![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
File: 7zgTezuGluY2P3_NDdaU4eL7sEI.mft (raw, json)
Hash identifier: fks5+WV/MiyvXTCZHp5K28zak1q9rSSDTJ2cC5NKHno=
Subject key identifier: 2B:DC:4B:F4:BC:21:CC:7F:6D:57:7D:26:8C:F0:C7:DB:FD:D1:FA:4A
Authority key identifier: EF:38:13:7B:3B:86:96:E6:36:3F:7F:CD:0D:D6:94:E1:E2:FB:B0:42
Certificate issuer: /CN=ef38137b3b8696e6363f7fcd0dd694e1e2fbb042
Certificate serial: 019367EBE1BEA17C896E442C9F42FBED3EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zgTezuGluY2P3_NDdaU4eL7sEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
Manifest number: 10C6
Signing time: Tue 26 Nov 2024 10:02:12 +0000
Manifest this update: Tue 26 Nov 2024 10:02:12 +0000
Manifest next update: Wed 27 Nov 2024 10:02:12 +0000
Files and hashes: 1: 7zgTezuGluY2P3_NDdaU4eL7sEI.crl (hash: Pg6uDC4PpDhpF2q79MzEn8xmhkH3LqnwNyMwlncmgHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:e1:be:a1:7c:89:6e:44:2c:9f:42:fb:ed:3e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef38137b3b8696e6363f7fcd0dd694e1e2fbb042
Validity
Not Before: Nov 26 10:02:12 2024 GMT
Not After : Nov 27 10:02:12 2024 GMT
Subject: CN=2bdc4bf4bc21cc7f6d577d268cf0c7dbfdd1fa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:b9:d3:08:1a:8e:5c:4c:1a:02:a4:ba:76:
a3:f4:27:54:23:5d:e3:f3:2d:74:d9:ff:55:4c:bf:
49:45:2b:36:ee:a6:7d:87:0a:2c:0e:57:d8:87:70:
05:e9:a6:19:b7:00:1d:e7:10:11:a5:59:1b:a1:35:
36:78:af:bf:93:14:f6:d3:00:39:a8:f8:39:47:e4:
2c:04:b2:b9:d8:f5:da:8f:88:96:cb:c9:68:0b:39:
fe:7f:e7:32:12:ae:35:73:e6:c1:13:90:d8:cd:dc:
23:63:97:5a:f3:bf:6e:3e:33:9e:7a:57:af:05:04:
06:cb:43:d0:de:b2:f7:96:22:54:a3:af:fa:6d:bb:
a6:e7:87:5a:91:a0:65:1f:6e:50:17:ba:e4:cc:df:
02:21:61:ea:eb:db:3b:64:cc:13:d7:99:3f:1f:5b:
3d:48:ac:cf:71:11:a2:04:54:7b:09:ea:78:22:f8:
72:b0:07:13:4d:a0:b5:28:d4:93:fc:6f:14:63:93:
ee:22:85:53:ca:e1:a3:c4:b3:34:0f:e5:0f:15:09:
ab:b9:e5:ab:3b:cf:09:ba:05:22:70:7b:6c:aa:a3:
b6:79:46:d8:97:20:66:0b:25:f9:b4:09:8b:54:e2:
5f:33:c8:dd:fe:50:83:5e:37:d9:ca:b5:d1:bd:a0:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:4B:F4:BC:21:CC:7F:6D:57:7D:26:8C:F0:C7:DB:FD:D1:FA:4A
X509v3 Authority Key Identifier:
keyid:EF:38:13:7B:3B:86:96:E6:36:3F:7F:CD:0D:D6:94:E1:E2:FB:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zgTezuGluY2P3_NDdaU4eL7sEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b67f1d-aba5-4068-8dec-72d5cf62f280/1/7zgTezuGluY2P3_NDdaU4eL7sEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:05:dc:99:3d:72:93:1b:81:89:93:f9:96:2d:88:e9:8a:6b:
37:55:11:a0:99:0a:18:13:e7:40:f3:27:b6:d1:6d:8c:7b:c1:
bf:65:51:54:06:59:d4:20:ae:eb:36:c5:ff:67:18:40:21:38:
ad:b7:68:b5:71:41:5c:6d:75:80:5c:d7:b2:c5:ac:25:19:fb:
4e:96:98:d7:0f:55:79:8a:42:41:5b:bf:2d:a9:a4:45:75:a0:
d3:87:54:02:80:94:97:0e:24:5d:d4:3c:ec:dc:20:73:ec:03:
32:62:8f:5b:8c:ae:75:00:0a:fa:53:43:25:7a:2a:b0:79:4e:
9f:4e:9b:e9:8f:af:34:ca:e3:49:59:ff:6d:22:3c:65:36:a0:
02:94:c6:2a:38:d1:f0:20:86:33:27:07:29:82:6b:9c:35:71:
5e:05:52:c8:f7:9e:99:ad:b7:f9:fc:07:9e:32:64:89:72:89:
7d:0f:37:48:a4:b6:68:3d:ba:ef:07:65:07:29:47:74:4e:8e:
42:c4:cf:33:1d:98:5f:37:be:af:15:f0:68:00:e8:37:c7:a1:
e5:0e:9a:4d:27:b1:d9:e3:a1:44:17:a3:ec:00:0b:7f:3c:c7:
99:02:e0:33:18:b3:ca:0f:04:a3:81:2f:6c:31:3f:ad:7f:b1:
74:d9:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:37 2025 by rpki-client