![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
File: KryuX9N1NzGwDp4lH81jzB-upWc.mft (raw, json)
Hash identifier: p7J2LiTZjgeiQt7cgjDTqqYYUg+GycRFM8G5WyK7tJw=
Subject key identifier: C4:6B:C0:EA:65:0C:2D:3B:E9:BB:8E:DE:55:84:01:FA:56:3D:D0:23
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Certificate issuer: /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial: 018A8D281A32B5190765B00AF805045173EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
Manifest number: 0970
Signing time: Wed 13 Sep 2023 06:08:50 +0000
Manifest this update: Wed 13 Sep 2023 06:08:50 +0000
Manifest next update: Thu 14 Sep 2023 06:08:50 +0000
Files and hashes: 1: KryuX9N1NzGwDp4lH81jzB-upWc.crl (hash: cxDsJXYk7CCMMiYDshywtdPzWRQ3Qi9yjUhquEmf7hY=)
2: Npn4shUKhljFYZbkZcQxOZ0wddA.roa (hash: OSSVkY00Tig7essvCOpr/l+Z22/RR8dPJZPanSpmi5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:28:1a:32:b5:19:07:65:b0:0a:f8:05:04:51:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Validity
Not Before: Sep 13 06:08:50 2023 GMT
Not After : Sep 14 06:08:50 2023 GMT
Subject: CN=c46bc0ea650c2d3be9bb8ede558401fa563dd023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:8c:7d:55:7c:55:b4:74:ed:ed:92:4f:50:
e5:1c:0d:d0:df:f4:3c:ed:da:09:a2:c0:6c:a3:7b:
d8:68:1b:7a:f1:0e:b0:8f:3f:fa:bb:29:40:e1:14:
a7:e5:df:a2:e9:d1:80:46:be:47:c5:5b:6e:fd:02:
b2:3e:6e:2e:51:44:fc:04:46:b7:a0:9f:e2:09:16:
5c:61:64:72:01:ef:50:2f:a8:58:55:38:49:ea:ed:
b8:f8:27:7d:c4:d9:7d:4c:81:d9:43:47:22:07:cb:
8d:5c:be:a8:16:b2:9a:c8:be:ad:7e:14:6c:20:9c:
2a:75:fe:f0:79:d1:32:ac:03:66:87:3b:c3:f5:92:
58:ae:85:96:12:50:74:de:23:72:a7:7d:f0:56:35:
76:b7:4e:72:50:a2:a0:d4:dd:9b:9b:ca:f2:31:80:
3e:c7:76:c6:89:f2:8e:76:8e:bf:84:ae:6d:fe:76:
3e:18:0a:19:e7:21:ff:ba:2d:83:64:71:02:c6:09:
c1:c5:f4:b6:ec:01:67:12:a0:9d:4d:ef:a1:00:40:
a3:d7:ee:dd:81:a4:39:d6:3d:b9:15:94:78:81:8f:
1c:b0:7b:90:2b:db:9d:76:40:c6:46:a0:52:95:a1:
0f:61:10:d6:68:59:de:a4:ce:84:20:ff:1d:be:24:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:C0:EA:65:0C:2D:3B:E9:BB:8E:DE:55:84:01:FA:56:3D:D0:23
X509v3 Authority Key Identifier:
keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3a:52:08:7c:23:69:62:06:98:69:0c:c9:f0:39:73:84:b1:
bc:42:99:b3:dc:70:45:00:0e:1b:9a:d6:74:8a:f1:f3:d5:ad:
9f:5e:7c:70:7f:e3:96:34:60:96:70:44:b4:db:a7:f1:80:ad:
eb:da:85:7f:31:50:76:64:23:97:1d:f6:45:56:a0:25:ec:35:
ba:27:00:a9:86:2c:3e:2e:68:2d:e3:95:8b:d4:13:fd:83:71:
dc:2c:43:7c:8b:3e:a5:04:a3:fc:ab:50:89:31:00:61:4a:0d:
1d:ee:86:8e:a3:9f:b9:14:9e:cc:72:3f:04:ed:94:db:c0:5f:
07:57:04:aa:22:70:64:84:b6:8c:16:34:f9:a7:af:90:b1:e9:
a6:94:c9:a1:95:76:75:c1:bc:dc:3c:35:c9:1a:d1:7c:b6:8e:
33:f1:85:d7:f7:e0:de:09:cc:d9:52:e6:4c:41:d6:dc:d7:27:
6f:c5:7d:66:e0:6b:a9:bc:83:d0:1d:1f:85:5d:3b:9d:1e:86:
e8:ae:9b:9a:93:a6:c1:30:89:ae:ee:95:38:ee:22:ac:c1:a7:
19:e7:59:52:f2:ec:7c:eb:d3:2f:5b:5c:5a:46:9a:7a:ca:11:
d4:7d:58:43:f3:92:3d:86:15:96:3e:a2:03:af:16:a4:28:ad:
ea:89:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:36 2025 by rpki-client