![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/990eea-3035-4681-9448-03c1b81432c7/1/9TNPFdbbqUpvKD3z8_rK_R2ucEA.mft
File: 9TNPFdbbqUpvKD3z8_rK_R2ucEA.mft (raw, json)
Hash identifier: FT4dm81xvIxZlqSfFuPTJ9EWYPC5/YSR9wGs4D7Q2CY=
Subject key identifier: 9B:78:2B:09:D5:A9:96:9A:A5:F5:60:95:FA:C8:3B:19:79:E8:3C:C4
Authority key identifier: F5:33:4F:15:D6:DB:A9:4A:6F:28:3D:F3:F3:FA:CA:FD:1D:AE:70:40
Certificate issuer: /CN=f5334f15d6dba94a6f283df3f3facafd1dae7040
Certificate serial: 01933F5E057F3CA7E18DE322B4DEAE9230AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNPFdbbqUpvKD3z8_rK_R2ucEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/990eea-3035-4681-9448-03c1b81432c7/1/9TNPFdbbqUpvKD3z8_rK_R2ucEA.mft
Manifest number: 1363
Signing time: Mon 18 Nov 2024 13:02:26 +0000
Manifest this update: Mon 18 Nov 2024 13:02:26 +0000
Manifest next update: Tue 19 Nov 2024 13:02:26 +0000
Files and hashes: 1: 9TNPFdbbqUpvKD3z8_rK_R2ucEA.crl (hash: i64yhFQpnMXcH5BfJfsIESF7V17ediGzPbCm838pRsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:5e:05:7f:3c:a7:e1:8d:e3:22:b4:de:ae:92:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5334f15d6dba94a6f283df3f3facafd1dae7040
Validity
Not Before: Nov 18 13:02:26 2024 GMT
Not After : Nov 19 13:02:26 2024 GMT
Subject: CN=9b782b09d5a9969aa5f56095fac83b1979e83cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:d6:0b:06:ac:b8:f0:63:f7:0c:9b:55:f1:
a5:30:c3:56:42:28:dd:55:6c:92:7b:0e:64:9a:09:
e4:dc:f3:26:43:d5:2d:90:7b:44:ac:7d:18:ca:fc:
33:9f:21:11:08:10:c2:38:c1:fb:c7:5e:61:22:42:
64:da:c0:07:e1:ca:c4:32:3e:dc:5e:dc:4d:36:81:
8a:b2:f2:90:ac:b8:0f:08:cb:b2:15:c0:cb:4b:7e:
ec:32:da:10:05:c6:1b:41:a2:63:7b:bd:4a:52:a9:
23:04:c5:ec:75:b6:e6:e6:5b:2f:58:59:aa:ae:92:
d2:e1:5d:c8:66:d8:c9:09:da:2b:d7:92:6e:83:d4:
61:d9:a6:61:46:4e:7c:ae:08:9e:9f:8b:e0:77:5d:
87:a0:79:8f:1a:ad:20:cc:da:6b:fa:89:98:9d:07:
a3:8e:50:77:5b:37:e7:cb:a6:34:76:30:0a:d8:db:
f6:dc:82:99:92:64:07:c5:7c:39:93:e4:a1:3f:8a:
9b:a7:a7:75:77:39:18:94:b4:dd:ed:f5:99:69:64:
17:41:17:06:fa:fd:d9:49:93:64:5b:a7:e7:5f:56:
d3:a9:60:fd:d5:f2:d6:7f:a8:c2:5b:ec:9e:26:fc:
91:f1:60:9e:a9:dd:e0:e8:42:3e:81:9e:ee:38:be:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:2B:09:D5:A9:96:9A:A5:F5:60:95:FA:C8:3B:19:79:E8:3C:C4
X509v3 Authority Key Identifier:
keyid:F5:33:4F:15:D6:DB:A9:4A:6F:28:3D:F3:F3:FA:CA:FD:1D:AE:70:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNPFdbbqUpvKD3z8_rK_R2ucEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/990eea-3035-4681-9448-03c1b81432c7/1/9TNPFdbbqUpvKD3z8_rK_R2ucEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/990eea-3035-4681-9448-03c1b81432c7/1/9TNPFdbbqUpvKD3z8_rK_R2ucEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:1c:40:dc:80:7c:c8:21:c2:d8:12:fd:ef:cd:44:e0:6c:e9:
