![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft
File: VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft (raw, json)
Hash identifier: 8RiYPch+zpr8gKvgcACrWWGkr49qC0vt9MxU46L8I58=
Subject key identifier: 4B:AB:2B:D1:29:FC:C4:9E:33:B9:42:48:93:C7:1C:BD:CE:1C:38:75
Authority key identifier: 54:3F:8D:4E:12:F4:BD:11:50:F1:30:3D:6D:9D:17:45:FD:53:00:AC
Certificate issuer: /CN=543f8d4e12f4bd1150f1303d6d9d1745fd5300ac
Certificate serial: 018949BC7A1D1A3C34FA5D00B4E3CB4FAEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft
Manifest number: 04C5
Signing time: Wed 12 Jul 2023 10:53:56 +0000
Manifest this update: Wed 12 Jul 2023 10:53:56 +0000
Manifest next update: Thu 13 Jul 2023 10:53:56 +0000
Files and hashes: 1: VD-NThL0vRFQ8TA9bZ0XRf1TAKw.crl (hash: RPFw3SNWkAXbjzm/7l58wlfOTY8utsfazMAa4SJRfUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:bc:7a:1d:1a:3c:34:fa:5d:00:b4:e3:cb:4f:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543f8d4e12f4bd1150f1303d6d9d1745fd5300ac
Validity
Not Before: Jul 12 10:53:56 2023 GMT
Not After : Jul 13 10:53:56 2023 GMT
Subject: CN=4bab2bd129fcc49e33b9424893c71cbdce1c3875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:8c:7d:74:b5:b3:f3:77:ce:d0:c2:b0:3b:
db:51:bc:fd:f8:2e:01:c2:bc:ba:80:4f:b5:67:2c:
12:cf:a5:a6:07:be:f0:ea:76:27:87:02:45:a1:56:
ad:6f:cb:aa:0b:aa:bf:0e:bd:2e:a4:77:93:a5:b9:
64:d8:56:73:44:5f:43:c8:58:9d:13:79:c4:97:a7:
49:fe:ab:b0:bb:8a:1f:bd:af:25:d2:e5:59:9d:25:
46:01:d3:8d:96:85:44:0e:96:f9:83:f8:5a:01:94:
9b:ed:89:69:4c:ab:48:d7:75:7f:51:17:93:88:07:
b0:20:5c:f1:6b:a2:1e:53:5c:28:fe:65:68:0b:e7:
21:19:21:0c:c6:27:d9:b4:82:91:8b:89:36:64:fc:
5d:4d:fa:01:45:49:55:42:5d:71:14:1b:7b:3e:30:
6c:d2:66:be:8d:75:54:c7:bd:4e:eb:23:b2:f3:b9:
3d:26:1d:b0:24:93:9f:0d:c4:f9:27:bf:1e:b1:fc:
91:a2:eb:e2:9f:f9:19:e5:0b:06:cb:f4:92:ec:c2:
c4:c6:f5:66:6d:cf:90:b2:51:bf:e1:52:9f:12:fc:
a3:63:0f:ea:dd:67:fd:28:bd:6b:dc:43:ed:74:89:
61:cd:1a:f3:3f:d9:c3:cb:c2:9b:28:5a:01:c1:5a:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:2B:D1:29:FC:C4:9E:33:B9:42:48:93:C7:1C:BD:CE:1C:38:75
X509v3 Authority Key Identifier:
keyid:54:3F:8D:4E:12:F4:BD:11:50:F1:30:3D:6D:9D:17:45:FD:53:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/279510-87c6-4075-b69e-c949ef0b4172/1/VD-NThL0vRFQ8TA9bZ0XRf1TAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:6e:e1:55:06:7f:95:1f:35:66:b9:cb:e4:75:a4:e8:c9:
74:39:90:b7:86:74:fe:19:98:30:4d:1d:2f:13:70:e8:09:57:
a1:45:d9:eb:13:56:e6:6f:aa:4f:6f:90:3e:9a:f6:32:a0:17:
fc:8d:07:d3:63:2c:4d:1e:7a:d7:99:19:ef:57:a3:4f:63:31:
1a:ce:4b:4f:93:18:bd:92:f7:a0:f2:4d:4f:b1:10:ca:2e:7e:
a6:f3:fb:e6:e9:87:56:fc:fb:05:07:fc:8d:54:ee:13:98:be:
64:03:fd:af:3f:59:6a:df:cf:d4:c2:b9:80:39:ab:5c:f8:89:
e4:72:e3:e7:a6:6e:41:50:87:a8:0c:4c:b2:38:da:b2:fd:ca:
c8:d6:35:f4:76:6e:d3:ed:9a:b2:1e:6d:06:cf:36:a5:08:a1:
03:07:56:c9:36:27:53:df:9a:80:7d:23:d8:95:39:81:b4:f9:
d9:b9:0e:61:cf:ee:3e:32:23:30:da:bf:52:65:77:ab:a1:cd:
9b:89:76:72:8a:7b:f3:df:3f:3f:49:1d:39:88:4c:94:ac:b6:
ad:a2:3f:d5:52:52:a5:13:d5:7c:cf:82:b3:51:fc:4f:fa:3c:
fe:45:c7:08:e9:2f:19:c1:4c:cb:c5:35:38:42:24:19:a9:54:
0e:df:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:38 2025 by rpki-client