![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
File: r-yzens6yw5U7eBjv1fXLMWdlN8.mft (raw, json)
Hash identifier: Y7XxyEc/StP+FfiTfT9XqLn2HZMEIN+vfI888czXr0A=
Subject key identifier: 91:C3:27:FE:7E:54:49:6C:E7:61:D1:83:B6:34:CF:6F:B2:10:9B:34
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Certificate issuer: /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial: 01894A33721B2FB1972AA4083CB766C25012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
Manifest number: 0944
Signing time: Wed 12 Jul 2023 13:03:52 +0000
Manifest this update: Wed 12 Jul 2023 13:03:52 +0000
Manifest next update: Thu 13 Jul 2023 13:03:52 +0000
Files and hashes: 1: VsyvCMRZJt9Gergcl8ycZDwatc8.roa (hash: cm4Z0hML2FpVC8VHJuGq0T0pnrVi5hMBiPEU4iAHb4Q=)
2: majt_X6yjx1v-iTmhGFHsGumBVM.roa (hash: Z52exw3EQudoTlGo/au/rDAFSyNUY8GubUo9XkSJ1S0=)
3: r-yzens6yw5U7eBjv1fXLMWdlN8.crl (hash: hcfUXY70X8Mx0AI0DJN8WaFFHBjaICBCzoaGIgBiIow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:33:72:1b:2f:b1:97:2a:a4:08:3c:b7:66:c2:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Validity
Not Before: Jul 12 13:03:52 2023 GMT
Not After : Jul 13 13:03:52 2023 GMT
Subject: CN=91c327fe7e54496ce761d183b634cf6fb2109b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:52:fc:56:4a:03:0c:31:58:5a:d6:1a:2d:
bf:db:7e:84:5a:56:59:26:7e:1e:dc:fc:50:84:40:
d6:e9:fe:bc:49:88:7d:de:d3:f1:9b:fc:7b:29:4b:
ef:b9:55:2c:20:e7:06:55:9d:64:37:cf:4e:b8:2e:
c6:bf:7f:6b:90:59:92:4c:7a:b8:51:32:7f:8f:f7:
1c:59:ef:15:61:e7:64:9d:ff:36:9d:7d:b4:98:2e:
6c:fa:3d:9f:20:13:54:8f:d9:8f:1c:2c:c3:5f:1c:
27:6b:a4:e9:a8:07:f9:7d:66:f6:05:e0:1a:f4:92:
a8:36:44:43:2a:59:0f:26:c9:0e:14:50:8c:d6:7b:
18:4f:60:89:cf:34:95:ea:1a:79:78:05:bf:d3:79:
46:d0:bf:13:fa:24:00:a9:08:67:1a:a2:9c:8f:33:
cf:01:19:26:46:fa:ab:e4:bf:bf:50:db:39:7f:58:
ee:f2:c9:4e:6e:b3:7f:f7:1c:94:b1:e8:93:6e:8a:
03:1c:e1:99:b9:f7:cb:36:a9:23:c8:1d:19:c6:56:
5c:61:1b:2a:65:72:98:d2:e1:1e:0d:1a:fe:4c:81:
11:c4:aa:83:fa:79:ff:a1:0f:86:54:5d:9a:ce:33:
74:79:bb:45:99:0d:a6:06:96:c0:e6:40:45:91:11:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:27:FE:7E:54:49:6C:E7:61:D1:83:B6:34:CF:6F:B2:10:9B:34
X509v3 Authority Key Identifier:
keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:ae:87:e6:11:44:7a:21:0c:96:7b:b0:4d:36:e4:96:00:
53:d6:c6:1a:f7:55:11:61:6f:10:88:1e:b6:0e:91:fa:fe:e9:
21:da:02:1b:6f:a5:f2:7f:c4:3c:79:63:77:81:fc:d2:70:86:
d9:3a:4d:f8:00:8e:67:29:54:ba:ae:d6:f2:67:a6:e2:ff:3e:
e3:94:96:7a:8d:9f:f4:95:09:79:d0:ce:0d:53:6b:36:f2:df:
83:12:75:c5:27:70:33:5e:5d:74:90:f5:83:ef:b0:65:d2:3e:
20:64:59:8c:ae:d0:95:ff:14:ca:52:4a:05:82:62:7d:dc:ab:
9c:94:af:f2:3a:9c:8f:cc:b5:47:6e:42:1a:bb:d8:d2:80:26:
d7:34:cc:eb:73:63:c4:58:60:9f:bb:25:76:cc:bc:1e:6f:f7:
dc:25:9e:4c:4c:be:de:7f:7f:7b:d3:88:23:56:ec:52:31:e8:
12:e4:9b:6c:79:c4:f8:69:b7:fd:a1:f7:d4:e1:e6:f3:85:f9:
ea:66:b2:cf:dd:e6:f2:b6:e7:55:40:cd:dc:85:88:6c:df:55:
b2:5b:8e:ad:27:aa:45:d5:b8:0a:20:09:99:1d:84:de:c3:c2:
6b:41:fe:7b:9b:6b:d6:11:ff:8d:df:a1:00:5c:1b:96:99:02:
05:47:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:06 2025 by rpki-client