![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
File: 1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft (raw, json)
Hash identifier: jpmgnGTfX6RvOqRxo/L2Mlbdj51FRCmViLwRZplDtZY=
Subject key identifier: 5D:08:70:A3:67:A6:DB:64:7B:D6:FD:94:9A:69:42:A2:78:2A:D8:50
Authority key identifier: FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
Certificate issuer: /CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
Certificate serial: 0189E2929B026E697EF2821956CE9494B9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
Manifest number: 0881
Signing time: Fri 11 Aug 2023 03:10:05 +0000
Manifest this update: Fri 11 Aug 2023 03:10:05 +0000
Manifest next update: Sat 12 Aug 2023 03:10:05 +0000
Files and hashes: 1: 1-qqSWzs_p3bEQRmTIKLGox3uN_c.crl (hash: jxjDLpfi6EdEvo7akluJqJWRgTCDwS6OfkTsP3PnYq4=)
2: LRJIGt4iXE38BkXjIdNFOYwZoCY.roa (hash: N2MZZBbXPdcVWL+EMJvwltYIZNqT1CCIIUD7Oqz6C80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:92:9b:02:6e:69:7e:f2:82:19:56:ce:94:94:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
Validity
Not Before: Aug 11 03:10:05 2023 GMT
Not After : Aug 12 03:10:05 2023 GMT
Subject: CN=5d0870a367a6db647bd6fd949a6942a2782ad850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:7f:64:3d:20:12:77:64:bd:1a:2b:d1:6c:
f5:db:2d:76:cb:4e:dc:fc:e4:7d:b7:7a:7c:e7:c2:
9f:9f:94:be:80:4f:61:0c:48:cf:f5:37:50:f3:f8:
a7:6f:59:1d:61:f9:c5:6d:28:b5:b8:92:ff:74:76:
da:81:7c:c1:26:25:d1:39:b9:9f:fb:ff:bd:22:43:
5e:a2:ff:18:20:b2:93:93:2e:8e:fa:d2:2a:a3:b2:
76:c2:60:ae:61:79:d8:c3:54:12:57:9e:b4:c0:92:
c0:6c:18:5d:48:89:5f:35:ea:90:fe:54:b7:d6:1b:
ca:00:1a:6a:42:85:c5:ba:84:49:8a:3a:48:88:a1:
29:1d:5c:84:94:2c:1d:46:a3:2e:df:7f:41:f9:06:
39:5a:2b:ec:b4:42:db:6d:64:31:2e:27:06:af:4d:
a4:67:35:ed:7b:37:32:e6:df:31:9e:a0:10:2c:f2:
05:f2:d8:54:a0:6e:49:ad:fc:79:8b:1a:16:fc:65:
d0:8b:d4:0d:91:19:8f:a1:24:55:59:47:7f:69:7a:
9c:de:af:30:60:90:e0:88:32:72:88:8d:cb:a2:28:
f3:e7:16:de:1f:e1:08:43:5b:58:2e:0e:35:07:7d:
55:0a:8a:55:9e:be:b4:4a:e3:3c:e2:9e:df:97:6c:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:70:A3:67:A6:DB:64:7B:D6:FD:94:9A:69:42:A2:78:2A:D8:50
X509v3 Authority Key Identifier:
keyid:FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:d6:08:30:f1:40:a3:61:f2:6f:e2:e6:b3:47:08:3f:8c:
ee:c1:40:b4:4f:5c:2f:74:b3:9b:36:c1:fb:28:7a:92:65:92:
8e:be:23:e2:7a:70:3f:9e:9b:04:e3:ef:51:36:44:17:a2:5c:
ea:a2:a2:c3:fb:a8:e0:27:6a:10:97:82:d2:66:8b:f7:66:96:
20:08:52:32:f5:16:90:17:48:a7:d6:93:f2:70:c7:a0:a3:6c:
ff:21:ac:6c:43:33:b9:69:5b:f9:1b:80:89:71:43:be:a6:24:
7d:d5:c8:b1:d2:d7:2f:0a:6f:56:8f:3a:13:21:8d:52:2c:ae:
1d:91:7e:5a:2b:17:1f:5b:6c:aa:94:ea:d7:43:e4:e2:a4:17:
05:c3:13:86:e1:41:90:b8:76:95:80:56:a2:df:78:31:60:9d:
a1:e6:e2:85:1c:ab:ea:74:c8:ea:7f:a2:ca:56:c1:45:c7:c5:
a8:81:f0:98:ad:c7:61:a1:d1:43:df:88:dc:75:a2:b4:d7:8e:
b5:bb:b1:1a:99:7c:48:5d:69:15:00:9a:2d:44:90:98:78:89:
f3:2c:cf:68:0d:d0:1c:ff:49:3a:d4:ea:32:ea:5a:7b:be:ec:
fb:3b:0c:fc:f0:6a:94:eb:4b:d6:ad:3b:d3:ef:86:32:28:16:
14:31:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:35 2025 by rpki-client