![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft
File: kjqgAVrBgMI2_6IR2WlnQobQc-k.mft (raw, json)
Hash identifier: 1IkwetAijLAXcy+F6ZmnXQbbFfqwKdwM84KjNwcC0Fw=
Subject key identifier: 0A:3D:0B:BF:11:20:5F:C5:57:7E:4B:66:53:B1:D0:34:2B:7C:9A:31
Authority key identifier: 92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
Certificate issuer: /CN=923aa0015ac180c236ffa211d969674286d073e9
Certificate serial: 0230E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft
Manifest number: 02CA
Signing time: Fri 27 May 2022 10:55:27 +0000
Manifest this update: Fri 27 May 2022 10:55:27 +0000
Manifest next update: Sat 28 May 2022 10:55:27 +0000
Files and hashes: 1: h49IfGxvDhK6hXaVrULxJPUhsNM.roa (hash: +3pbGSJ+XaOPu7UNpyTEL0RuV4GGBlv9eQ0Dlo7DeXw=)
2: kjqgAVrBgMI2_6IR2WlnQobQc-k.crl (hash: sZgWWOdPDS8sGcpFLqXX8FX27BdnWQVnhnSmUo8e7kA=)
3: wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa (hash: +f1v9kaXJ5LLEDqxq86GAmqUtvk7qadJq7M0jL7gmaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36759787 (0x230e8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923aa0015ac180c236ffa211d969674286d073e9
Validity
Not Before: May 27 10:55:27 2022 GMT
Not After : May 28 10:55:27 2022 GMT
Subject: CN=0a3d0bbf11205fc5577e4b6653b1d0342b7c9a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:ea:fd:4a:ab:0e:64:01:d6:a0:4c:c0:cb:
2e:a8:4b:19:1b:8e:d1:04:9f:77:d1:91:ec:7a:67:
45:00:ad:da:61:95:4e:73:30:c0:29:61:17:74:ee:
19:2e:30:2d:21:f6:82:92:f1:dd:da:c6:08:8a:89:
29:ff:54:eb:00:9d:fa:1c:09:b9:f2:7e:f6:74:04:
21:d3:cf:62:2e:57:e6:7e:89:ef:25:f4:b4:b9:c5:
f0:16:52:04:ec:96:ac:de:fc:f7:55:28:9e:25:f0:
6e:83:2e:4b:c7:1f:da:fa:ca:9d:6b:0a:3a:68:38:
1d:52:52:62:b7:49:91:de:e8:c6:6b:4b:2b:ac:87:
65:85:85:46:23:77:f2:91:9e:cd:8f:a6:b7:2a:89:
fd:08:70:d3:96:66:1e:62:05:ad:0b:10:06:04:a4:
6d:49:76:bc:8d:d9:44:17:88:c6:30:e6:2c:1c:78:
99:88:84:c5:f0:41:d0:a3:51:4c:f5:0c:50:8b:5f:
e2:54:6b:97:a9:f6:7d:c4:05:5b:33:54:1c:ec:60:
86:6b:92:de:96:22:23:fc:5d:98:1d:a5:a2:95:18:
13:0a:e4:d1:17:60:7c:84:7b:a5:e4:f3:83:f7:e7:
7c:32:66:fd:af:c5:a7:1d:3a:b7:12:6b:1b:d3:f3:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:0B:BF:11:20:5F:C5:57:7E:4B:66:53:B1:D0:34:2B:7C:9A:31
X509v3 Authority Key Identifier:
keyid:92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:f0:22:2a:0f:44:dc:7c:bc:58:00:19:51:02:41:27:2f:
1b:36:eb:38:54:2f:19:fc:80:35:00:51:53:83:0b:ec:be:31:
81:85:7b:1a:e3:ff:e8:70:55:e9:b9:01:eb:44:20:0e:2e:7b:
ff:b8:32:06:49:44:b6:24:cb:7d:84:23:1f:c7:ed:b0:f7:5d:
3e:d4:88:c0:53:29:4f:0f:78:78:6d:23:58:eb:3a:46:ab:c2:
b5:54:c2:4b:ca:c0:01:cd:1f:d3:9b:d3:e4:c9:31:3d:cd:b6:
3c:26:2d:f6:48:d8:5d:a4:e7:d4:30:62:14:6f:13:43:2c:29:
a4:e3:54:28:e3:b8:51:16:73:9b:d6:b4:b5:31:8e:c3:06:6f:
b6:98:8a:68:ea:1a:34:c4:da:4d:28:2d:ba:e7:39:a4:c3:33:
83:b4:e0:fb:e9:ff:d5:c9:4b:15:bf:ab:2d:01:1e:45:bb:c2:
ae:ce:5c:93:03:00:66:2f:bd:39:73:cc:74:74:9a:10:b4:f3:
d4:cc:93:81:65:06:a3:ae:7b:41:ac:76:db:fd:06:cb:b9:06:
4a:03:41:2e:04:94:34:29:72:97:e0:07:be:ba:4b:cd:80:41:
44:e7:d3:1f:83:0f:9d:ea:1e:75:50:13:aa:ad:7c:20:74:09:
46:c6:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:06 2025 by rpki-client