![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.mft
File: VxGtMytQb4IlHTv-OhIal5zMqU0.mft (raw, json)
Hash identifier: Ia3G/kviBZcq8Taca8KXLyEZH1rEQeYEHLDQD27ikdw=
Subject key identifier: E4:46:A6:80:DD:78:33:A1:EF:61:BA:8C:F2:DD:7F:53:19:72:B8:CC
Authority key identifier: 57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
Certificate issuer: /CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Certificate serial: 018576603856DD464CD493E3342BE0109482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.mft
Manifest number: 0C02
Signing time: Tue 03 Jan 2023 06:44:55 +0000
Manifest this update: Tue 03 Jan 2023 06:44:55 +0000
Manifest next update: Wed 04 Jan 2023 06:44:55 +0000
Files and hashes: 1: 1-L82KG4To1VQJdBltjMonJm3guo.roa (hash: Hocq0iFFTCXjCxjv08YFW2oWfx/ivjbq9JKJ4FoHRzA=)
2: VxGtMytQb4IlHTv-OhIal5zMqU0.crl (hash: u3RSHyySJ7uyNZtXXQhX1v389JuaZShHv7EWeG1fMJU=)
3: m-FVQHcG7Z8QeDB8FTPSw0bERv8.roa (hash: LeDJPlMuPDFx+y9aQE7hnWyNT5m0YyyqN8a/XMFrytU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:60:38:56:dd:46:4c:d4:93:e3:34:2b:e0:10:94:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5711ad332b506f82251d3bfe3a121a979ccca94d
Validity
Not Before: Jan 3 06:44:55 2023 GMT
Not After : Jan 4 06:44:55 2023 GMT
Subject: CN=e446a680dd7833a1ef61ba8cf2dd7f531972b8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:6f:0a:25:8b:09:03:41:dd:76:e9:65:d5:
1f:e8:dd:ce:c3:20:3b:c8:37:af:f1:8f:89:79:88:
4d:02:46:f8:0c:76:21:8b:17:bd:f8:12:d2:5b:de:
e0:f0:c6:61:a9:2b:7a:36:24:81:a9:3e:dd:58:ef:
d7:e8:a7:e8:f0:95:2b:50:7e:96:d6:cd:4e:ae:6b:
d6:cb:62:f6:92:96:4f:45:96:96:2e:2b:14:80:e0:
f2:3e:45:fc:f2:0e:6a:9d:cd:72:28:18:7b:c4:32:
74:a2:69:57:70:ad:cc:d2:73:ce:fc:bb:1c:06:09:
62:61:2e:e1:4b:d9:1d:7b:6b:f9:09:1c:2c:0d:e1:
25:0d:7d:96:d3:3e:f1:53:f0:1d:a9:fa:f7:4a:c3:
4f:7b:28:29:1c:c6:50:49:70:36:c6:8b:47:75:ef:
a9:1b:d2:e8:a6:43:0e:c2:f4:9d:5f:32:c0:71:ed:
d9:37:62:69:b6:18:4c:b3:90:28:ee:81:f6:46:43:
44:01:ef:6c:1b:0b:0f:25:f3:5e:27:e3:4b:f5:69:
a0:50:25:84:d6:2f:a1:bf:55:b2:0c:ba:ef:39:12:
96:38:43:e3:d9:99:1c:af:97:dc:5b:2a:45:7f:e5:
34:76:43:05:68:84:b3:2a:63:f0:86:17:0c:86:6b:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:A6:80:DD:78:33:A1:EF:61:BA:8C:F2:DD:7F:53:19:72:B8:CC
X509v3 Authority Key Identifier:
keyid:57:11:AD:33:2B:50:6F:82:25:1D:3B:FE:3A:12:1A:97:9C:CC:A9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxGtMytQb4IlHTv-OhIal5zMqU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5c869d-f88a-4c7e-a168-80d0cfafa041/1/VxGtMytQb4IlHTv-OhIal5zMqU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:95:56:99:5d:87:ad:12:ad:a2:d0:91:44:6f:fd:5e:06:66:
1c:54:b3:e4:c3:28:95:d5:e3:63:73:8c:0e:3e:d2:63:b9:2e:
73:c6:91:51:3b:91:15:3e:47:65:52:9d:cc:65:e8:19:a0:d4:
88:6f:00:16:73:25:c1:f7:90:09:5c:36:ad:71:ad:d0:d7:28:
76:15:86:fb:30:cd:76:33:79:37:d4:39:a4:9a:63:c8:cb:b0:
fe:b8:13:af:58:87:45:5d:db:e6:e7:60:23:ba:d4:5e:3f:62:
2d:b2:62:b2:87:93:f7:d3:85:9f:9b:82:ce:e8:d4:81:48:45:
4e:85:81:7a:4c:f1:c8:17:5d:2c:4c:f3:dd:5e:91:d6:75:5b:
f0:4c:18:8b:61:60:60:1a:12:cd:6f:90:4a:06:ca:d5:5b:f0:
f2:56:54:8f:7b:17:3f:65:98:67:db:e9:78:18:4d:28:94:3d:
4c:89:95:e3:9d:eb:93:f5:06:e2:e9:37:9e:d2:3f:cb:06:fd:
9f:81:0a:5c:c8:e3:51:bd:da:55:b6:c4:23:83:7a:3c:d1:16:
44:21:e2:2d:0b:ec:24:14:89:5b:21:ef:2c:96:33:e0:a4:4b:
81:02:49:c0:d0:5f:3c:fa:d2:03:16:84:0a:a6:19:1b:a4:3d:
2a:b5:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:06 2025 by rpki-client