![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
File: JUussnEsJZyHPN8MEZbCHlI6ETg.mft (raw, json)
Hash identifier: LsV34rCI0STErDqbZWCHA2y/ofNF2+nnDvSN5o7CiEA=
Subject key identifier: 0E:EA:17:6F:22:C7:12:37:13:B2:81:2F:03:D1:C0:7C:1D:6B:90:39
Authority key identifier: 25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
Certificate issuer: /CN=254bacb2712c259c873cdf0c1196c21e523a1138
Certificate serial: 0184314AC8AF2ECCC2B6DC20FFA088C5EEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
Manifest number: 0B47
Signing time: Tue 01 Nov 2022 03:44:55 +0000
Manifest this update: Tue 01 Nov 2022 03:44:55 +0000
Manifest next update: Wed 02 Nov 2022 03:44:55 +0000
Files and hashes: 1: JUussnEsJZyHPN8MEZbCHlI6ETg.crl (hash: LsmfagE1c52T16ADH6VmuRzpQS1qbRt5XUZz0aU+U7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:4a:c8:af:2e:cc:c2:b6:dc:20:ff:a0:88:c5:ee:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254bacb2712c259c873cdf0c1196c21e523a1138
Validity
Not Before: Nov 1 03:44:55 2022 GMT
Not After : Nov 2 03:44:55 2022 GMT
Subject: CN=0eea176f22c7123713b2812f03d1c07c1d6b9039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:13:de:89:9b:38:6b:5b:4b:62:a4:b0:79:
82:9f:c3:ed:4d:42:37:81:68:f4:d1:2a:e3:65:5a:
00:a6:62:29:a8:f2:91:ba:9f:47:ea:c6:ed:7b:8c:
e8:66:89:db:d3:ab:57:34:68:38:ce:39:10:a8:c7:
d8:4d:49:3b:4b:6a:b6:49:56:4d:d7:50:31:3c:6c:
1d:50:bf:01:ae:95:d1:29:94:1a:2b:89:c3:7c:25:
a8:4b:80:a2:eb:ab:18:16:df:60:3e:5d:1d:41:41:
61:72:f5:f5:89:67:33:04:f0:43:c7:94:c9:0a:89:
f3:a0:22:09:70:73:0d:08:6f:4b:56:a6:13:d0:20:
2f:a7:94:69:21:82:f5:66:f6:82:bc:58:59:3a:f0:
12:23:4e:a7:82:61:a1:6d:b9:75:1b:cb:c7:8d:ad:
b2:bd:62:d3:f0:02:bb:06:aa:26:88:45:d7:a4:b7:
7e:9a:d7:03:0b:e7:2c:d1:81:b8:e2:5a:78:9c:ce:
20:c5:e7:7a:9e:32:18:32:b0:3b:0a:f2:a5:c3:31:
5d:d2:85:f9:e3:6f:fe:b8:6a:ea:5e:04:78:98:2c:
58:56:21:63:d3:c1:f8:b8:03:da:9a:3f:a9:9f:a1:
9a:78:dd:af:88:4c:f6:b4:c6:bd:78:60:e7:54:60:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:17:6F:22:C7:12:37:13:B2:81:2F:03:D1:C0:7C:1D:6B:90:39
X509v3 Authority Key Identifier:
keyid:25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:f1:9c:76:b0:df:91:f1:ce:aa:9d:4b:25:12:73:d9:9a:
b5:79:b3:89:0b:42:31:04:a6:b0:44:c2:f8:e8:62:03:a4:b8:
ed:9b:79:3a:d1:58:1e:39:7b:20:a5:a7:8d:cb:23:ea:ad:75:
11:35:5d:6d:53:e8:15:a0:1a:23:e6:8e:d6:07:16:02:88:19:
04:a0:c0:5f:4c:e8:06:e6:43:c0:6c:64:83:50:e5:66:13:0d:
84:fd:d5:97:a1:4f:e3:30:b2:18:5b:e6:17:9b:95:c5:d5:f4:
69:9e:51:99:74:0c:34:4e:81:1b:47:f7:75:d4:83:eb:7e:a0:
4e:70:1d:47:36:78:d4:2e:11:f4:4b:49:68:65:3b:9c:1e:13:
48:0e:1c:20:17:5e:ac:80:59:9a:0c:7d:67:cc:c2:11:46:fa:
f6:0c:8e:75:53:44:94:f0:d3:16:33:ca:46:7c:38:c4:8b:f8:
47:bc:35:c7:72:be:52:a9:dc:74:e1:ad:b3:81:0a:80:db:99:
88:68:77:df:32:25:36:3c:c5:f2:04:48:fa:a1:ed:0f:93:13:
92:71:80:8e:2e:b6:78:26:fe:d9:a5:03:23:06:b1:ae:fc:b6:
8b:27:c6:c9:cb:e3:f3:34:11:1e:04:55:19:4d:c2:02:f9:9f:
a2:8d:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:07 2025 by rpki-client