![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.mft
File: BHk4MjgyPjoaVlVADEMUSKJFHhw.mft (raw, json)
Hash identifier: oEjaF3Gu3LOoTb4EAUD+5vW+VVaX1GPGyWf2uhOaFYE=
Subject key identifier: 9D:5B:2C:09:05:B1:C6:96:2B:F1:8F:C8:AC:A5:24:2A:90:CA:9D:8D
Authority key identifier: 04:79:38:32:38:32:3E:3A:1A:56:55:40:0C:43:14:48:A2:45:1E:1C
Certificate issuer: /CN=0479383238323e3a1a5655400c431448a2451e1c
Certificate serial: 0188B2CCE3C1601C624A19C7E36B20BD4650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHk4MjgyPjoaVlVADEMUSKJFHhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.mft
Manifest number: 04D3
Signing time: Tue 13 Jun 2023 03:29:12 +0000
Manifest this update: Tue 13 Jun 2023 03:29:12 +0000
Manifest next update: Wed 14 Jun 2023 03:29:12 +0000
Files and hashes: 1: BHk4MjgyPjoaVlVADEMUSKJFHhw.crl (hash: M3/kX0vf4fZYhNnQtNstT2A5maCwXdb52mTd2Vj3uZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:cc:e3:c1:60:1c:62:4a:19:c7:e3:6b:20:bd:46:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0479383238323e3a1a5655400c431448a2451e1c
Validity
Not Before: Jun 13 03:29:12 2023 GMT
Not After : Jun 14 03:29:12 2023 GMT
Subject: CN=9d5b2c0905b1c6962bf18fc8aca5242a90ca9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:12:2b:5c:4f:59:cf:83:71:02:c8:02:a3:
77:d0:e0:fe:d8:6d:65:11:a7:c7:bb:15:9e:5f:18:
34:9a:56:fa:b7:cb:3b:1d:8b:4d:37:91:71:82:6c:
6a:46:10:74:f5:9e:bc:cc:96:f5:f7:cd:13:0b:06:
0b:20:ec:17:59:02:e4:e8:4a:db:3b:7d:0f:c6:1b:
d2:7d:b2:0c:37:a2:0d:7a:8d:b1:a6:67:33:72:1c:
07:4e:a7:78:08:46:9a:2b:cb:8e:c0:9e:05:00:99:
c1:61:5b:18:c0:95:86:38:91:ad:21:c4:d3:41:ff:
e1:ff:f2:60:eb:bb:6b:56:49:45:1c:97:86:10:a9:
3c:b4:2b:1d:6d:84:d3:38:54:2f:51:99:bc:89:49:
9f:c2:30:8c:0c:13:9e:21:c9:73:4f:58:a1:e9:29:
d6:fc:71:5d:ae:55:a9:f6:0d:ce:e2:3c:20:02:4f:
f3:a8:7e:f6:50:a6:b9:43:4d:6f:05:10:62:30:e6:
13:67:55:44:2e:df:fc:15:30:61:87:1d:44:cb:1b:
40:99:3b:95:d2:57:62:1d:9d:b7:71:23:5b:4a:da:
2b:80:35:b4:0a:fc:45:ef:3a:1d:fd:2f:2c:cd:cc:
3b:92:bc:71:40:ab:b4:27:e9:18:23:df:20:05:4e:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:2C:09:05:B1:C6:96:2B:F1:8F:C8:AC:A5:24:2A:90:CA:9D:8D
X509v3 Authority Key Identifier:
keyid:04:79:38:32:38:32:3E:3A:1A:56:55:40:0C:43:14:48:A2:45:1E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHk4MjgyPjoaVlVADEMUSKJFHhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/396528-dd87-4327-b8d2-54c30159666e/1/BHk4MjgyPjoaVlVADEMUSKJFHhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e5:a6:37:76:e4:22:12:00:57:22:d5:e2:77:a5:d9:f0:fc:
62:7f:8a:16:19:e0:3c:b3:c5:ec:5e:51:60:24:2d:2a:3e:ca:
67:e4:50:95:e6:f9:81:e7:4a:10:0c:c5:35:d6:35:77:a2:05:
cb:59:a4:19:a5:fa:cd:b6:ec:39:90:7c:63:47:b4:bd:3f:3b:
b1:01:f2:c2:14:e0:b2:dd:6e:c6:9b:bd:59:3a:ae:5c:30:91:
fc:a1:0b:bb:47:dd:26:37:60:3b:da:2f:49:b7:9c:24:d1:39:
fd:60:2e:39:e9:96:7b:72:0b:7c:33:25:d2:0f:df:fc:46:55:
cc:55:53:eb:26:05:bd:44:29:61:d4:d0:4d:cc:f5:e3:6e:72:
c2:27:9c:ee:26:8c:b8:b0:e9:f9:0b:67:68:b6:46:88:27:8e:
df:e9:02:32:4d:d1:f4:13:e0:71:93:10:c1:ed:76:92:6a:51:
e2:ad:91:f5:7d:03:28:3b:56:6c:c3:14:a1:cf:0c:da:2f:75:
bf:1c:2e:5e:d1:e0:c6:1a:15:68:5f:9e:07:9f:36:12:ab:5b:
2a:d1:36:41:57:dd:f2:83:8d:b2:95:0a:16:f7:4b:99:16:64:
89:3b:17:a1:a4:49:d7:ef:b2:3a:70:3a:36:1d:22:6e:fb:73:
7f:6d:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:32 2025 by rpki-client