![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
File: 9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft (raw, json)
Hash identifier: yMSkxCI/83Gv+BCdsSryvMVtub+S+11+1MwoBiHhGpk=
Subject key identifier: A9:0A:C8:67:09:1D:48:06:E9:C5:72:08:D6:16:F8:F8:B6:2E:24:4C
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 0193E3F0FDB79318FEF66B03F544F9973DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
Manifest number: 0936
Signing time: Fri 20 Dec 2024 12:00:41 +0000
Manifest this update: Fri 20 Dec 2024 12:00:41 +0000
Manifest next update: Sat 21 Dec 2024 12:00:41 +0000
Files and hashes: 1: 9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl (hash: 5Yoab0Ba2SG/wQOoE71SAeSQkD9CmzI6AhXd/s5oECI=)
2: sMdzy8LAFreZjyO4_DZjNB7rus4.roa (hash: jaIWA5qELfpwLwgw+ZqEt2FBDx43bmq5JkiHHnmsPsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:f0:fd:b7:93:18:fe:f6:6b:03:f5:44:f9:97:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Dec 20 12:00:41 2024 GMT
Not After : Dec 21 12:00:41 2024 GMT
Subject: CN=a90ac867091d4806e9c57208d616f8f8b62e244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:92:5a:4c:9b:ee:0c:0c:36:51:b2:a3:95:
f3:bb:ad:3f:c9:aa:6a:74:c7:ab:5a:73:d8:46:0a:
83:93:60:35:1d:09:92:de:e2:79:d0:b2:e9:fb:13:
b7:40:82:4e:7d:4c:9c:d2:75:5a:ae:5a:71:de:d5:
35:05:24:f7:83:32:be:7e:c1:fa:2b:24:86:85:f2:
8c:fd:36:25:30:51:cd:59:7e:54:34:0d:e8:eb:d8:
cd:19:4b:ba:51:5c:74:bd:7d:39:ea:a1:27:74:f1:
6e:7b:3b:d7:6c:b6:e7:97:7a:c4:db:89:dc:24:37:
88:1b:1e:52:91:f1:89:c5:bd:02:05:3a:41:40:bc:
b8:ca:1e:25:23:d4:13:97:5e:ed:fd:47:f3:85:b8:
4c:06:45:40:04:9a:4e:75:18:57:b5:21:62:00:36:
9c:f8:98:cb:4d:bc:bf:39:8b:5d:b7:07:82:bc:18:
8c:93:8d:ec:34:b4:75:10:00:73:cc:e2:e3:e1:10:
52:f9:89:08:10:a5:f0:14:b6:82:b7:8e:cc:6e:22:
1d:58:61:4a:0c:c0:3b:4c:d2:bd:78:b2:38:7b:ce:
ea:54:02:d7:e9:76:c8:5f:62:5a:12:50:b9:31:e7:
a8:c9:7e:fa:58:74:d1:26:26:eb:43:0a:8c:f8:50:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:C8:67:09:1D:48:06:E9:C5:72:08:D6:16:F8:F8:B6:2E:24:4C
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:61:3f:a7:74:66:da:65:5d:c5:3e:3c:ef:37:6d:c0:c6:
94:f3:70:ca:10:4a:8a:5f:d7:9a:09:47:40:10:c8:c3:b7:f5:
25:7f:fb:a4:83:88:13:7b:94:4c:11:fd:95:f9:0b:49:28:3a:
42:2f:27:70:54:59:c0:c3:40:3b:7f:35:5d:a4:ed:62:07:65:
fe:7f:af:a1:56:74:39:d6:a6:2e:e0:ac:10:bb:85:5d:6d:fc:
da:a3:f4:c4:24:8f:97:82:05:a2:0c:92:7f:fd:54:bd:20:c5:
10:48:39:76:51:b5:3a:bd:e4:31:a4:2a:fd:a9:2f:10:05:9b:
da:ff:c8:6f:cd:3b:ff:5e:e8:59:c5:c2:c1:64:af:e7:e8:a6:
fe:d7:a8:d2:55:e2:65:5c:ca:a5:69:da:d8:c9:6c:8a:33:72:
9d:8f:66:f7:83:5f:3a:70:ee:17:96:e3:47:9d:c4:83:86:6a:
14:35:0d:d4:1e:41:ef:d0:12:c0:39:b1:0a:3a:a5:3a:47:99:
c1:bd:8f:2c:54:53:50:0b:0d:82:95:fc:a3:c8:7c:f5:53:33:
41:1a:16:3f:9d:e9:16:93:89:da:72:cb:22:49:01:25:d3:8e:
17:5a:49:aa:0c:46:39:76:58:fb:63:5a:0a:d3:5a:2f:0c:78:
f3:0a:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:50 2025 by rpki-client