79:c2:e3:8b:af:a0:87:01:4e:da:40:8c:c1:b0:ef:79:9e:39:
6e:dc:4a:ee:47:fc:11:27:c2:b5:4d:97:f5:5c:76:50:fe:e9:
43:95:57:f0:50:86:5e:e7:22:29:42:7a:7f:39:d7:03:41:cd:
72:f7:7f:4b:24:04:0d:1e:31:55:8e:7c:37:44:6c:00:90:85:
ee:7e:2b:fd:00:19:b5:97:59:83:6e:e6:51:0f:1f:2c:6f:bb:
fb:d6:33:3f:ff:01:b4:f0:24:50:a3:e4:76:b0:c1:b5:4f:10:
c1:68:90:2e:4b:a3:d5:f3:6f:00:cf:0c:4f:fe:da:26:88:f9:
b1:76:fd:ee:a5:ce:35:d5:e9:12:18:99:f9:2f:f3:e1:9a:64:
8c:0e:5b:46:77:76:a1:f1:12:2f:d2:95:79:a8:bc:29:8c:7a:
f3:ac:94:d1:3c:d7:0a:42:f2:e0:de:81:7c:d7:af:e9:18:e4:
d6:b4:3a:d9:2b:27:0c:c6:2c:9c:53:f8:29:8b:2f:c8:16:99:
0e:c6:a7:21:a8:29:9d:c4:e2:4e:28:33:ed:be:6f:bd:04:ca:
6d:80:cc:f2:76:7f:8c:4c:32:b3:82:6d:19:23:f0:d1:39:f4:
18:e7:74:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZM/XgV/PKfhjeMitN6ukjCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM0ZjE1ZDZkYmE5NGE2ZjI4M2RmM2YzZmFjYWZkMWRh
ZTcwNDAwHhcNMjQxMTE4MTMwMjI2WhcNMjQxMTE5MTMwMjI2WjAzMTEwLwYDVQQD
Eyg5Yjc4MmIwOWQ1YTk5NjlhYTVmNTYwOTVmYWM4M2IxOTc5ZTgzY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsErWCwasuPBj9wybVfGlMMNWQijd
VWySew5kmgnk3PMmQ9UtkHtErH0YyvwznyERCBDCOMH7x15hIkJk2sAH4crEMj7c
XtxNNoGKsvKQrLgPCMuyFcDLS37sMtoQBcYbQaJje71KUqkjBMXsdbbm5lsvWFmq
rpLS4V3IZtjJCdor15Jug9Rh2aZhRk58rgien4vgd12HoHmPGq0gzNpr+omYnQej
jlB3Wzfny6Y0djAK2Nv23IKZkmQHxXw5k+ShP4qbp6d1dzkYlLTd7fWZaWQXQRcG
+v3ZSZNkW6fnX1bTqWD91fLWf6jCW+yeJvyR8WCeqd3g6EI+gZ7uOL4NFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt4KwnVqZaapfVglfrIOxl56DzEMB8GA1UdIwQY
MBaAFPUzTxXW26lKbyg98/P6yv0drnBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROUEZkYmJxVXB2S0QzejhfcktfUjJ1Y0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85OTBlZWEtMzAzNS00NjgxLTk0NDgt
MDNjMWI4MTQzMmM3LzEvOVROUEZkYmJxVXB2S0QzejhfcktfUjJ1Y0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85OTBlZWEtMzAzNS00NjgxLTk0NDgtMDNjMWI4MTQzMmM3
LzEvOVROUEZkYmJxVXB2S0QzejhfcktfUjJ1Y0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hxA3IB8
yCHC2BL9781E4GzpecLji6+ghwFO2kCMwbDveZ45btxK7kf8ESfCtU2X9Vx2UP7p
Q5VX8FCGXuciKUJ6fznXA0HNcvd/SyQEDR4xVY58N0RsAJCF7n4r/QAZtZdZg27m
UQ8fLG+7+9YzP/8BtPAkUKPkdrDBtU8QwWiQLkuj1fNvAM8MT/7aJoj5sXb97qXO
NdXpEhiZ+S/z4ZpkjA5bRnd2ofESL9KVeai8KYx686yU0TzXCkLy4N6BfNev6Rjk
1rQ62SsnDMYsnFP4KYsvyBaZDsanIagpncTiTigz7b5vvQTKbYDM8nZ/jEwys4Jt
GSPw0Tn0GOd03A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:43 2025 by rpki-client