![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.mft
File: JPvIcAbbyEjLXMJEt0EncUcZ2gQ.mft (raw, json)
Hash identifier: tzxh7Bzg8QIw0nNLKh7NWnrWqo34Us53sbkX+jooUag=
Subject key identifier: CA:8E:0C:27:E3:2E:48:DD:06:71:35:70:72:AA:DD:42:E5:D3:E8:B7
Authority key identifier: 24:FB:C8:70:06:DB:C8:48:CB:5C:C2:44:B7:41:27:71:47:19:DA:04
Certificate issuer: /CN=24fbc87006dbc848cb5cc244b74127714719da04
Certificate serial: 018A4EAFD2608528839984D4FEC64B022BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.mft
Manifest number: 86
Signing time: Fri 01 Sep 2023 03:01:00 +0000
Manifest this update: Fri 01 Sep 2023 03:01:00 +0000
Manifest next update: Sat 02 Sep 2023 03:01:00 +0000
Files and hashes: 1: JPvIcAbbyEjLXMJEt0EncUcZ2gQ.crl (hash: fICQGShxoopHq5ZaJba8DkRORbDyTwWlC3FhZYD/uUk=)
2: kVUGYpjBMsGzoITFuwQAtQlAoY8.roa (hash: pFGkgywthHpgibRQXweslW0A06RKyhSNU0hBPFFXeGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4e:af:d2:60:85:28:83:99:84:d4:fe:c6:4b:02:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fbc87006dbc848cb5cc244b74127714719da04
Validity
Not Before: Sep 1 03:01:00 2023 GMT
Not After : Sep 2 03:01:00 2023 GMT
Subject: CN=ca8e0c27e32e48dd0671357072aadd42e5d3e8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:a8:ca:71:25:a1:cf:25:20:18:7f:55:ca:
ae:63:f6:1d:14:41:57:87:b4:fb:c7:9b:e0:aa:3d:
18:37:90:86:65:6c:fe:69:7e:9b:67:64:a2:59:6d:
e6:04:c6:74:97:fc:81:e6:c6:96:98:d6:09:c7:ab:
e7:c5:d6:f8:d9:5d:90:65:18:24:07:90:c3:0a:66:
8d:77:90:91:03:f9:bc:fe:e3:59:a4:07:e0:bb:ad:
1f:d7:0b:9f:d9:1f:44:20:bd:44:bb:c8:ff:4b:f2:
09:40:d1:6a:c5:a0:36:b6:21:8b:e4:e1:2b:fd:e9:
fb:a5:10:67:a4:51:3e:e2:5c:a3:d7:9c:8f:5b:fe:
e9:9d:cf:9d:52:ee:1c:a4:fc:44:32:12:6c:f8:9d:
a0:98:14:79:f2:cb:82:e5:cf:a9:94:9f:0d:79:65:
1e:36:6f:71:3e:28:ae:63:f9:ea:67:20:3f:c6:c0:
1b:8a:6f:12:6e:1f:db:a1:5b:20:2c:bb:ea:5c:2f:
94:af:30:15:f8:6d:59:ab:57:3c:3a:21:6b:82:1b:
37:f8:60:57:67:b8:2e:76:56:ae:c6:a7:67:67:67:
3f:9c:55:1b:bc:b8:96:cc:b4:58:a6:b1:d0:38:dd:
d0:5a:a1:cf:90:6f:00:20:80:7a:29:f3:95:ba:68:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:0C:27:E3:2E:48:DD:06:71:35:70:72:AA:DD:42:E5:D3:E8:B7
X509v3 Authority Key Identifier:
keyid:24:FB:C8:70:06:DB:C8:48:CB:5C:C2:44:B7:41:27:71:47:19:DA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2ff111-326d-42e4-8a99-17c89a764e2b/1/JPvIcAbbyEjLXMJEt0EncUcZ2gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:82:2f:c3:bc:d6:79:82:b0:40:b1:c0:c1:c3:22:80:86:c1:
c4:1a:88:4a:6e:5f:fc:79:5b:cc:6c:23:d0:42:a1:99:7c:f5:
ed:c5:4c:5b:a0:d4:e9:84:80:d1:08:b1:93:e3:ee:0c:1c:6d:
03:d7:a3:9e:2f:46:0d:61:50:5f:37:07:5e:d2:b9:b5:05:a1:
f1:c4:a4:81:56:8f:f7:54:ae:89:11:59:6d:44:22:48:30:27:
0d:03:4b:08:b5:eb:72:df:1a:ba:39:a0:d2:db:9e:1d:22:0d:
67:c9:b7:be:14:dc:5a:6c:3e:83:d3:96:e1:1e:65:0b:43:f9:
dc:0d:ba:87:d2:56:d6:c0:12:40:c0:26:0b:40:0e:1d:b5:a9:
8e:a1:73:6b:20:34:88:8a:f1:28:5a:fd:08:06:dd:5d:bb:f1:
ad:48:97:9c:f9:48:cb:77:36:2f:65:e0:32:59:6a:72:b8:04:
4c:ff:7a:85:cb:33:37:bf:49:09:4a:37:17:48:3b:ce:f4:cb:
54:25:40:17:57:a6:0d:50:9c:9c:77:dd:9b:f0:b4:7f:c7:67:
5c:df:73:a2:d0:ec:69:35:06:ca:d7:8e:4d:0b:8e:bf:cf:b7:
53:21:14:9a:0d:e1:0a:61:0e:5c:1f:74:18:63:9d:61:dc:0e:
59:0f:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:21 2025 by rpki-client