![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.mft
File: 7RjG7myCBFPD8lm74qfdY8mAirk.mft (raw, json)
Hash identifier: VW3R2CHsZSm4DkeAUNbqWAgdt9i4EIb1sCDqY8CLqR0=
Subject key identifier: 0B:2A:21:8E:6A:D9:7F:E7:C6:2A:58:BD:8F:C2:FA:A8:0D:69:92:BF
Authority key identifier: ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9
Certificate issuer: /CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
Certificate serial: 018B6EA632B9D03D9A6C85BDB645482F34DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.mft
Manifest number: 08AB
Signing time: Fri 27 Oct 2023 01:01:07 +0000
Manifest this update: Fri 27 Oct 2023 01:01:07 +0000
Manifest next update: Sat 28 Oct 2023 01:01:07 +0000
Files and hashes: 1: 7RjG7myCBFPD8lm74qfdY8mAirk.crl (hash: YqSgoLQcR9ymkyBr1WrBbGnyLoxE/BCAYmvF0zjxzcY=)
2: BGdKSMbIqValL3x-PJ5om5rkFLI.roa (hash: RzH/7CJl+yy6j0JG7wdWHmZH/sP6Lxm5RZBTsWo41rA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:a6:32:b9:d0:3d:9a:6c:85:bd:b6:45:48:2f:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed18c6ee6c820453c3f259bbe2a7dd63c9808ab9
Validity
Not Before: Oct 27 01:01:07 2023 GMT
Not After : Oct 28 01:01:07 2023 GMT
Subject: CN=0b2a218e6ad97fe7c62a58bd8fc2faa80d6992bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:0e:fd:58:5b:c0:bd:08:3c:dd:d8:fe:9b:
29:36:84:0e:44:4b:6a:1f:02:d5:a1:a4:2e:de:c9:
ff:55:12:83:78:47:ce:77:05:50:0e:51:80:fb:2f:
3f:29:13:09:0d:8d:7c:cd:db:95:2e:48:07:1e:03:
26:41:6e:ca:45:99:7c:43:71:22:ed:e8:0b:56:f1:
ea:d0:34:5e:c5:5d:04:b5:7b:63:67:9e:0e:b8:84:
10:c6:07:a2:46:2a:a8:ea:8e:9b:36:4b:d7:ba:a4:
95:08:d6:a0:06:22:64:45:75:32:42:5b:11:ed:79:
43:4a:9d:6e:32:9e:43:fe:81:f7:51:c6:37:94:38:
0c:72:d1:a2:31:20:92:8e:30:12:5c:81:fd:9f:3d:
27:cd:77:34:07:8a:46:b3:ce:24:c3:9a:76:8c:71:
66:bd:59:c4:c5:14:89:8f:13:80:bf:04:ff:13:5e:
27:02:00:78:99:64:e6:43:65:43:ba:b2:d7:73:89:
be:3a:f5:33:84:c3:c3:1d:e8:30:77:d2:7e:16:e7:
87:bb:d3:cd:b3:87:85:45:a9:c4:cb:6c:12:fa:82:
a1:70:2a:62:65:2d:b3:47:3c:67:38:ad:72:d7:28:
e3:be:50:fd:83:a8:96:87:cd:d1:61:29:fe:48:a8:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:21:8E:6A:D9:7F:E7:C6:2A:58:BD:8F:C2:FA:A8:0D:69:92:BF
X509v3 Authority Key Identifier:
keyid:ED:18:C6:EE:6C:82:04:53:C3:F2:59:BB:E2:A7:DD:63:C9:80:8A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RjG7myCBFPD8lm74qfdY8mAirk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/bb2feb-7341-4181-b019-c5c3e6e02cea/1/7RjG7myCBFPD8lm74qfdY8mAirk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:49:12:aa:fb:32:8a:02:9a:fb:95:45:ea:d8:13:c7:74:01:
37:33:99:d0:e1:1e:a5:6c:6e:24:b5:10:7d:df:bf:b9:61:6c:
e4:62:1b:fe:b9:e8:a3:2c:ea:1b:b9:8c:02:d2:ef:90:a0:fd:
38:c2:e4:a8:de:e2:42:23:63:79:37:d0:eb:c7:1c:14:03:88:
67:3f:c0:c4:7f:25:13:59:83:1f:75:e1:6c:22:a1:9d:28:5b:
1a:63:f4:b9:e6:b6:ac:f4:39:81:75:b0:19:71:5d:75:bd:d5:
e6:b8:f6:86:85:b3:f6:10:49:f9:e0:e3:e9:c8:a2:1d:05:b7:
96:30:52:36:32:20:1c:60:86:89:08:82:ef:82:e7:b3:d5:29:
46:65:a3:92:14:59:e9:4c:f6:11:9e:d5:92:47:d1:a3:f5:1d:
3b:c3:db:a6:a7:13:f7:47:9d:7b:73:1f:74:41:ea:b8:a0:40:
3b:86:a7:c8:7e:08:cd:67:84:c2:19:24:fd:22:26:4d:87:73:
34:6f:b8:36:cb:d9:63:c6:db:dc:32:89:56:02:a1:79:90:e2:
f3:0f:b1:1d:fa:6e:2f:2f:f3:cc:5d:51:44:1b:65:d6:27:0b:
c4:62:1d:33:cc:9b:7e:67:fc:62:1c:81:f6:6c:1b:66:96:65:
27:0f:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:55 2025 by rpki-client