![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/430cd5-3a5d-4085-a99d-f73d2f90a972/1/kPv1RnIOmTXwVpXwRwwHs76iYOQ.mft
File: kPv1RnIOmTXwVpXwRwwHs76iYOQ.mft (raw, json)
Hash identifier: QGhsLmy4//HIMFxcVZrkdqUCVl41Zd9WcKLNFCqHVnU=
Subject key identifier: 73:8F:F4:76:85:28:F6:CF:DA:CF:EB:06:1B:16:39:E9:BD:AE:68:0B
Authority key identifier: 90:FB:F5:46:72:0E:99:35:F0:56:95:F0:47:0C:07:B3:BE:A2:60:E4
Certificate issuer: /CN=90fbf546720e9935f05695f0470c07b3bea260e4
Certificate serial: 01894EFE3CDAAF1AE7A353F47E9AA76EB7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPv1RnIOmTXwVpXwRwwHs76iYOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/430cd5-3a5d-4085-a99d-f73d2f90a972/1/kPv1RnIOmTXwVpXwRwwHs76iYOQ.mft
Manifest number: 0E31
Signing time: Thu 13 Jul 2023 11:23:51 +0000
Manifest this update: Thu 13 Jul 2023 11:23:51 +0000
Manifest next update: Fri 14 Jul 2023 11:23:51 +0000
Files and hashes: 1: kPv1RnIOmTXwVpXwRwwHs76iYOQ.crl (hash: OOJBNCj3PGpVa5lRSPPJ0QH6kl9XkhsuZ7STDBWzgtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:fe:3c:da:af:1a:e7:a3:53:f4:7e:9a:a7:6e:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fbf546720e9935f05695f0470c07b3bea260e4
Validity
Not Before: Jul 13 11:23:51 2023 GMT
Not After : Jul 14 11:23:51 2023 GMT
Subject: CN=738ff4768528f6cfdacfeb061b1639e9bdae680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:8d:90:e6:de:97:e7:c1:e3:49:02:71:6c:
0b:29:f8:71:f0:90:82:4a:37:76:bc:f6:ac:46:9b:
36:30:9f:cc:9b:c0:1e:28:fe:67:c2:3c:08:b5:43:
fc:2e:c7:6a:7a:b8:f5:a3:a0:7b:f0:91:aa:f8:14:
5b:39:0b:40:11:a1:e4:c2:fe:3a:0a:bd:0e:01:34:
87:6f:95:24:f9:e7:bd:32:5a:e7:fc:85:85:74:ae:
26:7b:20:e6:b7:4d:d0:80:a8:74:55:ba:78:92:8d:
a7:dd:05:7c:9b:9f:88:5a:44:4f:ee:1b:b0:e6:47:
11:5f:9c:36:2a:53:3e:d2:bb:62:65:e0:b3:42:9d:
8a:a7:d6:1b:f0:90:e7:90:a3:83:c0:43:2d:d4:e4:
56:4b:c2:e4:29:6a:6b:33:cc:dd:6f:e7:66:b6:08:
12:88:a3:d0:50:e4:b1:fd:fb:bc:c0:f3:77:1c:86:
0f:55:a1:04:3d:07:7e:6b:17:de:b3:2f:e8:dd:a9:
4d:26:60:01:48:d3:60:e9:40:1a:4c:11:85:97:d8:
2c:b9:3f:f6:d1:85:1d:0e:3c:d8:45:6c:0d:e8:ca:
7e:58:bd:75:e0:16:6b:97:65:a1:bc:1d:e5:5c:48:
16:23:ec:32:0a:ef:fc:cd:7b:42:3b:35:c4:35:70:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:F4:76:85:28:F6:CF:DA:CF:EB:06:1B:16:39:E9:BD:AE:68:0B
X509v3 Authority Key Identifier:
keyid:90:FB:F5:46:72:0E:99:35:F0:56:95:F0:47:0C:07:B3:BE:A2:60:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPv1RnIOmTXwVpXwRwwHs76iYOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/430cd5-3a5d-4085-a99d-f73d2f90a972/1/kPv1RnIOmTXwVpXwRwwHs76iYOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/430cd5-3a5d-4085-a99d-f73d2f90a972/1/kPv1RnIOmTXwVpXwRwwHs76iYOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:77:8f:f0:cb:15:f8:20:47:05:3e:56:91:1e:90:99:31:6c:
ef:31:9d:55:f5:d1:c9:ef:ea:d7:97:fc:36:eb:ce:a8:80:c6:
4a:13:e9:56:3d:12:e6:89:34:bd:9e:ef:09:58:29:19:c7:19:
20:78:19:ca:4d:d5:dd:9a:68:d6:d1:fb:33:e7:d2:ae:8e:56:
33:4f:09:c4:f8:c8:d4:e2:36:9f:c7:81:43:87:39:05:fe:74:
3d:f7:a2:20:e3:30:0a:37:44:71:d9:f9:8c:80:61:a0:ce:d5:
26:bf:b5:73:f0:e4:39:44:e3:52:77:6d:f1:be:f6:3e:f7:8b:
14:65:45:37:d8:88:f6:ce:d1:94:a9:70:77:b9:0a:15:69:b2:
3a:bc:71:0c:6f:61:50:75:90:da:48:d8:1b:34:36:d0:5a:2e:
ec:1a:49:c7:42:21:43:57:38:21:ed:45:fd:3b:89:b4:a2:2d:
d8:8d:90:fe:1f:9a:35:d6:85:16:bb:4e:13:bc:07:97:d7:48:
05:cc:e3:69:41:b9:d0:83:c1:15:83:00:77:47:c1:33:ba:c7:
40:dc:29:64:fe:43:8d:e0:53:9c:01:6a:93:84:ca:04:b1:fe:
10:c2:c5:53:a2:4d:79:7c:e0:d9:7a:6c:0c:1c:14:20:e3:ed:
67:f9:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:54 2025 by rpki-client