![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft
File: BJfNjthvyDRt2TySBPdrw7kqTP4.mft (raw, json)
Hash identifier: 2pxc3tjc1TslBrM7vSrZpaHAqPikA1+OD6+S8ArlQ1s=
Subject key identifier: 1F:B2:82:DE:9C:B7:06:4C:E9:D4:7D:55:E0:FF:38:C0:C2:A7:D4:2D
Authority key identifier: 04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
Certificate issuer: /CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Certificate serial: 0183FA9F2199B7FD67469C8D6A7A8575AE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft
Manifest number: 0B2C
Signing time: Fri 21 Oct 2022 12:57:56 +0000
Manifest this update: Fri 21 Oct 2022 12:57:56 +0000
Manifest next update: Sat 22 Oct 2022 12:57:56 +0000
Files and hashes: 1: BJfNjthvyDRt2TySBPdrw7kqTP4.crl (hash: RkYW1qQnOBdkp4lFYNYps+o8dy4H3LYNN/R5QZ7Vnxg=)
2: djhHll0hiiYmwSOdxIPEGAl_m98.roa (hash: 6r63URFExpLdSS2qRb3lr44AHeNDyXHHOdb1H9xm0hE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:9f:21:99:b7:fd:67:46:9c:8d:6a:7a:85:75:ae:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Validity
Not Before: Oct 21 12:57:56 2022 GMT
Not After : Oct 22 12:57:56 2022 GMT
Subject: CN=1fb282de9cb7064ce9d47d55e0ff38c0c2a7d42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:95:ba:4c:8f:8f:b6:00:c1:03:20:aa:b7:
44:d8:cf:bb:c5:dd:78:0f:05:43:65:85:24:76:01:
b8:92:f5:20:d6:e6:74:d7:53:61:a5:fd:ef:a0:2a:
d4:f9:af:61:36:26:3d:58:c3:69:78:9f:51:c5:0a:
68:e9:ea:74:83:05:c8:8f:4b:1b:69:55:29:90:17:
28:c9:cb:f9:d9:cb:6c:6f:35:49:83:43:9d:00:8c:
76:07:07:eb:bc:dc:eb:d9:09:cb:87:60:77:c9:19:
72:b9:a1:ec:ba:ca:d1:31:c1:c4:71:d4:85:7f:56:
ae:ae:bd:fb:3f:11:06:c8:3b:eb:b3:1a:75:2b:ce:
72:9f:51:ca:be:f9:94:66:04:b5:27:09:fc:34:aa:
2a:99:be:6f:7a:2a:b6:1d:7a:18:3d:6e:d7:90:6f:
8f:6e:9b:19:32:3f:87:1a:1c:95:a2:c4:98:15:e7:
1d:3d:97:c6:77:02:bd:51:0d:a4:3b:a2:9e:7e:59:
99:94:74:6a:e8:7e:2a:77:ba:38:b3:53:24:d8:1a:
47:4b:f3:4c:85:0c:fa:55:44:bc:80:a4:45:0b:0f:
4f:b1:e2:a4:70:0e:cb:0d:d3:07:b1:7a:2a:ac:d1:
e6:4c:11:09:e2:a4:5b:eb:66:22:3e:1d:49:d2:22:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:82:DE:9C:B7:06:4C:E9:D4:7D:55:E0:FF:38:C0:C2:A7:D4:2D
X509v3 Authority Key Identifier:
keyid:04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c5:2a:23:7b:b4:cd:41:91:af:4e:20:75:e1:b9:8c:58:7b:
5d:83:cc:be:b6:24:b2:54:f1:0f:76:c8:9d:65:f5:5c:c3:ab:
f8:64:15:3a:29:72:33:8c:d9:a4:d4:cb:77:59:bd:f6:76:c8:
79:a4:0b:01:df:d8:35:ce:c3:3e:0c:e4:73:95:c2:23:b6:c8:
b0:26:39:a0:0b:e5:78:c3:ff:e5:18:60:1b:0c:22:18:c4:37:
04:f8:e6:90:1a:f3:21:6e:e7:0f:5a:0f:3b:37:eb:11:58:2e:
43:ac:c3:36:46:91:2c:d9:e9:67:73:ac:7d:6b:ed:7b:c3:4b:
02:49:ca:1c:62:4c:ef:b7:a4:4f:03:80:d9:1d:6b:6b:94:d9:
85:9d:36:1a:3d:38:79:c3:ae:55:89:44:2b:99:c7:eb:cd:54:
d1:47:44:57:c2:45:26:62:1b:c1:6d:17:9e:bb:16:ff:83:24:
95:9c:a3:10:14:de:75:cb:2d:0b:57:1a:1a:a2:72:84:3c:dd:
ac:6a:bc:ad:07:89:85:39:bd:84:32:a1:27:6b:5d:dc:a7:1c:
47:5d:22:dc:ab:7e:94:06:1c:f5:b4:81:93:f5:9c:25:f9:7d:
15:01:e7:9c:80:a6:cc:f8:be:a6:43:fc:93:0e:c5:0e:1f:84:
ad:c1:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:49 2025 by rpki-client