![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft
File: HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft (raw, json)
Hash identifier: mxn42TcgUHERtHn32i+a8VtatZuGj0b9hmrnztMzEBg=
Subject key identifier: B9:D6:9F:DC:1E:AE:0D:B0:3F:C6:52:74:9C:AB:37:F3:D1:04:04:F1
Authority key identifier: 1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
Certificate issuer: /CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Certificate serial: 018D5D76CE679FED66148B303D1BFADDBD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft
Manifest number: 08F5
Signing time: Wed 31 Jan 2024 03:01:23 +0000
Manifest this update: Wed 31 Jan 2024 03:01:23 +0000
Manifest next update: Thu 01 Feb 2024 03:01:23 +0000
Files and hashes: 1: HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl (hash: UWSp8kHvpjHLcEWCAZbQLq+rgte8syAV/QubwMi/pm0=)
2: gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa (hash: L1SW0WovgD+nbalEyvPxeHr/wcgcVSpe4hHBMm4BK/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:76:ce:67:9f:ed:66:14:8b:30:3d:1b:fa:dd:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Validity
Not Before: Jan 31 03:01:23 2024 GMT
Not After : Feb 1 03:01:23 2024 GMT
Subject: CN=b9d69fdc1eae0db03fc652749cab37f3d10404f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:74:b6:17:df:01:e3:cb:88:da:d8:70:c9:
f4:e8:8b:34:30:33:78:0b:6a:1f:e6:ba:f7:f2:0c:
8b:f6:77:cb:98:7f:be:4e:e7:8d:1a:54:8b:a2:57:
6d:21:f0:65:a7:e4:94:16:cf:72:0c:0b:11:5e:74:
f7:ef:ce:5e:42:27:20:c5:01:f9:07:6f:23:aa:e4:
7a:e8:82:28:01:33:ec:46:24:a4:b7:44:89:6c:ca:
ee:04:9f:1b:01:c2:c1:e3:b3:26:2e:93:b6:0b:9f:
27:91:61:f2:ba:69:ae:2c:ba:68:3f:1b:fa:90:fc:
be:73:e9:dc:21:a3:97:1f:0b:2e:94:d1:ac:6f:a3:
a7:ac:58:02:7e:53:96:37:f9:84:96:78:d6:51:6b:
13:c4:71:31:9a:ff:61:fe:57:ce:3d:2c:27:ba:33:
a9:08:01:6d:a3:48:6b:6b:30:de:3b:c4:f4:fb:4a:
05:72:73:a5:60:a1:2a:2f:de:11:8e:49:d8:7b:90:
ac:47:b3:5a:2b:84:77:55:b4:38:2e:95:10:3c:46:
ee:2b:7c:b8:6a:f9:3b:e4:9b:ee:fe:0a:93:e5:fb:
a9:ed:d3:7d:8d:1d:5f:11:fc:f8:d6:1b:76:60:f2:
cc:08:39:dc:62:63:d4:22:93:45:d3:0c:dc:c3:76:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:9F:DC:1E:AE:0D:B0:3F:C6:52:74:9C:AB:37:F3:D1:04:04:F1
X509v3 Authority Key Identifier:
keyid:1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:86:f6:a2:d1:1d:75:2c:9b:b4:0f:59:d3:18:da:84:1a:
8b:ee:d5:aa:bf:99:81:25:5a:74:32:cf:0d:83:6b:29:12:93:
dc:a0:0a:77:5e:6c:77:60:ab:91:0f:bb:26:f1:14:74:9f:dc:
05:99:86:5a:dd:89:31:ae:10:a2:27:96:52:da:71:68:14:27:
69:aa:4f:ea:b5:0b:1e:73:ea:1c:51:cf:00:65:32:e5:65:bd:
d0:38:2d:45:51:a1:f2:e1:9b:90:54:6c:a8:96:26:f5:3b:e1:
13:1e:a4:32:be:f4:9e:7f:87:70:fa:c8:9f:65:5a:9b:dd:e5:
c9:1b:36:85:58:de:d3:0d:2f:47:ef:07:fe:00:ed:e7:a5:ff:
82:64:55:d5:b5:3e:54:48:39:e0:fb:60:aa:c6:e0:5c:0c:7a:
6d:64:7e:af:ae:d1:e1:96:92:dd:9a:d8:e5:05:a5:9e:fd:c4:
81:b8:ae:b0:d2:71:73:ec:a1:96:62:80:e0:9f:e3:98:7d:53:
cc:20:35:23:6d:e6:71:ce:5c:e7:08:9b:9a:de:6d:20:b8:4e:
38:4b:d4:06:cb:81:6d:1d:27:89:c3:b5:90:63:08:4e:fc:a7:
b0:b8:2e:ae:69:58:3c:c1:7b:e1:3e:33:7d:11:b7:d3:6f:e0:
84:aa:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:47 2025 by rpki-client