![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.mft
File: 86l7W4_iCE6bGwUJ2_yHdURKyRw.mft (raw, json)
Hash identifier: lMGkKL2wwJaupC7AG2BK+ItLTuCbplHUdGYd1/pL4WY=
Subject key identifier: 1B:9B:12:A3:BB:54:AB:E1:8A:B7:2E:E0:E0:30:34:D0:98:79:6E:82
Authority key identifier: F3:A9:7B:5B:8F:E2:08:4E:9B:1B:05:09:DB:FC:87:75:44:4A:C9:1C
Certificate issuer: /CN=f3a97b5b8fe2084e9b1b0509dbfc8775444ac91c
Certificate serial: 0191D44DC5DD0207FDF0A433BDAD5C1C0F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86l7W4_iCE6bGwUJ2_yHdURKyRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.mft
Manifest number: 05D8
Signing time: Mon 09 Sep 2024 01:02:32 +0000
Manifest this update: Mon 09 Sep 2024 01:02:32 +0000
Manifest next update: Tue 10 Sep 2024 01:02:32 +0000
Files and hashes: 1: 86l7W4_iCE6bGwUJ2_yHdURKyRw.crl (hash: hWRom+vvqanAaJmFTFa07mHsqFJnjVU2Y+t3hRILocg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:4d:c5:dd:02:07:fd:f0:a4:33:bd:ad:5c:1c:0f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a97b5b8fe2084e9b1b0509dbfc8775444ac91c
Validity
Not Before: Sep 9 01:02:32 2024 GMT
Not After : Sep 10 01:02:32 2024 GMT
Subject: CN=1b9b12a3bb54abe18ab72ee0e03034d098796e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:26:35:f8:eb:5e:2c:83:64:93:1b:65:b0:
ea:40:58:59:b8:a0:a0:d5:37:1f:69:7b:ca:e2:0c:
b0:66:24:ed:da:bf:c0:6a:63:76:95:ec:b6:22:9f:
fa:b1:d9:8a:97:1b:cf:b1:e5:8c:51:3f:b1:8f:cf:
ca:5f:71:5c:c1:2e:ac:b9:06:95:41:2c:bc:ec:01:
e5:90:01:8b:1b:c8:c5:a8:33:04:b5:ee:94:50:f2:
2e:b8:83:32:97:33:66:f8:df:8f:98:93:1e:c7:5e:
48:98:fa:ae:c9:3d:a5:64:0a:9e:90:d7:ef:b8:6a:
cd:cf:13:49:13:d3:f9:4a:eb:32:51:3d:05:ee:cd:
af:76:37:17:5d:d4:c3:98:18:f2:3a:e1:31:44:ea:
ed:b0:9a:e0:7c:9f:09:c1:5a:2d:11:8c:29:11:33:
35:99:09:5f:b9:8f:24:7c:74:f4:5d:ba:49:6c:53:
09:b8:08:22:be:f5:d4:80:56:d2:84:3f:6f:97:f1:
5f:c4:7b:b0:d6:a5:6a:38:7a:7e:73:10:f9:55:49:
f6:32:65:ef:7c:71:fd:bd:f0:78:ff:97:4a:ea:9b:
65:3c:75:6c:cd:e9:68:7f:b1:9f:7b:50:e2:cd:da:
9c:44:55:32:dd:d8:17:98:c8:e2:e5:1c:29:09:3d:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:12:A3:BB:54:AB:E1:8A:B7:2E:E0:E0:30:34:D0:98:79:6E:82
X509v3 Authority Key Identifier:
keyid:F3:A9:7B:5B:8F:E2:08:4E:9B:1B:05:09:DB:FC:87:75:44:4A:C9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86l7W4_iCE6bGwUJ2_yHdURKyRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/07eae1-e859-461b-896e-1002bc03549b/1/86l7W4_iCE6bGwUJ2_yHdURKyRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:a1:c3:ea:38:3a:51:fb:c0:b3:d3:92:bc:1a:40:4b:49:
49:f1:6e:e5:2e:86:ee:0b:75:6b:e0:de:32:43:e0:21:9b:54:
3c:5b:47:a6:b8:a5:85:a7:46:5b:3e:7a:d3:c0:04:dd:e1:29:
f2:5b:94:03:4b:1c:ca:1e:b8:29:5a:33:b0:75:94:20:cc:28:
a4:2d:f9:8a:65:ac:8e:b3:9b:d9:b3:90:4f:9c:cf:9a:7c:44:
71:c8:9e:20:00:9a:48:5b:12:36:25:01:f3:19:82:dc:d8:7b:
03:ab:04:e2:04:75:c6:4a:4a:e9:0d:e0:db:20:4a:b5:69:16:
fe:85:43:9b:3a:f5:e6:71:0d:cb:c7:33:94:28:fe:ca:cc:8a:
6b:63:51:c5:05:70:d0:7d:52:b5:c1:c5:8f:32:54:5d:34:a1:
a7:dc:11:ec:62:fc:de:c3:5f:ac:7a:79:b0:ef:c9:bf:fd:11:
bb:28:dd:a5:13:d3:5f:ec:11:d6:25:f8:44:ee:8b:3a:eb:cd:
8d:f4:6d:eb:56:2c:36:2d:4c:9d:9d:3e:5c:61:0f:ec:8b:76:
7a:80:7a:3a:39:47:d8:88:d0:97:bb:d2:78:33:eb:8c:c9:22:
d8:bc:19:23:d9:5f:86:ed:a0:d0:30:bf:2e:0c:d3:4a:20:48:
1e:e3:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:45 2025 by rpki-client