![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.mft
File: dPqq9Ys0fd9AiFPRZWKux62vvYg.mft (raw, json)
Hash identifier: oyFNUxEK0QPR8T+S0WtuWwO0KjS50wI+y0yZzr0eIDg=
Subject key identifier: C7:51:E4:DA:4A:B6:FD:6A:A9:A6:39:9D:53:61:1D:7E:7C:E1:5F:D3
Authority key identifier: 74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
Certificate issuer: /CN=74faaaf58b347ddf408853d16562aec7adafbd88
Certificate serial: 115FA9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPqq9Ys0fd9AiFPRZWKux62vvYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.mft
Manifest number: 096A
Signing time: Mon 23 May 2022 02:17:35 +0000
Manifest this update: Mon 23 May 2022 02:17:35 +0000
Manifest next update: Tue 24 May 2022 02:17:35 +0000
Files and hashes: 1: WJz-AHZ9ju2sdGVYkQTBg8rH8Oc.roa (hash: zxc/Sc7ZD94NpBjBmvyMXzGG/zVq+xLNqqhY+dKcgX4=)
2: dPqq9Ys0fd9AiFPRZWKux62vvYg.crl (hash: 0MkAHn0//qPzwB1VCa71LRBjC4vt4dDT7GAvIeIBswU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291482108 (0x115fa9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74faaaf58b347ddf408853d16562aec7adafbd88
Validity
Not Before: May 23 02:17:35 2022 GMT
Not After : May 24 02:17:35 2022 GMT
Subject: CN=c751e4da4ab6fd6aa9a6399d53611d7e7ce15fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:9b:85:ff:5b:0c:df:1a:53:4d:9b:70:07:
16:b8:91:ec:d6:0a:b0:3c:06:5b:7b:bf:00:6b:bd:
a0:7e:47:2b:0f:d3:dd:f7:7b:17:76:67:e4:74:b3:
09:dc:ce:43:d8:de:ca:7e:05:6d:ce:9e:96:fc:b8:
91:2d:3b:ab:5c:c3:df:ec:19:83:fc:3a:12:9a:17:
92:c2:0a:72:7c:07:77:f1:8a:d7:f8:fe:3f:36:a7:
17:49:3a:85:5c:e2:dd:51:d5:33:c1:27:f4:5e:52:
1f:a1:47:d9:64:44:9a:ba:ee:f4:cf:74:77:e9:e2:
76:d6:5e:0e:cb:ad:f5:66:13:9f:71:37:5f:65:b9:
3e:ed:97:8d:b5:62:75:ba:14:ea:aa:58:9a:b0:4e:
fa:80:62:65:3e:36:4e:dc:d9:c2:3d:bd:29:79:a8:
6f:c1:c1:9e:76:20:cf:9f:c5:88:96:39:4c:d9:a4:
73:29:4b:fd:7d:4a:a9:8a:64:93:98:cf:8d:0d:28:
b4:0c:c7:25:41:d3:48:83:fb:e3:25:50:74:93:f6:
dd:80:8d:39:7b:d0:cc:eb:f8:8a:f3:26:03:75:eb:
33:d5:c6:18:7c:47:26:b3:7a:4a:0d:70:1b:ce:b8:
9f:8a:b0:a9:7e:04:e0:70:68:89:08:8d:1f:3e:a4:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:E4:DA:4A:B6:FD:6A:A9:A6:39:9D:53:61:1D:7E:7C:E1:5F:D3
X509v3 Authority Key Identifier:
keyid:74:FA:AA:F5:8B:34:7D:DF:40:88:53:D1:65:62:AE:C7:AD:AF:BD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPqq9Ys0fd9AiFPRZWKux62vvYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a2ef3e-a4c3-4592-9fb7-35820328b556/1/dPqq9Ys0fd9AiFPRZWKux62vvYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:e7:1b:03:85:92:f7:10:e9:a8:19:fe:aa:5e:38:a8:d7:
4b:bb:ea:a7:25:54:4b:fa:fa:9e:44:40:41:0f:a7:4d:f1:43:
59:93:3b:3e:95:22:0e:03:ef:f0:6b:69:3e:88:da:ea:fc:e0:
46:36:6f:03:4c:db:e8:0d:a4:a8:99:00:46:7a:f5:e2:68:b7:
3a:05:38:ac:66:15:a1:3e:4a:9d:6a:a6:35:2f:85:57:8d:b1:
75:1b:33:75:87:a5:b3:5c:f5:de:b4:2e:d4:15:6f:0e:db:69:
ce:d5:0a:4b:6e:a1:77:b1:2b:11:65:ff:36:87:53:af:ad:91:
2a:02:66:5f:a0:3d:98:82:91:1e:21:c7:25:73:5b:f9:87:d3:
c2:4c:c6:67:5f:da:bb:7e:98:df:4f:c5:0f:8b:86:14:d1:92:
b9:15:9b:43:6a:37:fe:4c:cb:05:29:36:c7:61:c4:7c:f9:97:
40:ab:05:0c:77:38:b0:54:51:73:84:5d:bc:1c:91:ff:c4:93:
2e:83:4a:b4:8e:6e:34:09:97:0f:6b:00:83:9e:f5:b4:4a:12:
58:26:1d:98:fc:73:ff:30:46:14:c0:79:cb:1e:06:ae:e0:d8:
1b:1a:5f:42:67:0a:79:c9:c0:47:10:7c:27:21:37:e0:54:2e:
b3:03:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:52 2025 by rpki-client