![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft
File: bVyM744roqd9I-G7wNTxs94u9aA.mft (raw, json)
Hash identifier: +c4SYU2Te1E97b0xgaqnjZFcxGXpJww4qk6Zzie4jjI=
Subject key identifier: 94:4E:BB:E3:2B:AB:1C:5D:06:2A:2C:8C:57:EB:2D:A4:EE:93:BF:6D
Authority key identifier: 6D:5C:8C:EF:8E:2B:A2:A7:7D:23:E1:BB:C0:D4:F1:B3:DE:2E:F5:A0
Certificate issuer: /CN=6d5c8cef8e2ba2a77d23e1bbc0d4f1b3de2ef5a0
Certificate serial: 019023116B70524BFE45E68BD2982A7684C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVyM744roqd9I-G7wNTxs94u9aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft
Manifest number: 02BA
Signing time: Sun 16 Jun 2024 22:01:02 +0000
Manifest this update: Sun 16 Jun 2024 22:01:02 +0000
Manifest next update: Mon 17 Jun 2024 22:01:02 +0000
Files and hashes: 1: bVyM744roqd9I-G7wNTxs94u9aA.crl (hash: 0QYVLs2ar6yC7IuijS41LCL3KkG97Z56uZBtrFJVdds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:11:6b:70:52:4b:fe:45:e6:8b:d2:98:2a:76:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5c8cef8e2ba2a77d23e1bbc0d4f1b3de2ef5a0
Validity
Not Before: Jun 16 22:01:02 2024 GMT
Not After : Jun 17 22:01:02 2024 GMT
Subject: CN=944ebbe32bab1c5d062a2c8c57eb2da4ee93bf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:2d:99:d4:1c:69:21:dc:ac:4f:19:7b:57:
b8:0e:c0:ff:d0:94:f0:5e:53:6d:6b:03:f1:71:2d:
88:5e:9b:92:6e:da:3f:43:00:3b:7c:4b:24:8d:37:
2b:7b:97:5d:df:73:5e:72:b4:7a:aa:40:bf:1f:a8:
35:4a:51:43:f7:19:df:7d:e1:b9:b7:51:83:59:27:
4c:d2:8b:bf:00:79:e0:f7:b7:6e:76:05:cc:5d:e6:
ef:41:ca:0b:08:a2:89:5d:0c:ac:93:8d:e5:07:c5:
27:b3:0f:dd:09:62:4f:48:c4:ba:6b:12:6c:3f:22:
41:3e:8d:9a:ed:4c:86:fe:0f:da:d8:b0:74:e6:f0:
42:b7:87:8c:5b:48:0c:21:f8:1d:78:ec:82:6f:d8:
9c:35:a1:b8:74:18:28:e1:85:6d:6d:75:85:0b:2c:
63:5f:a1:94:b8:a6:06:20:fa:3f:6e:ec:f4:6f:9e:
b0:91:9c:eb:a4:a7:65:1a:e4:5a:a8:f9:65:b1:3b:
77:39:7a:d3:b6:15:46:fa:6a:64:8c:53:a2:d4:c1:
cb:27:a8:e7:34:e1:c6:6d:66:d8:4e:8c:0f:33:2b:
33:ae:93:2e:b1:51:fa:3a:6f:71:85:83:45:2d:96:
c9:f4:e9:4b:2b:92:f6:cf:fc:ee:0d:99:b5:d8:c0:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:BB:E3:2B:AB:1C:5D:06:2A:2C:8C:57:EB:2D:A4:EE:93:BF:6D
X509v3 Authority Key Identifier:
keyid:6D:5C:8C:EF:8E:2B:A2:A7:7D:23:E1:BB:C0:D4:F1:B3:DE:2E:F5:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVyM744roqd9I-G7wNTxs94u9aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:56:02:f1:fa:f3:e5:5b:d3:a5:4d:4d:1a:d0:69:49:a9:
8d:34:45:48:b2:02:22:b1:84:22:3c:e9:bc:48:16:05:d2:28:
f0:73:55:90:84:f7:5b:c8:7f:06:a7:8c:3c:71:2f:c0:9f:58:
7e:fa:11:5c:a6:ee:4c:95:20:00:e6:77:39:61:5a:2e:ae:d0:
7a:bc:2b:ae:98:73:80:36:37:5a:63:d3:fb:17:27:84:23:e2:
09:8a:36:34:7e:44:8e:a4:cf:59:6e:34:ac:e4:7f:c8:cf:46:
18:5d:1d:40:42:a5:4a:9b:0f:10:76:4c:8c:6d:9c:9c:18:fe:
dc:ad:9a:d8:15:ec:81:20:64:28:83:10:fc:5a:1c:b1:8e:33:
95:f9:6e:5b:68:be:89:5f:14:1a:6c:21:67:8e:72:8e:5f:5e:
83:c2:83:77:bb:25:3d:4d:45:91:4f:7d:f3:53:cd:ff:c5:cf:
1e:fb:72:0f:d1:7e:74:d8:16:8b:a6:74:68:30:f5:36:63:96:
2c:dc:f6:94:fa:9d:ab:cd:88:46:b1:3a:7b:8f:bf:4f:c0:19:
d2:78:31:ce:68:2b:9e:ce:86:30:25:dc:21:cb:bb:27:d8:ef:
ac:07:85:4e:42:0f:c8:c5:bb:67:6a:99:c0:1a:b1:6f:57:b1:
e1:af:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:49 2025 by rpki-client