![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.mft
File: jofpoijx4kzdB-pEpQMQTUGib9I.mft (raw, json)
Hash identifier: iKvEd5FPUtgkO/kGz59D39YGa/yt23YEPMfYT5jnBjY=
Subject key identifier: F0:2B:10:D2:B4:AF:13:CC:7A:5A:C3:F2:4A:86:51:72:4C:60:9D:21
Authority key identifier: 8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2
Certificate issuer: /CN=8e87e9a228f1e24cdd07ea44a503104d41a26fd2
Certificate serial: 01875578E88AED91ECE3E8D09A399FCAD27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jofpoijx4kzdB-pEpQMQTUGib9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.mft
Manifest number: 0362
Signing time: Thu 06 Apr 2023 07:29:59 +0000
Manifest this update: Thu 06 Apr 2023 07:29:59 +0000
Manifest next update: Fri 07 Apr 2023 07:29:59 +0000
Files and hashes: 1: 3XD7pb_zsdOXHmRc9rwqnxym_Cg.roa (hash: XLdomQsBHlyK8Ui5be1uYQAz6WXTqW5VMfL7OOydwJY=)
2: jofpoijx4kzdB-pEpQMQTUGib9I.crl (hash: LtNzCzmpwN/JSXwlgOuF+J+iO57gVpYQe99V8485WG0=)
3: pX3JydfR4Zsi3vInonfF5joVdUA.roa (hash: a1XkQqlu7NA6uNfKmDMk9cKEdFaNo8jjVjNTqAqYhIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:78:e8:8a:ed:91:ec:e3:e8:d0:9a:39:9f:ca:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e87e9a228f1e24cdd07ea44a503104d41a26fd2
Validity
Not Before: Apr 6 07:29:59 2023 GMT
Not After : Apr 7 07:29:59 2023 GMT
Subject: CN=f02b10d2b4af13cc7a5ac3f24a8651724c609d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:af:ff:d5:cb:9f:ae:a6:d8:e7:7c:9e:6b:
c7:c1:fd:bc:31:0a:24:f8:8b:bb:d0:c5:d8:59:82:
d2:06:3c:98:ba:70:75:d1:72:64:7c:92:fd:20:d9:
df:7c:a3:11:79:81:78:6c:f7:0f:d1:bb:15:f8:90:
c2:dd:30:b9:bd:7a:48:40:f0:a8:03:15:96:cc:84:
1b:01:01:5d:65:22:da:f7:74:16:29:13:20:bf:ad:
fa:fd:04:c3:ae:5d:b2:9b:54:53:8b:ab:c8:82:27:
f9:58:bd:62:08:55:76:da:ee:44:6a:91:cc:4a:70:
e3:11:c3:2d:13:3b:3a:b9:a4:a7:db:c2:d3:75:24:
32:d7:ce:fc:e9:a9:e0:d3:18:0f:03:4d:45:5d:f9:
ed:53:65:92:89:fe:5a:56:f1:28:4a:55:4f:ef:f0:
27:18:e7:13:90:45:f5:da:ff:73:a5:02:f9:61:17:
ba:2f:40:1d:50:d5:55:f9:17:20:a4:a6:9d:09:41:
a3:39:99:df:63:ac:fe:cb:38:a6:9b:74:a3:5a:92:
67:61:03:14:eb:dd:07:1e:80:d6:e7:38:ab:e4:66:
e9:e5:60:9f:e2:a4:95:0a:91:b3:1c:ca:ba:5f:0b:
97:0a:7b:4f:ad:aa:5c:44:ed:ad:fd:7b:43:43:78:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2B:10:D2:B4:AF:13:CC:7A:5A:C3:F2:4A:86:51:72:4C:60:9D:21
X509v3 Authority Key Identifier:
keyid:8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jofpoijx4kzdB-pEpQMQTUGib9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:44:43:42:9b:fd:27:32:16:3d:88:e1:c0:fa:30:8c:9c:be:
ba:35:d6:7b:44:87:5b:53:6b:b7:93:c7:b8:7d:56:40:b0:0b:
58:9c:b2:e2:9d:1b:f7:bf:1d:61:d1:49:9c:d2:8c:bb:79:27:
99:5a:79:a4:5a:ce:29:33:5e:81:02:f6:0f:fa:18:46:1b:52:
ec:61:17:e7:cb:78:87:c7:42:50:5f:f9:64:f8:79:5b:ba:27:
d0:8c:ed:ec:89:29:ad:cb:9f:72:9e:67:94:8d:9e:ba:ef:a8:
11:72:63:70:51:15:ab:c3:3b:c2:e8:70:82:b3:dc:b7:58:1b:
04:d7:8d:88:f9:7b:88:19:3c:98:46:bf:14:f2:08:00:c0:0c:
8d:aa:27:4b:61:09:7e:5d:53:cf:41:07:0a:f6:40:bd:20:93:
7b:e6:4c:65:10:37:54:ef:18:79:88:7b:b7:fc:b0:45:72:94:
c3:24:19:70:26:0b:77:3c:e1:c1:54:9c:d7:91:7f:3c:a2:81:
00:d7:f3:65:c9:4b:d4:ee:1e:95:0a:5f:88:8a:52:0c:b9:71:
79:52:35:79:f7:38:11:e5:47:9e:a5:5a:71:07:6b:83:eb:1a:
91:cd:e3:d0:81:60:b3:05:69:e0:16:c0:15:10:9f:e7:de:52:
fa:38:a3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:42 2025 by rpki-client