![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft
File: 450mSj8vXPDIiK-qyewcqi62i8U.mft (raw, json)
Hash identifier: 2peanEvxxtEFQssS+10H84x93t/3ctQ1tfPVi9hhq40=
Subject key identifier: ED:80:05:64:99:50:DA:AF:8C:4F:AA:50:AD:3E:78:45:27:AA:E7:AF
Authority key identifier: E3:9D:26:4A:3F:2F:5C:F0:C8:88:AF:AA:C9:EC:1C:AA:2E:B6:8B:C5
Certificate issuer: /CN=e39d264a3f2f5cf0c888afaac9ec1caa2eb68bc5
Certificate serial: 0187A194EACD49C7A9812C1D517AF0DCCD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/450mSj8vXPDIiK-qyewcqi62i8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft
Manifest number: 0D38
Signing time: Fri 21 Apr 2023 02:11:43 +0000
Manifest this update: Fri 21 Apr 2023 02:11:43 +0000
Manifest next update: Sat 22 Apr 2023 02:11:43 +0000
Files and hashes: 1: 450mSj8vXPDIiK-qyewcqi62i8U.crl (hash: U1mHWWYVP28rMClcV+zLRcnd00QLYdwqAamh2vjYDV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:94:ea:cd:49:c7:a9:81:2c:1d:51:7a:f0:dc:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39d264a3f2f5cf0c888afaac9ec1caa2eb68bc5
Validity
Not Before: Apr 21 02:11:43 2023 GMT
Not After : Apr 22 02:11:43 2023 GMT
Subject: CN=ed8005649950daaf8c4faa50ad3e784527aae7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:be:60:cf:7b:5f:6d:79:33:21:4e:24:19:
02:a3:23:3f:99:51:6d:6e:d9:d5:19:3a:57:c6:48:
07:b0:fe:c4:0f:72:20:24:9c:68:8a:91:8b:8d:30:
97:ca:b0:7c:48:45:7c:f4:e0:75:3d:15:ad:42:ab:
e3:4d:38:bd:8f:83:c4:74:1d:4d:b0:84:da:c4:a8:
22:1b:93:2a:76:53:61:8a:b5:db:b8:ae:fb:15:bd:
69:69:ae:a5:fe:98:50:07:da:f9:a6:c0:09:63:18:
a9:de:9d:58:73:26:a6:c4:64:16:9e:61:0f:6e:b6:
6d:ee:ae:09:04:79:cb:97:9b:36:40:7a:af:96:0c:
64:c1:26:52:da:31:75:7e:44:2a:b6:35:6f:e1:b9:
5a:fa:0f:4b:6a:b8:f5:57:f2:c0:c9:05:10:e6:b4:
50:32:c2:8d:1c:9d:b2:34:fe:14:b9:ce:54:a8:48:
8c:95:f2:7c:09:aa:ab:ce:3a:1f:b7:1f:a9:76:1e:
a9:27:2e:28:e4:2c:4a:28:87:84:52:fc:94:52:37:
e5:28:00:37:43:66:32:60:1e:a3:49:df:f1:25:c3:
fe:3d:8f:8d:4c:0f:bb:23:80:77:fd:e5:e8:99:33:
b5:d4:db:11:02:53:d6:b0:c4:ff:40:da:89:43:41:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:05:64:99:50:DA:AF:8C:4F:AA:50:AD:3E:78:45:27:AA:E7:AF
X509v3 Authority Key Identifier:
keyid:E3:9D:26:4A:3F:2F:5C:F0:C8:88:AF:AA:C9:EC:1C:AA:2E:B6:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/450mSj8vXPDIiK-qyewcqi62i8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/fc74d9-6519-4fed-a1ec-d195d9a167a3/1/450mSj8vXPDIiK-qyewcqi62i8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:64:8b:86:b4:44:23:89:00:b1:fb:97:6a:df:8b:e6:45:
dd:20:61:79:d1:ce:7f:2c:46:18:94:a3:51:93:1e:65:6d:b4:
0c:cd:6a:22:f3:5d:60:15:a4:a7:d1:3b:5e:4b:1f:1a:05:1c:
87:21:d2:74:44:64:53:eb:bd:15:56:25:31:6c:72:2a:a2:8f:
cb:d2:9a:82:7e:c2:6e:24:29:e7:ed:5d:e8:20:1c:55:56:3e:
68:ff:55:14:5b:e1:9e:62:51:63:03:3f:c7:44:15:88:b0:0f:
53:94:f2:fd:06:80:98:32:f7:e3:31:c3:35:fa:40:0e:84:ce:
13:8a:10:ef:f1:a2:3d:3b:12:27:94:a5:27:3d:b8:b8:c5:80:
22:21:aa:f2:0d:e2:24:2c:d6:ea:51:8c:14:6d:5b:89:82:80:
6d:61:0d:bf:88:65:cd:2d:1a:07:fa:10:03:5c:a4:d3:9f:07:
47:1b:4f:1c:d8:d3:25:b5:d5:77:b8:35:85:37:f0:ad:9a:63:
5e:91:e6:07:76:e0:5f:1b:37:2e:38:27:d1:30:2f:bb:22:05:
32:9b:0d:49:ac:19:8d:4f:55:43:d9:18:46:01:7c:cc:bc:d0:
06:74:3c:d7:8a:90:ff:e8:d3:6b:a9:8f:d1:ee:be:2d:60:d7:
eb:a2:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:59 2025 by rpki-client