![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.mft
File: fED4xC07TCEUFd4Urhqxe3evM0s.mft (raw, json)
Hash identifier: rcmLYj+lj73aUrAGmeKUCwuZOxMWJjW2ogIEDR+qm/c=
Subject key identifier: B0:22:CD:09:01:40:17:39:05:AE:94:FA:F5:9E:8A:67:1D:E9:39:AC
Authority key identifier: 7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
Certificate issuer: /CN=7c40f8c42d3b4c211415de14ae1ab17b77af334b
Certificate serial: 018C5852C6982B5A2A34636A13C74C7ADC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fED4xC07TCEUFd4Urhqxe3evM0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.mft
Manifest number: 08A6
Signing time: Mon 11 Dec 2023 10:01:08 +0000
Manifest this update: Mon 11 Dec 2023 10:01:08 +0000
Manifest next update: Tue 12 Dec 2023 10:01:08 +0000
Files and hashes: 1: fED4xC07TCEUFd4Urhqxe3evM0s.crl (hash: gADbqKP4la0+8N1VuDXfPRJkk1MdivQHpgPfO3w2DXU=)
2: t8-VvaX9FL18FQJ3KUykGvwA1dY.roa (hash: 3UPvZ78U9YIAzvhM6VfkxzTsAe/ylJJ1RFkTDuGHp00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:52:c6:98:2b:5a:2a:34:63:6a:13:c7:4c:7a:dc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40f8c42d3b4c211415de14ae1ab17b77af334b
Validity
Not Before: Dec 11 10:01:08 2023 GMT
Not After : Dec 12 10:01:08 2023 GMT
Subject: CN=b022cd090140173905ae94faf59e8a671de939ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:34:d3:44:fd:9a:6e:31:f0:e2:2a:9b:b4:
99:d4:81:2a:29:ac:af:fb:0d:f8:da:8e:13:7f:5c:
0d:bc:fe:ec:11:b6:92:c3:3e:33:0b:a8:92:26:3f:
89:eb:1f:4f:f5:e5:46:f6:9f:a9:13:4a:31:ff:8f:
e4:79:87:23:d2:ed:85:87:4f:c9:e8:ea:25:52:13:
fb:3e:89:5f:8b:28:71:27:49:82:16:73:c8:37:3f:
ea:57:e6:1e:be:cf:22:b1:a4:90:aa:48:2d:49:1f:
3f:79:e3:6b:7f:f6:ac:a5:db:0c:d5:bb:4e:af:ff:
17:16:4f:ab:6d:24:33:22:da:e1:32:7d:3e:84:54:
f2:6b:19:55:a3:13:5d:fb:b5:c4:fc:83:05:e2:f7:
dd:6b:51:23:61:6f:51:ab:a5:92:a2:d9:8e:18:0d:
da:a8:5a:0a:90:2a:0a:95:23:d6:73:5e:4f:9a:db:
29:ec:0e:7b:11:9e:99:d8:70:d1:de:7f:68:e0:5c:
20:9b:62:da:e8:16:77:33:10:29:c1:da:02:69:30:
34:53:a1:32:96:09:db:be:c2:36:dd:f7:fd:64:86:
95:22:8e:01:5a:2e:9f:ba:a6:c4:3f:74:0c:64:6d:
25:fb:f4:ee:b1:07:b8:cb:c3:88:8d:8f:dd:c1:6e:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:CD:09:01:40:17:39:05:AE:94:FA:F5:9E:8A:67:1D:E9:39:AC
X509v3 Authority Key Identifier:
keyid:7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fED4xC07TCEUFd4Urhqxe3evM0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:64:54:c6:52:05:17:b5:0d:0e:82:4b:29:4d:2c:be:d8:d7:
c3:40:0a:8d:0a:63:af:e5:7b:cc:1a:3f:dd:39:18:c5:ea:67:
ed:15:e4:de:3f:58:85:57:e3:a8:6f:2e:0e:4c:58:fa:bf:3c:
d7:fe:63:d0:54:3c:96:1c:d5:15:86:95:ca:b0:a5:29:4f:4c:
ef:8c:7d:49:d8:ee:ac:8f:fe:52:db:bb:51:5b:18:7b:d2:a4:
d7:99:58:de:ae:f4:ba:0b:47:f7:fe:31:fb:93:db:ef:7a:15:
47:26:1f:01:3f:b0:34:79:47:05:0d:aa:c5:2f:0c:89:56:dc:
ba:af:b2:f1:68:78:d0:0f:8d:f2:a9:46:23:5e:05:0c:1d:f5:
e1:6c:00:3e:ce:23:84:01:43:d8:35:3e:cf:37:c0:52:c1:18:
d9:b6:9e:4d:88:82:1c:f5:6e:63:87:64:5a:b8:fd:59:12:b4:
7c:86:b5:90:41:f4:f7:e0:60:a9:45:2c:25:9a:48:58:6c:94:
49:0c:51:6d:3f:91:de:ee:4a:1a:e9:63:f1:1b:4e:84:b3:a6:
ea:c8:ae:68:55:6d:ff:53:68:83:bc:b8:49:a3:f2:63:42:6e:
9a:68:be:b8:7f:ab:c3:94:4d:78:c4:57:f9:ab:2a:7f:87:01:
18:17:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:33 2025 by rpki-client