![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.mft
File: 35jZW0J582JPeLXlOzGAw_AYaTM.mft (raw, json)
Hash identifier: LXBq5C7LI5eDT6aD8z0R7lW4hxvKz0ibIcZcWBOc1LU=
Subject key identifier: 73:AE:5A:3A:01:20:80:85:4E:08:22:5F:D9:6A:72:CE:B1:E8:62:D3
Authority key identifier: DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
Certificate issuer: /CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Certificate serial: 01845103A19A5FF43D5E22A1B605E52D17DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.mft
Manifest number: 0B5D
Signing time: Mon 07 Nov 2022 07:35:03 +0000
Manifest this update: Mon 07 Nov 2022 07:35:03 +0000
Manifest next update: Tue 08 Nov 2022 07:35:03 +0000
Files and hashes: 1: 35jZW0J582JPeLXlOzGAw_AYaTM.crl (hash: E3IC7TmTGW7nNI5BPCgLCn+Ng34+q7deCdcM+p16Jco=)
2: 4v6TYpfRcwrHfR_wV5VRplIzzRA.roa (hash: VpqZlK+W/h0W+5y4si0xG5sPd/NlAkDhmVoIeW8UdNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:03:a1:9a:5f:f4:3d:5e:22:a1:b6:05:e5:2d:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98d95b4279f3624f78b5e53b3180c3f0186933
Validity
Not Before: Nov 7 07:35:03 2022 GMT
Not After : Nov 8 07:35:03 2022 GMT
Subject: CN=73ae5a3a012080854e08225fd96a72ceb1e862d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:32:2e:23:bf:57:44:88:2e:0a:52:87:b4:
4c:3d:ff:59:97:70:c6:94:c6:8f:b3:09:d8:17:78:
cd:0d:39:72:ab:71:81:f7:92:76:7f:04:4e:6f:80:
c3:34:c8:9e:b5:33:6d:83:ad:3c:34:57:b3:30:a4:
21:1f:14:ea:2e:f1:3d:50:09:b3:54:25:83:fa:b1:
6c:1e:db:e0:b5:a1:d9:ef:fd:13:00:27:79:35:f9:
00:5b:c3:70:d5:f9:5c:5d:b9:55:e0:22:69:95:46:
25:b0:ae:e7:72:6f:bf:5a:fa:85:55:ef:f5:2d:90:
7f:60:19:41:72:61:9d:ca:6f:1b:cb:ad:03:36:f2:
82:26:50:ee:1c:bb:84:9f:68:d6:09:b7:d1:f1:8f:
a2:a0:2d:6d:46:46:74:f2:52:db:e9:b0:06:00:84:
84:7b:b4:5d:98:5f:fb:3a:42:ce:b6:43:b5:14:b8:
f0:14:72:6b:fa:c6:67:ab:15:20:47:c7:14:ff:89:
a5:c4:b3:1a:33:29:a2:b5:81:37:f6:a6:67:1a:99:
01:ed:8b:e9:13:11:16:f1:93:b6:2f:ad:18:6c:85:
51:7d:ff:10:6e:94:98:9f:01:6d:0f:05:d3:de:6c:
9f:e6:8d:a9:a1:bf:df:4d:81:f8:5c:77:f1:7c:25:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:5A:3A:01:20:80:85:4E:08:22:5F:D9:6A:72:CE:B1:E8:62:D3
X509v3 Authority Key Identifier:
keyid:DF:98:D9:5B:42:79:F3:62:4F:78:B5:E5:3B:31:80:C3:F0:18:69:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35jZW0J582JPeLXlOzGAw_AYaTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9ba04-82c7-4ff7-801d-3fee75f82c08/1/35jZW0J582JPeLXlOzGAw_AYaTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:80:0a:ca:f4:2c:38:2b:5d:12:35:9b:21:0d:07:a2:01:
0c:f5:0e:b5:52:92:6f:c7:d4:c0:cf:c5:4a:c2:83:af:4e:b0:
e5:7f:56:ef:a8:8e:38:04:40:01:d6:f0:02:52:52:01:5b:ed:
92:df:e5:01:74:3c:c8:7e:03:3a:c0:00:dd:2d:6f:67:1a:d4:
90:71:27:e6:e8:5c:a3:0b:ca:29:f2:1b:98:f1:75:84:ce:0c:
58:64:4d:6b:de:8f:26:22:d4:58:51:eb:be:af:2b:97:a7:3c:
7b:81:c6:72:ff:41:5d:67:ac:5a:fe:15:28:3b:75:e4:81:bc:
ca:f5:cb:0c:f8:23:04:74:18:f8:72:00:7b:a0:c3:71:37:a0:
9f:30:02:47:07:27:c8:35:3e:f7:e3:2c:16:33:a9:19:c5:33:
b4:4b:26:76:5c:84:e2:c0:91:43:45:a1:ad:fb:c8:ff:30:b1:
3e:dd:0a:94:ac:22:6c:ac:b6:c9:96:56:a6:f9:21:c1:bf:d7:
af:79:e4:ee:21:13:be:4b:92:a8:d1:95:db:03:1f:c1:38:bf:
67:b9:b6:4d:23:fe:52:76:15:d3:9c:47:f6:d9:7a:6c:1e:67:
e2:ca:35:44:02:ed:fb:7d:62:06:1e:db:20:3d:5e:8f:f9:2c:
7d:c0:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:12 2025 by rpki-client