![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft
File: 8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft (raw, json)
Hash identifier: FBdHqSHONoPIbISR/xdiqicpPS4KSTjAiGm4KvO8OtM=
Subject key identifier: E6:8F:E0:5E:A2:66:81:9B:7A:48:E7:05:A5:37:96:D0:E0:84:43:78
Authority key identifier: F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60
Certificate issuer: /CN=f33f188267785a4aad4c30f414b60a1bce172e60
Certificate serial: 03376F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft
Manifest number: 0442
Signing time: Fri 22 Apr 2022 10:45:12 +0000
Manifest this update: Fri 22 Apr 2022 10:45:12 +0000
Manifest next update: Sat 23 Apr 2022 10:45:12 +0000
Files and hashes: 1: 8z8Ygmd4WkqtTDD0FLYKG84XLmA.crl (hash: x2zRj/SwqXYY+qntfdCLouY2o8FZy6NnM79cCTWAwNg=)
2: XfAGMqwFIfLfhq-nEqol8PfmgfM.roa (hash: n+Pl5PsxEjwzAK09eHqpzJ8z0bknSH1zu52mhtuIh6g=)
3: eq9x3smNaRoPI4Kt-bI-bH0Nnro.roa (hash: hcYIzOaMhG2M59TqqYC1ZiVhZc7R/05asR0+OfZRUaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53964548 (0x3376f04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f188267785a4aad4c30f414b60a1bce172e60
Validity
Not Before: Apr 22 10:45:12 2022 GMT
Not After : Apr 23 10:45:12 2022 GMT
Subject: CN=e68fe05ea266819b7a48e705a53796d0e0844378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:3d:ba:04:6b:6c:70:09:62:57:0d:79:ef:
34:c3:ce:5d:10:eb:ab:4d:89:3f:de:cc:df:26:8d:
f4:03:a4:f4:c0:21:e6:86:75:62:d4:1f:0f:3d:0e:
12:a3:78:6c:e9:26:65:62:3c:42:c1:d1:88:a4:91:
f3:3f:ab:39:ba:f4:bd:4a:5b:17:b8:7f:f7:64:35:
f1:32:c1:73:2b:be:94:d2:7b:c0:47:5c:c8:ac:62:
5d:07:07:9e:84:5c:da:a7:c7:84:6d:ab:51:aa:9e:
ec:f3:7c:44:86:d1:32:a4:ba:56:2b:38:9d:07:3a:
95:75:6f:74:d3:9d:72:dd:be:64:1e:f7:e1:7c:b8:
0c:e7:65:b7:16:49:0e:b6:ee:91:9e:69:65:7e:2c:
f3:7b:e6:88:26:7f:fb:fb:96:47:9e:5e:b9:b9:eb:
3f:9a:af:0f:79:08:09:5d:05:17:51:45:18:30:26:
9c:de:34:c3:e4:46:6a:95:eb:ce:5d:0b:f7:f7:35:
c1:d7:18:b9:f0:92:00:45:0a:ef:9c:7b:a1:cd:81:
a6:51:a3:08:b2:74:26:9e:a1:09:7d:8c:b8:77:63:
ac:9c:3b:e7:da:aa:1a:d1:75:df:5d:87:1b:92:78:
bd:0d:76:91:94:53:e2:d0:06:f5:00:56:77:f6:8d:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:E0:5E:A2:66:81:9B:7A:48:E7:05:A5:37:96:D0:E0:84:43:78
X509v3 Authority Key Identifier:
keyid:F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:4b:00:51:8f:93:ad:64:d7:67:c8:5f:56:b2:1f:69:a8:
67:0c:48:73:6a:66:96:1a:92:ab:3b:35:c5:f5:14:0b:8f:21:
93:1e:7f:6b:1f:4d:c9:10:c7:40:23:b4:c6:1d:fd:ff:65:92:
62:c2:16:e7:2a:af:8e:bf:b4:51:a5:de:54:5a:c1:c2:6d:c9:
8b:58:46:96:28:42:6c:48:cc:cf:30:5e:67:af:01:40:87:0c:
a3:50:2d:0f:da:d8:52:71:50:f4:a5:49:32:c8:ca:0e:6e:f4:
d6:2b:d8:e7:46:2b:10:59:d3:dd:e4:dd:2a:53:ba:14:49:39:
6a:54:12:90:cc:d1:6a:b1:64:e7:68:15:66:f6:a1:c8:5a:f1:
f4:d6:86:bc:c0:aa:9e:7e:cf:4f:f4:ec:03:89:ec:c8:2d:40:
ec:ed:fb:c5:69:34:0a:e8:4e:98:51:cd:d1:72:7f:df:84:77:
14:e4:d8:10:91:76:df:86:a9:7d:02:da:4b:8b:11:54:ca:6c:
cc:f4:e3:aa:d9:2d:87:9b:3f:af:97:c1:62:48:c5:1a:61:de:
a5:20:dd:52:25:a6:8f:af:48:7b:c3:9a:ae:0b:df:3c:c1:b7:
28:8d:9f:be:7e:3b:f8:37:c3:9d:b0:e0:52:78:63:43:20:fc:
4a:11:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:12 2025 by rpki-client