![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
File: GzjKPrK6f_JBL15_je8-tRVg0a0.mft (raw, json)
Hash identifier: lq5+F1Rqpgkl1USreAcFn5Q8XUrMa5NiNSqeyM0m+Rs=
Subject key identifier: 0A:02:42:83:86:B5:33:7F:5C:75:F4:64:FE:30:9C:C7:57:0B:AB:5E
Authority key identifier: 1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
Certificate issuer: /CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
Certificate serial: 0185E1F349DAC9AA6C17466A8429711D881F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
Manifest number: 0C3B
Signing time: Tue 24 Jan 2023 04:04:55 +0000
Manifest this update: Tue 24 Jan 2023 04:04:55 +0000
Manifest next update: Wed 25 Jan 2023 04:04:55 +0000
Files and hashes: 1: GzjKPrK6f_JBL15_je8-tRVg0a0.crl (hash: KnN3MC2Mlhy7auq2bkUv7fNqVNNBxYmw5juA51A80o8=)
2: HMrcNcc0YLFn7qtcB3T2gXkDw7Q.roa (hash: Jg8aPD2KgLQYLvBloThoOJ3Wb99E3hnF2a64wjS7ctQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e1:f3:49:da:c9:aa:6c:17:46:6a:84:29:71:1d:88:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
Validity
Not Before: Jan 24 04:04:55 2023 GMT
Not After : Jan 25 04:04:55 2023 GMT
Subject: CN=0a02428386b5337f5c75f464fe309cc7570bab5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:66:fc:0d:1b:4d:80:dd:d0:fe:15:2e:cb:
78:eb:ea:01:40:43:aa:af:f8:52:ac:d7:4d:62:82:
a0:9f:88:88:c0:04:57:0c:1c:34:e3:7e:bb:80:95:
b4:0a:69:2d:cc:e5:6c:17:d2:04:85:43:c7:bf:12:
b4:3c:31:6f:2b:21:4f:7c:2b:f1:ee:5b:90:39:94:
52:6b:09:22:5c:b0:ee:33:60:b8:da:50:b8:7c:eb:
a5:c7:8c:d9:61:50:64:54:f4:cd:f0:ec:67:a7:2e:
e6:cc:1b:4b:02:48:2f:9c:c0:ee:8b:c6:59:a4:b2:
83:37:32:d4:47:ef:83:09:b3:35:cb:ac:5f:1b:d2:
4d:b7:21:56:fe:c5:4f:e7:15:01:23:9e:40:92:fa:
3d:9b:5f:fe:5e:0f:4b:fe:77:4e:e0:38:96:de:de:
e8:dd:ac:47:ea:f4:16:36:7c:f2:ec:8f:87:7f:fc:
d1:62:a1:f3:cf:ae:bf:01:a4:6d:3d:3f:5d:52:a4:
0d:e6:09:bc:85:32:c7:4f:4b:1a:0a:e4:8f:38:c1:
77:ad:d8:31:7b:5e:11:9e:f5:87:fc:6d:d1:f5:23:
6e:9e:1a:06:a4:7e:21:c0:ce:b7:6c:26:9a:ad:5b:
2d:a5:99:b5:c0:e1:7e:fe:7c:74:65:38:11:42:fa:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:42:83:86:B5:33:7F:5C:75:F4:64:FE:30:9C:C7:57:0B:AB:5E
X509v3 Authority Key Identifier:
keyid:1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:c1:4f:59:8e:c6:96:bf:bc:91:0c:cd:7f:8c:00:22:a6:
2b:09:b6:6b:b9:75:be:4d:ec:9e:a4:36:4e:3f:aa:6b:ef:09:
47:4e:07:a8:20:71:78:7a:f9:6a:2d:68:ad:ca:2c:b7:aa:2b:
79:1f:60:8a:06:54:2a:40:fc:49:c6:11:b5:7f:95:a2:0f:7b:
58:22:0d:00:5c:56:0e:ee:27:58:9e:4f:02:15:28:ad:12:d5:
88:cd:69:7e:70:11:cf:12:07:2d:63:9d:95:0a:9d:f4:be:37:
de:51:0e:41:83:b8:d2:d1:18:af:2f:74:ee:54:eb:1d:b5:5b:
5a:aa:76:13:00:c1:bd:26:9d:14:a0:10:aa:0b:25:4d:36:16:
eb:0c:6c:2a:a3:44:7c:e1:b0:92:f9:c2:1e:f9:6a:dc:51:f4:
a7:d1:a4:b9:4d:7b:ce:97:64:6d:b6:7d:9f:bf:9b:19:53:1d:
ca:26:42:8c:36:53:e1:a9:c5:d5:08:72:0e:83:55:18:cf:e7:
a5:f5:34:77:dd:1d:8c:f0:ff:81:8b:3b:33:40:38:94:12:0f:
cf:30:71:0f:4a:55:cc:d6:23:19:54:3c:23:c1:64:b3:49:98:
4c:6e:d4:a8:58:dd:7e:50:36:cc:66:80:5e:77:65:2a:8f:5e:
55:da:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:36 2025 by rpki-client