![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.mft
File: yN6k5Y_fuVyHgauIEbBhGeGBTvo.mft (raw, json)
Hash identifier: UNiyPgs+nWArC4P7O0q5W60BOvqBkfEpECnvOTIUPeg=
Subject key identifier: 25:C3:39:0E:AB:97:6E:C8:8D:C2:62:67:BC:54:22:FC:FF:54:58:62
Authority key identifier: C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
Certificate issuer: /CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Certificate serial: 018B710250DDB3EC732E558F8BAE664FC81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.mft
Manifest number: 0F63
Signing time: Fri 27 Oct 2023 12:00:58 +0000
Manifest this update: Fri 27 Oct 2023 12:00:58 +0000
Manifest next update: Sat 28 Oct 2023 12:00:58 +0000
Files and hashes: 1: HbVd8-UQQ0tH0lKvVGFdmbUkWrM.roa (hash: 5vJwBPKSZbgq/Jak1kaF3NpZ4LN0s9Shiba57qg3G4c=)
2: yN6k5Y_fuVyHgauIEbBhGeGBTvo.crl (hash: 9Cf3+DUSNv0oqSPFL2QtcnrXI7sN5m/QLAUo95VuDH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:02:50:dd:b3:ec:73:2e:55:8f:8b:ae:66:4f:c8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Validity
Not Before: Oct 27 12:00:58 2023 GMT
Not After : Oct 28 12:00:58 2023 GMT
Subject: CN=25c3390eab976ec88dc26267bc5422fcff545862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:d3:ac:1f:f4:d3:1b:4d:f3:73:dd:a5:71:
d1:9c:6f:59:51:16:17:36:d4:7f:a0:37:32:16:08:
e0:42:74:79:80:29:18:9f:4b:4e:cd:34:f0:d3:fd:
ae:b8:e8:bb:03:d0:39:a8:b4:0f:ea:17:01:b1:7f:
15:74:da:24:3a:b3:c6:ce:50:56:75:7d:17:2c:f5:
fd:cf:8d:6c:7e:53:32:35:fc:2c:34:59:e6:c2:56:
49:01:9d:5f:2c:20:b0:de:d2:f2:80:a5:fa:ea:b5:
f6:4e:de:e6:6c:90:3c:82:49:de:9d:04:d6:99:ff:
66:08:f8:b6:5a:cb:f2:82:3e:08:7c:5d:fa:73:4a:
c8:0b:3e:58:b9:41:3f:4a:28:17:26:42:5a:72:19:
4c:38:e9:2a:cb:60:aa:5f:5e:17:37:47:e7:a4:65:
a5:cb:72:3d:4a:1c:4e:47:35:cc:da:71:a2:58:64:
36:bd:19:e3:7b:71:af:20:1b:6a:32:87:39:25:3d:
16:d4:db:82:8d:cf:46:0e:dd:ba:7d:f6:65:9b:57:
28:3f:98:77:ca:12:43:d1:5e:e3:32:78:94:c0:cb:
ca:f8:f4:8b:27:82:7b:a9:f1:51:e0:4e:fa:80:c4:
63:d6:90:22:1f:f6:76:6b:d9:2d:fa:22:79:ae:92:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:39:0E:AB:97:6E:C8:8D:C2:62:67:BC:54:22:FC:FF:54:58:62
X509v3 Authority Key Identifier:
keyid:C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:04:66:d1:0c:1c:45:99:3f:d4:a6:41:25:f9:1e:44:a6:23:
b1:f9:ac:55:d1:90:98:be:b3:a7:04:22:32:cf:b7:cb:bd:22:
56:d4:34:1a:61:07:d0:26:74:3d:ea:58:99:dd:a0:01:b4:ce:
15:87:13:ba:bb:f0:8e:a1:c3:87:e0:8c:01:b9:5e:a2:75:88:
b6:db:8e:3e:c5:2a:db:2e:ee:65:c7:ac:70:bd:66:4c:9e:87:
f7:7c:d5:3a:8d:01:f6:0a:01:b0:f0:9d:3d:24:b4:3f:dc:d3:
cb:63:28:d0:dd:1a:a1:b3:90:70:18:40:da:a1:96:6c:85:b0:
96:bb:67:37:25:1f:03:e7:e8:75:63:fe:39:8b:70:42:77:e1:
82:3b:26:18:70:1b:d2:3d:03:c9:c1:74:cb:47:80:1e:df:ab:
0c:a3:2f:1d:9f:05:8a:9f:2f:a6:ec:12:94:f8:fd:df:8b:c5:
25:78:30:58:b6:b0:60:da:bc:f1:af:67:8e:46:bd:0b:36:0e:
9e:f3:54:f3:6b:24:48:ed:82:90:f7:a9:fc:8c:74:dc:9f:c1:
7e:f4:7c:5e:a9:7f:65:45:56:91:b2:e8:1f:9e:cb:20:6e:49:
0a:5d:ff:c5:96:26:b7:6b:89:58:4b:c0:f6:4d:28:1c:ed:d4:
90:07:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:48 2025 by rpki-client