![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.mft
File: cN--AlEmeqejpa68Xk_D2JWKMI4.mft (raw, json)
Hash identifier: 7zNFcDNvDZQl7dxziDUBBJsA0Og8zmypS3P8Qn6Wk0M=
Subject key identifier: 69:CC:1B:37:EC:B0:9D:C8:17:28:06:21:30:3E:37:ED:60:C1:76:99
Authority key identifier: 70:DF:BE:02:51:26:7A:A7:A3:A5:AE:BC:5E:4F:C3:D8:95:8A:30:8E
Certificate issuer: /CN=70dfbe0251267aa7a3a5aebc5e4fc3d8958a308e
Certificate serial: 018B186408E136513ACFA88F4B150EAA8F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN--AlEmeqejpa68Xk_D2JWKMI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.mft
Manifest number: 0C37
Signing time: Tue 10 Oct 2023 07:01:30 +0000
Manifest this update: Tue 10 Oct 2023 07:01:30 +0000
Manifest next update: Wed 11 Oct 2023 07:01:30 +0000
Files and hashes: 1: cN--AlEmeqejpa68Xk_D2JWKMI4.crl (hash: KSB3+7BXb8kLFXXzBtl6lA8VDNQ0ETcEoQF5HFCwhzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:18:64:08:e1:36:51:3a:cf:a8:8f:4b:15:0e:aa:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dfbe0251267aa7a3a5aebc5e4fc3d8958a308e
Validity
Not Before: Oct 10 07:01:30 2023 GMT
Not After : Oct 11 07:01:30 2023 GMT
Subject: CN=69cc1b37ecb09dc817280621303e37ed60c17699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:6a:b6:ab:62:3f:5b:67:c2:4e:87:19:2d:
52:0c:6d:fb:47:4a:8b:15:32:22:d1:e7:83:32:b0:
d8:57:12:93:27:65:01:b6:09:d8:bf:6e:6a:ac:27:
a5:2c:d6:40:fe:bf:8f:27:ab:ec:4e:57:62:e1:26:
1e:f5:bf:92:ba:56:cd:e9:79:20:e6:13:89:fe:5b:
f6:1c:d7:00:4e:65:0c:bb:05:e1:20:37:a2:c6:70:
d2:f1:25:74:b1:29:b7:29:ca:20:12:ab:27:2b:8e:
2f:76:5e:58:40:91:a4:22:cf:6e:29:ff:dc:44:48:
f1:50:e7:f3:ba:12:28:93:75:09:f6:9c:21:5a:ab:
39:9c:67:c8:5b:78:cf:f5:79:17:8c:c5:01:1e:f9:
97:bf:5f:b8:a8:03:b0:74:41:a2:75:75:21:6d:1a:
33:f2:8b:13:dc:c9:f3:10:23:41:13:6b:0d:10:c7:
a0:16:e8:7f:7e:cb:3b:b3:95:c4:87:6e:fe:75:d7:
86:16:95:74:7b:eb:30:eb:47:b8:33:be:0c:61:6d:
56:39:56:d5:04:40:6d:7e:5d:4b:20:5e:ad:81:37:
40:26:c6:a7:52:91:b3:e9:fc:7e:30:02:31:6f:3a:
ae:b9:de:e4:2a:99:48:0f:87:c7:51:f9:f0:96:bf:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:1B:37:EC:B0:9D:C8:17:28:06:21:30:3E:37:ED:60:C1:76:99
X509v3 Authority Key Identifier:
keyid:70:DF:BE:02:51:26:7A:A7:A3:A5:AE:BC:5E:4F:C3:D8:95:8A:30:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN--AlEmeqejpa68Xk_D2JWKMI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d00835-4d62-4ee8-bdea-e48c4fec2886/1/cN--AlEmeqejpa68Xk_D2JWKMI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:de:cd:04:23:e9:32:fb:d0:10:1f:4f:7f:29:79:a6:96:
f8:20:3d:cb:0d:7e:a4:c0:15:e9:ae:3f:f5:5e:31:15:e1:ca:
33:10:be:74:2e:18:71:37:06:d2:0f:86:15:74:33:22:25:ba:
c7:27:40:07:0d:51:3c:1d:ea:cd:be:b1:58:0d:b0:db:a7:fb:
2a:e9:20:66:01:7f:40:01:81:f8:14:d5:42:66:53:75:f3:2b:
c8:0e:86:f7:3b:77:e8:07:ff:74:5f:8c:02:0a:42:65:0d:62:
10:a9:47:06:a1:ca:29:6a:cf:43:db:e7:7a:38:94:f4:73:8e:
e0:43:a0:b3:57:22:95:d6:3d:09:6e:d4:43:07:2a:99:38:b3:
78:8f:c9:3c:23:f6:4a:42:dd:85:9c:db:84:6b:56:a7:b2:36:
1e:ac:3d:db:a3:5b:83:6f:29:18:fc:1b:ce:c5:83:c1:9f:7a:
c7:f6:e6:7c:8d:35:21:37:85:91:90:0f:39:1e:58:e5:4c:f3:
77:e9:95:33:8d:35:7f:14:19:ac:b3:84:36:15:ef:de:3f:41:
2f:2f:e5:b9:36:c6:03:8b:9d:2a:10:b8:84:7a:7d:4a:50:e1:
01:c8:c2:bc:bf:5b:9e:4f:c0:c7:df:bd:a0:8e:ad:37:11:e7:
73:dc:45:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:51 2025 by rpki-client