![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
File: eylHREhZAKyWM7duV4vRXvgjhBg.mft (raw, json)
Hash identifier: SB1tK0MhAwbxRE5dv+mmfm65dKqkuTAi/kf2vjXPAlc=
Subject key identifier: 34:FD:14:CD:00:DA:89:DE:0E:43:FE:B8:6F:A5:A9:8F:33:30:DE:7D
Authority key identifier: 7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18
Certificate issuer: /CN=7b294744485900ac9633b76e578bd15ef8238418
Certificate serial: 019444806FA63A74D98E6D0A4787D8573202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eylHREhZAKyWM7duV4vRXvgjhBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
Manifest number: 0346
Signing time: Wed 08 Jan 2025 06:00:55 +0000
Manifest this update: Wed 08 Jan 2025 06:00:55 +0000
Manifest next update: Thu 09 Jan 2025 06:00:55 +0000
Files and hashes: 1: eylHREhZAKyWM7duV4vRXvgjhBg.crl (hash: agmq54Fb7M2gHgLVuGykd/3p0/dQbIVYc9ECIjHUSQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:80:6f:a6:3a:74:d9:8e:6d:0a:47:87:d8:57:32:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b294744485900ac9633b76e578bd15ef8238418
Validity
Not Before: Jan 8 06:00:55 2025 GMT
Not After : Jan 9 06:00:55 2025 GMT
Subject: CN=34fd14cd00da89de0e43feb86fa5a98f3330de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:af:3b:f7:dd:c1:60:26:29:4c:9b:8d:e2:
cb:45:00:ad:38:c2:47:f6:1c:c5:88:18:96:c5:4a:
6c:8b:09:fe:67:d3:a1:08:5f:8c:b8:8e:1e:ff:e6:
4e:19:17:7f:5b:01:dd:0e:96:99:64:db:e9:ac:f7:
f3:2a:ad:45:c7:88:d7:69:e6:e9:62:e7:21:00:fe:
bf:8b:1f:0b:0f:4e:1c:47:20:1f:ea:02:ab:ad:b5:
fb:d0:fd:68:e8:b2:28:31:b4:5d:d3:7e:a3:17:79:
c8:f3:de:8b:f8:87:20:11:1a:66:aa:29:a4:62:7e:
94:0e:30:e7:58:0d:7b:23:bc:00:6c:0f:23:d3:a8:
85:77:7f:a3:36:66:0a:df:f1:dc:8a:f1:d1:20:db:
63:4f:e0:5e:af:52:cf:60:9e:30:20:4e:f2:88:56:
1c:c6:bc:65:60:6d:8b:37:e4:d9:5a:8d:ef:c0:fb:
f7:a5:51:9b:e9:83:2f:f6:8f:c4:d0:64:b6:fc:f0:
02:d5:d3:a7:c2:ce:34:3d:69:d2:a6:1e:51:18:72:
c8:15:f2:48:65:39:a4:00:9c:a5:7e:75:af:90:b3:
35:6a:41:a6:6c:89:86:d5:ff:53:17:aa:54:81:04:
d8:23:55:56:7b:f3:df:ef:d1:bf:25:7b:2c:1c:64:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:14:CD:00:DA:89:DE:0E:43:FE:B8:6F:A5:A9:8F:33:30:DE:7D
X509v3 Authority Key Identifier:
keyid:7B:29:47:44:48:59:00:AC:96:33:B7:6E:57:8B:D1:5E:F8:23:84:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eylHREhZAKyWM7duV4vRXvgjhBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d3bdf3-f451-4225-853c-2c8a33bf33e6/1/eylHREhZAKyWM7duV4vRXvgjhBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:a9:81:91:9f:ff:a2:b8:f7:c5:69:0b:ff:4c:81:e2:8d:
d8:77:25:55:64:42:41:c1:e2:86:08:b8:64:6c:f2:25:62:fd:
ee:50:5e:8d:94:7a:5c:5e:56:b0:33:e9:d7:7b:30:d8:b2:0a:
8a:e4:9d:a7:ba:c6:15:25:d8:3c:7d:ef:2f:a4:f9:92:76:54:
41:a4:a2:b0:e1:ea:bc:d0:23:2c:4f:3a:0d:52:5d:54:f9:39:
d6:87:fb:a0:f2:0f:a2:81:8e:34:cc:b1:cf:33:dd:90:48:0a:
7d:bb:ae:c8:9d:79:98:5c:04:07:3c:86:de:49:06:45:c0:ae:
c3:5a:99:da:d3:23:68:64:d1:80:be:f1:58:be:18:c9:a8:5e:
01:94:a1:7c:e1:83:b7:2a:ac:11:d1:32:73:dd:66:85:5c:8f:
0c:44:90:f4:8c:74:87:45:97:b6:43:0f:85:fb:b2:be:14:cc:
7c:50:f3:b4:d2:de:ea:57:0f:0e:bf:e2:41:27:4c:1e:92:6c:
fd:a3:39:ac:5c:55:95:89:bd:dd:43:1f:75:e3:7e:f0:ad:1b:
8f:bb:54:76:f4:1b:85:d3:ae:0e:82:9b:0f:cf:49:0f:d1:f7:
5d:21:6a:fd:53:16:5c:b3:3a:cc:ff:5d:f7:cb:1f:30:a9:92:
d9:65:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client