![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/780b52-3544-428d-ad2c-2826cf4ffbff/1/T8QBFH5iaSirIYhcBqA9JDFvLB0.mft
File: T8QBFH5iaSirIYhcBqA9JDFvLB0.mft (raw, json)
Hash identifier: O/keQW8KT9uwKnM+DCGTcQNk9MP+mD6hRz1P13g2xhQ=
Subject key identifier: 14:F6:A2:F7:1D:71:25:EC:93:C5:4D:03:97:35:58:F0:02:7A:6F:15
Authority key identifier: 4F:C4:01:14:7E:62:69:28:AB:21:88:5C:06:A0:3D:24:31:6F:2C:1D
Certificate issuer: /CN=4fc401147e626928ab21885c06a03d24316f2c1d
Certificate serial: 1342961B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8QBFH5iaSirIYhcBqA9JDFvLB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/780b52-3544-428d-ad2c-2826cf4ffbff/1/T8QBFH5iaSirIYhcBqA9JDFvLB0.mft
Manifest number: 0891
Signing time: Fri 11 Mar 2022 12:56:15 +0000
Manifest this update: Fri 11 Mar 2022 12:56:15 +0000
Manifest next update: Sat 12 Mar 2022 12:56:15 +0000
Files and hashes: 1: T8QBFH5iaSirIYhcBqA9JDFvLB0.crl (hash: J57xDYn07BpcM3UINsbtCQvcTu/FD06zQwFtpXgRrgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323130907 (0x1342961b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc401147e626928ab21885c06a03d24316f2c1d
Validity
Not Before: Mar 11 12:56:15 2022 GMT
Not After : Mar 12 12:56:15 2022 GMT
Subject: CN=14f6a2f71d7125ec93c54d03973558f0027a6f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:0d:a9:d9:2c:10:2d:6f:1e:e9:b9:79:90:
16:47:55:48:80:16:c5:09:43:28:c2:97:99:22:09:
1f:34:c5:a5:5c:ed:71:69:a6:c6:12:7c:04:6e:f6:
3e:1f:32:6c:0f:57:59:02:e6:c2:22:2e:48:22:8c:
22:28:82:6d:38:ae:55:36:b0:f9:28:41:33:43:30:
ea:9c:05:f0:78:ef:0d:03:9b:32:ba:4f:71:7b:e1:
ee:3c:25:6f:ce:40:0c:35:29:01:86:a7:e6:4b:12:
09:c4:fb:e4:73:9d:8e:b6:b8:1b:18:7b:8f:c3:db:
3c:91:fc:a2:6d:46:a6:56:d5:55:f3:db:b4:28:e4:
60:0e:0f:7c:a6:8f:f7:57:81:44:69:fe:86:67:3e:
bd:51:f4:88:55:11:21:9a:cf:19:39:44:8d:51:05:
c5:c5:02:cf:0f:73:1d:42:ec:5a:05:a9:f4:24:19:
30:da:d2:3a:51:06:cf:63:6f:8d:e6:a8:64:1e:52:
0f:09:18:8e:98:2b:09:a4:ab:a7:89:1d:0c:fa:5e:
91:52:d9:85:10:c8:75:2a:cb:d9:46:ab:28:ee:77:
31:d3:cc:b4:89:25:2d:23:b4:af:f6:44:61:c7:32:
94:4d:3a:a8:cf:15:4d:e4:72:60:30:fc:07:6f:9e:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F6:A2:F7:1D:71:25:EC:93:C5:4D:03:97:35:58:F0:02:7A:6F:15
X509v3 Authority Key Identifier:
keyid:4F:C4:01:14:7E:62:69:28:AB:21:88:5C:06:A0:3D:24:31:6F:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8QBFH5iaSirIYhcBqA9JDFvLB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/780b52-3544-428d-ad2c-2826cf4ffbff/1/T8QBFH5iaSirIYhcBqA9JDFvLB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/780b52-3544-428d-ad2c-2826cf4ffbff/1/T8QBFH5iaSirIYhcBqA9JDFvLB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c8:50:ca:cf:16:c0:50:71:8d:5e:ef:35:65:50:c9:55:de:
07:de:3a:60:7a:f2:44:95:3d:ea:22:19:61:39:96:58:36:2e:
41:83:da:64:12:da:8a:89:0c:be:30:b7:13:61:c8:ad:37:af:
3b:48:b6:65:23:9e:52:c1:61:07:99:03:a9:19:c0:f0:a1:0b:
e0:d6:76:8b:2a:fd:14:28:11:9a:3b:13:e5:1b:77:e5:e6:d4:
46:fc:e2:b1:dd:cc:40:c0:e4:aa:a9:93:06:6e:f9:df:50:d7:
07:3b:72:cd:c1:94:cc:bd:c5:71:f6:18:8b:fc:d1:95:d9:db:
e4:ea:0e:76:45:9b:5c:bf:98:24:3a:64:29:28:74:4d:22:02:
05:3b:8e:dd:45:f9:e1:71:33:d3:60:c0:60:f5:a7:f8:14:25:
3f:b2:79:a0:b4:58:f9:83:db:db:ad:7d:2d:8c:32:e5:12:03:
81:8f:b3:5b:c2:ea:c8:8d:ae:97:98:30:5a:52:b6:b1:1b:a5:
33:65:1a:3d:65:f9:38:18:e6:c1:22:04:4f:64:b1:60:cc:2f:
7b:47:21:ce:99:08:07:10:36:01:17:2c:8f:f5:84:d4:3e:69:
66:52:5f:81:8f:0d:ed:b2:c6:0b:58:ae:37:38:a2:75:b7:a7:
2c:3a:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client