![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/1-qu0fl5EbyLZ4faH9XelydwnIZw.mft
File: 1-qu0fl5EbyLZ4faH9XelydwnIZw.mft (raw, json)
Hash identifier: 5ldYZJiozGunLrhWS//UWk8Yg16AgrA4OM6Yl6gAfB4=
Subject key identifier: 9F:7E:07:4B:BE:55:BF:F8:68:14:3D:C5:F0:BF:C7:7C:EE:58:B3:C9
Authority key identifier: FA:AB:B4:7E:5E:44:6F:22:D9:E1:F6:87:F5:77:A5:C9:DC:27:21:9C
Certificate issuer: /CN=faabb47e5e446f22d9e1f687f577a5c9dc27219c
Certificate serial: 01912C48542B5C8CE3C7461B205039FDC9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qu0fl5EbyLZ4faH9XelydwnIZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/1-qu0fl5EbyLZ4faH9XelydwnIZw.mft
Manifest number: 0911
Signing time: Wed 07 Aug 2024 10:00:23 +0000
Manifest this update: Wed 07 Aug 2024 10:00:23 +0000
Manifest next update: Thu 08 Aug 2024 10:00:23 +0000
Files and hashes: 1: 1-qu0fl5EbyLZ4faH9XelydwnIZw.crl (hash: ArtdvQsosuREQ5MIieIjKPENzv2i4G8d23MYtI1WLMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:48:54:2b:5c:8c:e3:c7:46:1b:20:50:39:fd:c9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faabb47e5e446f22d9e1f687f577a5c9dc27219c
Validity
Not Before: Aug 7 10:00:23 2024 GMT
Not After : Aug 8 10:00:23 2024 GMT
Subject: CN=9f7e074bbe55bff868143dc5f0bfc77cee58b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:19:d2:49:a2:ef:ab:85:43:3a:81:e9:ce:
cc:af:60:b4:c5:33:83:ab:51:07:b8:6f:eb:38:6e:
37:97:94:71:c4:22:77:87:24:55:ec:a9:c4:75:98:
1c:d8:fc:13:e6:27:8b:69:0d:8d:d3:16:58:36:2a:
51:41:0f:8c:5a:7f:63:bf:2d:f4:25:e2:bb:b2:2e:
9c:ac:e7:b8:51:03:7b:bc:5f:e2:6d:79:71:3c:7d:
ae:1d:6e:ec:7e:60:15:05:38:81:f1:2a:9a:29:e4:
79:cd:50:13:fd:ce:20:09:54:47:e7:69:14:28:ed:
92:f5:a7:96:e7:5d:27:aa:7b:67:61:85:f9:84:11:
2e:c3:e6:65:b5:8d:72:5e:e8:1a:b7:62:d2:8b:8c:
ee:85:6f:e1:37:cd:40:e4:01:e5:e4:d0:b8:c0:0b:
df:68:63:5f:21:6e:63:55:a9:fe:7b:e3:e6:bd:c2:
66:77:13:d3:29:b0:44:11:3d:2f:6a:d4:f9:54:1f:
f2:47:14:0b:6e:49:11:dc:f2:3c:2b:59:f5:50:07:
c0:db:7d:fe:af:47:e4:0d:8c:a0:da:39:7f:f4:75:
57:4a:44:f1:71:25:8b:ff:90:f7:05:51:27:8b:40:
fa:53:ff:43:02:27:38:b8:e3:bd:e4:c6:3b:4d:ff:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:07:4B:BE:55:BF:F8:68:14:3D:C5:F0:BF:C7:7C:EE:58:B3:C9
X509v3 Authority Key Identifier:
keyid:FA:AB:B4:7E:5E:44:6F:22:D9:E1:F6:87:F5:77:A5:C9:DC:27:21:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qu0fl5EbyLZ4faH9XelydwnIZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/1-qu0fl5EbyLZ4faH9XelydwnIZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/1-qu0fl5EbyLZ4faH9XelydwnIZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:83:dc:6e:80:1f:0d:a3:74:c0:ab:2b:6b:98:68:2f:6b:
87:6c:68:51:86:dd:46:c3:7e:c1:58:b2:df:22:5f:5d:b5:a8:
12:4d:e7:54:57:b8:a3:ae:21:4c:d5:50:3d:35:8d:c9:67:63:
d0:69:4a:92:21:76:b5:c5:cf:fd:8b:07:3a:c0:ab:ee:83:82:
72:bb:40:ed:73:42:a0:f8:9c:b4:70:33:89:0f:56:84:9e:57:
ea:9c:1c:ad:06:6f:53:fe:8b:f6:94:ed:f0:a5:53:2f:8c:38:
e7:f4:9d:72:56:5d:3d:a3:cf:51:e1:71:c7:c6:a9:f6:a5:b3:
63:46:5b:c7:60:76:98:cb:5c:ee:dc:13:c5:8e:dd:31:1d:d5:
97:09:62:05:e5:31:af:91:28:4e:2e:c9:8d:7b:f8:ea:fe:bd:
87:51:fe:52:ae:1c:d9:25:18:9b:63:67:c8:2c:31:1d:49:76:
bb:1f:18:bd:26:3c:76:a0:77:c9:d5:09:28:9c:26:cc:35:43:
30:da:a8:9f:ab:0c:b6:dc:5a:14:a7:29:b7:fa:f3:05:6e:67:
b4:c5:b9:00:1e:0f:d6:45:f2:2a:8a:35:ec:47:6c:9f:ce:92:
e2:ed:32:31:f8:e8:ac:2f:2d:8d:fb:78:e9:b0:a0:f0:dd:64:
21:46:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:18 2025 by rpki-client