![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/19a9f7-968f-4841-8928-d37414ef33c7/1/tCY_ix0-IBJIMV1ZoxyWrhV32I0.mft
File: tCY_ix0-IBJIMV1ZoxyWrhV32I0.mft (raw, json)
Hash identifier: FkHCi/kpmLEkZRmq9vNBummiXMZ+EOI2MGSYRNOMEhY=
Subject key identifier: 92:24:06:04:99:D9:25:86:10:0A:FF:7C:52:23:BF:53:81:3D:E4:D1
Authority key identifier: B4:26:3F:8B:1D:3E:20:12:48:31:5D:59:A3:1C:96:AE:15:77:D8:8D
Certificate issuer: /CN=b4263f8b1d3e201248315d59a31c96ae1577d88d
Certificate serial: 0189526D54897D926394A0F3E312C7D7804F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCY_ix0-IBJIMV1ZoxyWrhV32I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/19a9f7-968f-4841-8928-d37414ef33c7/1/tCY_ix0-IBJIMV1ZoxyWrhV32I0.mft
Manifest number: 064F
Signing time: Fri 14 Jul 2023 03:24:04 +0000
Manifest this update: Fri 14 Jul 2023 03:24:04 +0000
Manifest next update: Sat 15 Jul 2023 03:24:04 +0000
Files and hashes: 1: tCY_ix0-IBJIMV1ZoxyWrhV32I0.crl (hash: oUOP2za+BgDVsOnRNEE5vRgO7AsXhQ7R52/mzUStTpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:52:6d:54:89:7d:92:63:94:a0:f3:e3:12:c7:d7:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4263f8b1d3e201248315d59a31c96ae1577d88d
Validity
Not Before: Jul 14 03:24:04 2023 GMT
Not After : Jul 15 03:24:04 2023 GMT
Subject: CN=9224060499d92586100aff7c5223bf53813de4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:11:29:7a:5c:74:58:09:8c:4c:da:a1:a8:
e5:8a:e0:e8:54:df:7c:02:0e:2c:4c:33:30:56:87:
93:02:ce:49:cd:39:49:80:20:73:d6:f7:d2:54:2e:
16:cf:b7:59:39:e7:55:75:67:a5:15:97:1a:60:ec:
21:3f:2b:1e:5c:8e:22:f6:37:ea:68:79:8e:9c:11:
7e:34:1d:f2:19:29:af:78:3a:c9:e7:7b:c3:bd:be:
aa:36:df:48:3b:df:ea:8c:44:4d:95:44:7c:81:5b:
7a:53:8d:57:65:5a:60:7f:55:d9:bc:02:69:e3:e2:
cd:0a:c1:e7:2a:5c:35:95:35:05:28:31:94:a8:56:
c2:a3:61:88:76:fa:cb:be:db:0a:dc:04:f3:4e:6b:
a6:4e:6d:78:51:18:b7:62:ab:f9:97:e0:ba:9d:18:
00:80:e8:3d:d9:f6:4f:c5:19:22:29:37:cf:40:29:
24:6c:de:a1:ce:81:d7:b7:e4:b6:89:34:12:45:f9:
e3:ff:a3:e7:33:3a:fe:fc:9f:4c:8c:c3:3d:a7:36:
4a:a9:22:d0:e4:8c:54:0b:0c:09:b8:04:1e:a3:d4:
ed:db:84:9b:62:99:11:3e:6a:1f:a3:f4:d8:0d:74:
16:43:25:82:88:1d:5a:68:0a:46:95:bc:0b:4e:4d:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:24:06:04:99:D9:25:86:10:0A:FF:7C:52:23:BF:53:81:3D:E4:D1
X509v3 Authority Key Identifier:
keyid:B4:26:3F:8B:1D:3E:20:12:48:31:5D:59:A3:1C:96:AE:15:77:D8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCY_ix0-IBJIMV1ZoxyWrhV32I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/19a9f7-968f-4841-8928-d37414ef33c7/1/tCY_ix0-IBJIMV1ZoxyWrhV32I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/19a9f7-968f-4841-8928-d37414ef33c7/1/tCY_ix0-IBJIMV1ZoxyWrhV32I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:21:51:2a:a7:3c:7b:e1:e9:9e:26:fa:47:7e:62:af:71:5c:
38:bc:be:2a:1d:5c:62:1f:59:f0:ad:04:b7:d0:e0:de:fd:62:
56:01:6f:e2:f3:3e:54:83:a8:11:78:c2:16:d5:2a:d2:b3:64:
43:c1:3a:8f:8f:28:1d:56:ef:41:10:40:31:3b:2a:60:b3:6a:
bd:35:f4:69:a7:67:eb:98:b3:7d:5e:e0:e9:71:96:8e:d5:95:
12:ea:4a:2a:1e:5e:ee:27:8d:90:58:b4:87:d6:29:82:9a:24:
8b:3c:be:6d:1a:15:4f:f7:a6:68:ca:13:2c:d2:83:d4:e2:64:
1a:51:fe:c2:45:05:00:5f:70:df:59:ce:dd:22:3a:cf:ad:83:
80:56:0d:45:d0:f7:e5:4e:87:88:ee:fa:38:9d:78:6c:db:c7:
e5:94:a4:07:10:64:e4:97:f1:9d:8a:e1:9e:4a:39:0c:37:5b:
7f:a9:ab:1b:50:4e:2e:d9:17:34:fd:c0:25:34:da:56:2a:d0:
38:00:88:d7:8c:b7:c5:eb:db:d4:b0:bc:dc:0f:cf:aa:f7:99:
a7:c4:9e:04:7b:68:d2:d1:67:4a:46:8c:f8:0e:48:d7:e1:53:
26:91:57:e7:23:d4:df:d0:d7:08:16:0c:79:c3:0d:58:97:54:
f6:37:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:09 2025 by rpki-client