![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f42158-f8af-4b6c-b9ea-590bb1bd6916/1/GhG0wxuOzK0NNK7hVzR2yzR0tm4.mft
File: GhG0wxuOzK0NNK7hVzR2yzR0tm4.mft (raw, json)
Hash identifier: 3/fEe1XV4xLEsP+xnn8F9CrFSkFMfLb7tZOMPoBktps=
Subject key identifier: B0:F5:8D:3F:60:DB:B9:72:E9:10:B8:13:18:83:08:1C:F6:74:9C:94
Authority key identifier: 1A:11:B4:C3:1B:8E:CC:AD:0D:34:AE:E1:57:34:76:CB:34:74:B6:6E
Certificate issuer: /CN=1a11b4c31b8eccad0d34aee1573476cb3474b66e
Certificate serial: 018D874E8A1E6FB7EED43C33134C7DDC1F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhG0wxuOzK0NNK7hVzR2yzR0tm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f42158-f8af-4b6c-b9ea-590bb1bd6916/1/GhG0wxuOzK0NNK7hVzR2yzR0tm4.mft
Manifest number: 0862
Signing time: Thu 08 Feb 2024 06:01:27 +0000
Manifest this update: Thu 08 Feb 2024 06:01:27 +0000
Manifest next update: Fri 09 Feb 2024 06:01:27 +0000
Files and hashes: 1: GhG0wxuOzK0NNK7hVzR2yzR0tm4.crl (hash: pG+FL+pOYy8CExZoodEUo1GCAYvm+hGdaGERAjeaBq4=)
2: R2aTJOpckw-QMaUyxi4WssttmaI.roa (hash: RlLDlt1rGiavdoItnnBWTa8l84OiQKQ3lXQCRMzijos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:4e:8a:1e:6f:b7:ee:d4:3c:33:13:4c:7d:dc:1f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11b4c31b8eccad0d34aee1573476cb3474b66e
Validity
Not Before: Feb 8 06:01:27 2024 GMT
Not After : Feb 9 06:01:27 2024 GMT
Subject: CN=b0f58d3f60dbb972e910b8131883081cf6749c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:26:5f:0d:5b:75:63:8a:7c:1b:85:f9:45:
2b:31:10:a9:f5:ad:92:be:f9:ef:8b:62:15:ba:b9:
e5:b6:9e:91:e4:c9:d1:59:91:12:f9:0d:0b:3c:22:
ec:3f:d3:19:48:db:0a:b4:b1:a7:db:cd:76:f5:94:
ca:08:9d:e7:14:09:bf:a4:70:d7:1a:de:13:fe:d6:
33:12:63:85:68:01:e2:44:57:1c:d9:d2:28:0a:db:
28:de:ef:71:bf:63:53:85:9f:83:32:05:e4:0a:5a:
91:62:3e:bc:56:6f:c3:6d:e3:96:70:8e:22:25:2a:
46:b1:3b:38:9b:fb:3d:bc:76:0b:96:77:a9:e6:a1:
f6:bf:30:58:5a:f4:51:c0:67:ba:9e:ca:0f:30:be:
31:7f:5e:13:44:91:53:f1:79:b3:ef:af:1d:28:9b:
7d:2a:26:08:25:ee:3b:5c:27:65:55:ee:ac:cc:dc:
5e:ce:bd:e1:3e:92:be:bb:3a:7e:31:72:00:c1:c2:
fd:7e:ee:27:af:47:bd:4c:d6:7b:ac:63:b6:c3:8e:
ce:98:57:f4:13:02:52:d0:7e:39:01:f8:df:d0:7c:
e6:98:44:05:bb:3a:62:ea:66:6d:bc:7e:eb:cc:10:
0a:7f:88:be:4b:cd:95:63:8c:12:1f:3d:45:b0:6f:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:8D:3F:60:DB:B9:72:E9:10:B8:13:18:83:08:1C:F6:74:9C:94
X509v3 Authority Key Identifier:
keyid:1A:11:B4:C3:1B:8E:CC:AD:0D:34:AE:E1:57:34:76:CB:34:74:B6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhG0wxuOzK0NNK7hVzR2yzR0tm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f42158-f8af-4b6c-b9ea-590bb1bd6916/1/GhG0wxuOzK0NNK7hVzR2yzR0tm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f42158-f8af-4b6c-b9ea-590bb1bd6916/1/GhG0wxuOzK0NNK7hVzR2yzR0tm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:f0:2d:24:e2:54:05:19:dc:ec:6a:db:ff:36:1d:70:0e:
ac:9a:d6:80:bc:a6:67:28:7d:50:42:b6:68:01:14:3d:bd:f5:
4b:15:59:9f:1c:37:7d:a0:5c:5e:8d:49:cb:d2:b7:21:37:29:
f7:51:92:25:80:dd:12:44:ca:b0:c0:55:47:6b:13:24:53:9a:
5f:9c:c3:d8:46:89:fd:2e:88:e0:99:ed:48:60:6d:51:f3:5c:
08:b9:76:69:fc:80:ca:20:31:30:52:dd:ed:b7:ea:cb:78:f5:
49:b9:ff:ff:03:b6:d9:0b:28:a8:90:16:52:ab:4d:90:f0:b5:
86:17:1e:5c:78:ed:7e:26:ad:ae:c7:2b:e7:a5:2d:49:8f:aa:
97:b3:ce:c6:e7:c1:06:af:57:b2:9e:d7:07:86:b0:55:40:b7:
e6:b7:b5:13:26:89:66:f6:b4:75:bc:cc:96:b5:93:27:05:65:
7e:0d:62:19:91:4c:05:3f:36:86:b9:c8:17:b1:8d:22:b6:4f:
e3:8c:79:11:a4:af:55:05:21:7d:15:e2:4a:41:f2:39:c7:ee:
e3:8d:d4:1d:12:86:0e:88:98:08:a5:37:38:ab:88:bb:23:71:
79:3d:dc:28:03:c5:b0:43:a3:8a:d3:61:b2:be:e1:a2:b5:e1:
42:d5:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:16 2025 by rpki-client