![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.mft
File: UFahhvQfRv0U2gBAzAeH52qauEg.mft (raw, json)
Hash identifier: /Sk4HaOdbOGIuPTsE+h6Sa+fikZ/J8zTOmmLfsEnJmc=
Subject key identifier: 17:07:ED:DA:75:E2:2F:14:EB:9A:2C:D2:0A:CA:6D:6D:87:85:B1:A7
Authority key identifier: 50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
Certificate issuer: /CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Certificate serial: 018C6C0FA5142560C159198737A916051CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.mft
Manifest number: 08A4
Signing time: Fri 15 Dec 2023 06:00:13 +0000
Manifest this update: Fri 15 Dec 2023 06:00:13 +0000
Manifest next update: Sat 16 Dec 2023 06:00:13 +0000
Files and hashes: 1: UFahhvQfRv0U2gBAzAeH52qauEg.crl (hash: TE1aLKDABfk5cyDQ88KjYuYgRVtLp5zlq8LIPKrMCfg=)
2: vwXIdZ-NDiWJLiLhcw9qE5-itvo.roa (hash: feLE2kV9yokHW9+SsAgGoT5TIuiV0gtTh6/IT0FG/2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:0f:a5:14:25:60:c1:59:19:87:37:a9:16:05:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056a186f41f46fd14da0040cc0787e76a9ab848
Validity
Not Before: Dec 15 06:00:13 2023 GMT
Not After : Dec 16 06:00:13 2023 GMT
Subject: CN=1707edda75e22f14eb9a2cd20aca6d6d8785b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:bc:5f:de:5e:a9:2f:b7:c6:f8:8e:19:00:
a3:37:f6:69:e2:c2:6b:eb:25:fe:d8:27:45:f6:96:
95:fe:e2:85:c2:97:5a:46:52:a2:ba:be:3f:ed:d2:
48:ff:d9:7e:d0:74:87:8d:eb:9f:fc:28:43:5b:7f:
b7:e3:1f:03:fb:ab:e0:73:f8:b1:4a:fc:bf:ab:64:
ee:b8:03:44:ff:53:3a:9e:0f:9f:09:1c:fb:c7:68:
3a:df:01:ca:eb:7d:ec:80:47:6a:75:49:19:f7:bf:
3f:b5:73:ac:8e:1b:b8:3f:04:d4:b2:81:35:9c:42:
68:cc:be:a4:71:29:a7:5f:cc:87:eb:f2:31:e3:dd:
ef:81:b0:d1:84:b3:49:c0:c7:21:27:42:7c:83:26:
a2:3e:48:b5:92:a5:ed:b5:b7:f7:5c:8a:50:5f:4a:
a0:43:5b:4b:bc:aa:69:06:d8:6f:d7:2b:06:5c:fc:
b3:07:b5:84:10:35:be:b6:e5:a6:cf:2c:24:22:14:
86:7a:50:1b:b2:a8:f7:c3:c0:d4:7c:5d:65:04:25:
b1:d7:03:b6:7e:91:14:8d:de:25:50:5d:cc:bc:05:
3a:2f:f0:ee:37:9e:14:5a:1c:9b:9b:08:6d:28:52:
77:ba:19:2b:44:0c:85:5c:ae:2f:02:02:21:9a:7f:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:ED:DA:75:E2:2F:14:EB:9A:2C:D2:0A:CA:6D:6D:87:85:B1:A7
X509v3 Authority Key Identifier:
keyid:50:56:A1:86:F4:1F:46:FD:14:DA:00:40:CC:07:87:E7:6A:9A:B8:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFahhvQfRv0U2gBAzAeH52qauEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fd9382-17d6-4940-9d7f-c7d8a3d9c88a/1/UFahhvQfRv0U2gBAzAeH52qauEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:44:d0:e1:b9:3e:9a:be:58:64:72:50:4e:84:e4:83:35:6b:
bb:88:57:74:ec:1e:8e:3c:bd:a8:e8:eb:00:24:19:ed:93:be:
7f:94:71:0d:93:dc:06:1b:21:0f:a9:27:67:52:e2:a6:25:5c:
3a:4f:e3:b2:97:53:4f:f3:c5:94:28:1a:5f:aa:f7:e8:7a:df:
65:3d:1e:d2:cf:cd:29:6d:a3:2a:69:72:e8:cb:02:e4:5a:ac:
48:df:6a:43:35:4d:8a:47:0a:27:74:a2:ef:c8:3a:de:ba:f1:
f5:54:ec:44:bf:d7:de:3a:ad:3a:55:81:46:9c:91:d4:9f:64:
82:56:0b:8b:61:6d:73:38:e4:13:0b:69:61:bd:55:af:db:d0:
9b:53:38:f0:b2:6b:65:b1:1b:95:c2:79:36:44:ca:d3:e6:b1:
69:33:44:6b:9d:59:a5:de:8d:a9:42:e3:70:db:74:44:99:2c:
3e:ea:c6:ac:56:a5:58:ed:90:3e:20:5a:d5:1a:fd:a4:93:9b:
f2:c2:43:a9:b2:42:98:08:6c:0e:21:a9:4f:87:15:12:43:fc:
3d:33:e2:c2:9c:2f:5b:13:bb:e2:cf:94:1f:e5:31:ca:09:bb:
4d:e0:68:b2:d4:8d:c4:7c:2a:91:24:ce:7b:9e:b0:8e:a3:38:
d2:f7:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:38 2025 by rpki-client