f:76:42:1c:e5:83:c9:20:89:ae:39:ba:1e:29:
9c:6b:f6:97:c3:10:82:3a:b5:71:04:4f:91:87:f7:
ca:d4:60:79:3a:af:89:a4:0b:d8:12:09:6f:2f:7e:
03:01:66:d3:2a:33:96:62:46:10:cb:a1:84:65:4c:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:ED:1F:78:BE:F4:F9:76:97:1A:BC:AD:12:D1:B4:3C:A8:7C:4B
X509v3 Authority Key Identifier:
keyid:DE:82:52:55:36:7B:38:D1:4E:52:EE:6F:3A:8A:16:5F:84:98:DC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:61:ee:b6:b7:9a:f1:a2:88:c6:5f:cc:fd:e3:75:68:bb:
b6:cc:f4:00:db:a3:47:2c:8d:39:b4:47:90:ba:3c:8b:41:41:
12:82:4a:c9:6f:e2:d4:c6:c9:75:3e:36:73:5f:59:86:af:e9:
8a:b9:5e:67:b8:88:be:e1:9d:f5:95:d0:85:64:77:b5:7f:19:
0d:1a:0c:b0:09:18:0f:84:ae:7d:ef:27:11:65:c4:c7:cd:aa:
72:90:22:a5:fc:5c:ec:b0:db:4d:f4:9c:f1:f3:ff:0e:04:dd:
67:d4:0f:5e:4a:49:2e:5e:48:dc:9e:3c:c5:83:6d:04:01:58:
af:03:a4:3b:68:8c:87:e4:4a:7c:c3:9f:50:dd:6f:38:fb:32:
54:12:81:a0:d2:28:2e:48:0e:58:cc:8e:92:99:df:75:d5:fc:
32:25:aa:8c:5e:e6:64:24:87:17:38:5e:e1:a0:30:d5:02:bd:
a2:ab:19:46:2d:ce:9a:4f:ce:45:8f:ce:b3:ab:a3:cf:a7:64:
79:b7:fd:04:69:98:fe:27:dc:42:c3:d8:1e:77:e6:4e:29:61:
8a:3a:eb:cd:33:98:79:ef:c7:ac:f7:ec:7a:85:a1:9e:c7:da:
0d:23:ad:09:09:e5:4a:d3:6a:0b:90:df:8d:03:d6:40:5a:b5:
47:f5:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:08 2025 by rpki-client