![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SRWIeN8rtLCJEr6GBHIeLSVnyb8.mft
File: SRWIeN8rtLCJEr6GBHIeLSVnyb8.mft (raw, json)
Hash identifier: 4UYPcadXJt3okUkfUhhzbOjtD6VjtsAuhJ6KJHNWgKA=
Subject key identifier: 5B:8B:10:17:BB:88:A1:C0:71:A3:59:BA:C7:FB:13:C2:9B:4C:BB:B1
Authority key identifier: 49:15:88:78:DF:2B:B4:B0:89:12:BE:86:04:72:1E:2D:25:67:C9:BF
Certificate issuer: /CN=49158878df2bb4b08912be8604721e2d2567c9bf
Certificate serial: 018B950ED71D4AEA9B936CEB85823E5312A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRWIeN8rtLCJEr6GBHIeLSVnyb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SRWIeN8rtLCJEr6GBHIeLSVnyb8.mft
Manifest number: 0883
Signing time: Fri 03 Nov 2023 12:00:59 +0000
Manifest this update: Fri 03 Nov 2023 12:00:59 +0000
Manifest next update: Sat 04 Nov 2023 12:00:59 +0000
Files and hashes: 1: SRWIeN8rtLCJEr6GBHIeLSVnyb8.crl (hash: vco/Ydg/ZtuYBks6Uw2IB3Um/mI3To3VILQKKFPyVSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:0e:d7:1d:4a:ea:9b:93:6c:eb:85:82:3e:53:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49158878df2bb4b08912be8604721e2d2567c9bf
Validity
Not Before: Nov 3 12:00:59 2023 GMT
Not After : Nov 4 12:00:59 2023 GMT
Subject: CN=5b8b1017bb88a1c071a359bac7fb13c29b4cbbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:13:28:96:e4:40:eb:c4:96:9f:7c:87:87:
0a:99:04:3a:29:8b:5e:5e:3d:1e:11:ae:1e:43:0f:
f8:a4:29:56:dd:87:28:79:55:c0:33:9a:0d:fd:21:
f9:2a:a8:38:da:85:3f:dc:fc:52:42:0d:23:bd:9e:
95:d7:c1:30:78:f2:78:20:f3:37:53:c4:43:8e:57:
c9:e6:0c:cc:c7:bc:53:a8:45:1d:b8:e2:ff:81:8e:
56:37:88:3a:ec:92:1e:6d:ab:f8:69:cb:83:6e:ef:
d9:7b:20:69:14:b2:19:97:f0:ad:f1:65:6d:f0:07:
68:c2:3e:09:6b:cb:54:7e:c5:69:31:f3:ec:af:19:
cf:c5:0e:72:58:dc:da:e3:49:ea:ad:64:87:ba:58:
84:83:14:ef:33:51:af:bf:13:3b:8f:c5:ab:f4:ac:
9b:c5:58:c6:af:1b:db:4c:ae:d2:74:56:99:2e:27:
5c:30:d9:37:b0:cf:c3:a0:f3:b8:17:bd:c1:13:81:
6d:19:66:b5:9b:19:da:7c:a4:5c:d6:bf:93:72:4d:
95:27:5c:50:5f:f5:07:0e:10:29:a0:de:c4:04:9f:
29:d5:e7:b2:8f:db:10:98:d8:cd:cc:d3:e3:64:73:
96:02:38:8d:82:e0:11:5b:4e:db:f5:74:82:1c:df:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:10:17:BB:88:A1:C0:71:A3:59:BA:C7:FB:13:C2:9B:4C:BB:B1
X509v3 Authority Key Identifier:
keyid:49:15:88:78:DF:2B:B4:B0:89:12:BE:86:04:72:1E:2D:25:67:C9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRWIeN8rtLCJEr6GBHIeLSVnyb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SRWIeN8rtLCJEr6GBHIeLSVnyb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a7830b-a569-40c9-8df9-71cffb13c4fd/1/SRWIeN8rtLCJEr6GBHIeLSVnyb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:94:94:3e:c1:86:84:8e:00:cb:e7:cb:bb:b9:8e:e6:4b:e2:
bb:4f:b8:7b:3a:7a:5d:bd:d7:9b:1d:73:e8:c2:a5:5b:3e:38:
04:34:c9:b4:cb:6d:c9:6b:ec:1f:4b:e4:2a:3d:d2:4f:e8:8e:
7c:97:69:47:e9:37:71:69:6c:90:c8:23:2b:50:98:95:89:06:
de:60:d1:f4:eb:50:6f:be:0d:d3:c5:59:6d:98:60:63:d9:57:
12:42:59:f2:a9:5f:5c:60:b7:78:f7:a4:1a:74:cf:71:6d:f3:
04:10:6e:a9:4f:d6:2c:c5:16:1d:d4:ee:1a:4a:9e:8d:ad:fd:
15:5d:39:25:22:fa:10:1c:8a:89:06:e8:6d:1a:43:a3:ca:38:
3a:fc:f1:dd:8d:ae:00:60:cd:6e:9b:03:2c:fd:f9:90:7a:c8:
d6:e9:32:5c:06:4b:e6:59:86:b0:44:e0:e1:fc:e1:d6:c5:b7:
75:a3:46:08:a0:11:0c:71:0a:20:7c:23:02:40:af:02:93:be:
45:2a:a6:68:bc:65:37:05:d1:51:d7:41:80:ca:f3:2b:5d:7b:
47:b5:b6:ef:aa:16:ba:ef:dd:27:61:14:a0:46:4a:7f:94:8e:
d7:a9:c7:65:0a:68:32:30:56:a3:14:5d:a0:6b:cb:8d:ce:2f:
dd:39:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:34 2025 by rpki-client