![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft
File: mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft (raw, json)
Hash identifier: UGfq0y2gtU0w/sb+fkJBUG9Z6++gqM+ILhxCmi38GyE=
Subject key identifier: B2:F9:02:70:B2:38:5F:F2:67:3B:FC:99:4F:A5:C2:C4:5C:EB:2B:C0
Authority key identifier: 98:E4:B9:29:C0:26:52:09:90:50:E2:05:22:0D:0C:66:FB:3F:13:56
Certificate issuer: /CN=98e4b929c02652099050e205220d0c66fb3f1356
Certificate serial: 129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft
Manifest number: 01
Signing time: Mon 09 May 2022 11:42:39 +0000
Manifest this update: Mon 09 May 2022 11:42:39 +0000
Manifest next update: Tue 10 May 2022 11:42:39 +0000
Files and hashes: 1: mOS5KcAmUgmQUOIFIg0MZvs_E1Y.crl (hash: rIZz4uEpcWhRaI1Lij7lPqu1YAjLQmNNmO3jIvSBItQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4766 (0x129e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e4b929c02652099050e205220d0c66fb3f1356
Validity
Not Before: May 9 11:42:39 2022 GMT
Not After : May 10 11:42:39 2022 GMT
Subject: CN=b2f90270b2385ff2673bfc994fa5c2c45ceb2bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:64:68:90:71:1e:c8:33:36:c0:e9:1f:e3:
59:8e:e9:bb:68:75:c7:e8:1b:eb:3b:d7:af:fd:c5:
e4:b6:1d:38:53:ca:87:15:98:7f:42:d1:be:4f:b5:
87:4c:69:71:e1:c9:38:5f:13:e0:dc:b4:37:08:6c:
7e:9d:7d:c5:30:c1:7d:03:9d:2c:c5:83:34:79:fe:
4f:d0:eb:8b:24:52:c3:11:74:db:0d:50:5e:a0:8e:
28:45:6e:a7:6e:6d:86:db:f3:79:92:e3:b6:bf:38:
6a:97:04:7b:43:c4:86:75:06:b8:8b:72:6e:b5:2a:
22:55:52:cb:d6:14:1d:07:6b:04:2e:d5:0a:5f:23:
86:7b:ed:e8:4d:7d:fb:76:5e:0c:1c:cd:9f:a4:bd:
a8:f3:c6:71:67:3a:df:70:96:5d:6c:44:52:f9:ca:
c1:96:c5:b9:3f:6b:f8:8c:2f:a0:17:df:55:4e:e7:
06:3a:58:fe:af:0f:0f:18:ff:6a:a2:d8:ee:e9:b7:
b3:ff:21:63:c6:c1:af:35:93:d7:c2:75:5e:da:3f:
a7:e1:3d:4b:89:3a:50:c3:ec:c6:ea:48:4f:b3:3f:
d2:68:f2:88:5a:a7:f3:ef:40:fc:af:b5:18:5d:e4:
4e:98:0a:31:66:3d:0f:c2:50:b5:7b:59:24:48:fb:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:02:70:B2:38:5F:F2:67:3B:FC:99:4F:A5:C2:C4:5C:EB:2B:C0
X509v3 Authority Key Identifier:
keyid:98:E4:B9:29:C0:26:52:09:90:50:E2:05:22:0D:0C:66:FB:3F:13:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/614767-ff05-4194-8f56-446a9d4f5970/1/mOS5KcAmUgmQUOIFIg0MZvs_E1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:ee:32:9b:fd:85:cd:bb:65:19:6c:16:73:b5:0c:e5:92:
46:bf:67:22:99:33:95:b6:0f:ae:93:34:ae:c9:49:0a:d5:69:
a5:f1:6b:36:8c:46:3b:d8:1b:59:75:95:9c:b5:8a:8e:b8:0c:
a2:97:38:e7:8d:dc:d0:44:3b:f9:84:57:76:ca:51:e2:f4:25:
d4:60:b3:c4:e5:f0:9f:df:31:94:51:dc:8d:a6:7d:c5:fb:48:
ef:97:53:11:eb:85:d1:0c:3c:52:47:37:e0:21:d1:4c:ab:1e:
ac:ba:ae:69:8f:46:6b:a2:f8:06:c8:45:9e:40:91:05:a5:e4:
cc:05:2a:7c:cd:29:20:d7:64:4e:7b:c8:1b:8d:c4:4b:70:81:
a8:9e:cc:17:75:3f:2e:6c:b0:b3:5f:3a:49:fd:c5:b0:80:00:
bd:e6:8c:6c:44:9e:c4:9a:21:89:c8:6f:ed:f6:80:0a:66:b0:
ef:a9:6f:13:2f:72:14:12:ee:9e:09:ab:44:e2:bf:26:e3:08:
1f:76:bf:a9:fb:b5:b3:4d:ee:45:3f:30:2f:ad:9e:12:a0:6d:
58:bd:fa:55:f4:af:49:71:62:0e:42:3e:6f:8c:a3:b0:da:6d:
f2:af:b8:18:88:c0:53:8a:99:a3:8e:6d:d3:e2:82:d0:e1:eb:
44:e9:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:24 2025 by rpki-client