![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
File: ShO3dYZ23i7xJ8x3UO52xag0HXg.mft (raw, json)
Hash identifier: 1BSaWDFVEyhFIJNpsXQte0qUcc8SZqDD4kQicILyTTg=
Subject key identifier: 99:D3:0B:FD:04:63:80:C2:27:32:E8:B0:04:9A:18:97:EE:98:4D:07
Authority key identifier: 4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
Certificate issuer: /CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Certificate serial: 01930490C211B0D635E9850C5108E5282A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
Manifest number: 0E9F
Signing time: Thu 07 Nov 2024 03:00:15 +0000
Manifest this update: Thu 07 Nov 2024 03:00:15 +0000
Manifest next update: Fri 08 Nov 2024 03:00:15 +0000
Files and hashes: 1: HD9Hx9PVFnNgGKThhu3e4vCe88A.roa (hash: /WzSoRAJi0VglVwEfzdULW136aAyGXI2qBvI9R6McEw=)
2: ShO3dYZ23i7xJ8x3UO52xag0HXg.crl (hash: ERNut9/tOyxZHiXOZTfN56Ywkq71nQCe4QftOV6hzik=)
3: k5IK2aFsCMWdA6KcDFwF1c8d5Eg.roa (hash: RLYxMyHbkbgzP531TQCOJ1cVPIXCFneiBCAL7eel4cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:04:90:c2:11:b0:d6:35:e9:85:0c:51:08:e5:28:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Validity
Not Before: Nov 7 03:00:15 2024 GMT
Not After : Nov 8 03:00:15 2024 GMT
Subject: CN=99d30bfd046380c22732e8b0049a1897ee984d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:81:1b:e8:e6:36:93:b2:8d:60:9b:8d:f2:
b3:54:8e:14:cc:88:b0:bb:b5:24:fe:90:88:41:7a:
7c:b7:f9:18:9b:4b:c1:f7:58:cd:41:42:4a:04:b9:
0c:5e:37:65:0f:05:95:d4:b3:f5:d4:96:d8:8e:be:
60:cf:15:9e:53:69:ae:9d:3a:0f:ed:dd:5b:07:40:
2c:74:8a:c3:87:05:e5:6d:f1:85:49:af:9f:6c:4c:
e9:35:ec:cf:3f:2f:23:d3:2b:7b:04:25:b1:68:9d:
55:23:c6:b9:76:54:c7:3c:d3:59:5f:59:81:35:9f:
27:0a:6a:f5:8d:d7:a9:c9:5e:55:b8:1a:ef:27:f0:
5f:27:0b:56:0e:49:19:88:1a:b9:f7:10:56:e2:68:
7a:89:f3:1d:49:e8:72:ec:32:e4:45:7b:cd:b5:9e:
6e:f9:03:8a:cf:41:c5:b9:c2:51:10:a0:53:a6:75:
5c:af:6f:f1:31:25:d5:9f:e7:29:36:ed:09:50:66:
bb:b7:0f:ab:cd:c4:50:47:17:09:b0:cd:9b:8b:9d:
ed:c9:2e:d3:db:5f:b9:52:8e:a2:ce:5b:36:03:09:
06:7b:3a:f5:08:f4:5f:1e:82:e7:fb:ce:42:34:e2:
52:b7:89:59:5d:0b:7e:1b:8a:ac:6c:e3:c8:66:b6:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:0B:FD:04:63:80:C2:27:32:E8:B0:04:9A:18:97:EE:98:4D:07
X509v3 Authority Key Identifier:
keyid:4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:23:3b:23:84:99:03:53:38:6a:fe:fd:61:0e:f5:e3:ff:8a:
30:e6:60:9c:55:cf:e5:da:4d:da:5a:c9:cc:e8:fc:a5:da:b3:
e5:97:5c:45:a1:d3:9d:df:00:a8:f8:da:8c:d0:1d:29:70:a3:
2b:e7:47:4a:4a:c5:91:26:d7:19:41:47:ba:72:e6:0d:8f:cb:
36:d5:3b:b5:4f:d6:c9:eb:28:50:d0:28:06:a2:9a:b4:14:bc:
02:42:55:de:af:3d:40:36:08:0d:28:ba:41:4e:7b:8b:68:02:
19:4f:99:4b:09:9e:81:06:b1:5c:cb:64:9f:ef:1c:6b:a0:1c:
30:52:ce:57:53:bf:40:a7:51:6f:9c:d3:dd:a4:f6:aa:82:3e:
5c:3d:8c:05:b8:61:35:bb:e7:08:e5:9b:f4:4a:cb:3d:18:eb:
58:07:d6:e9:10:63:6e:6c:b4:10:48:68:31:f8:37:e3:2c:8b:
b1:ff:ed:43:ea:c3:ae:e8:ea:bc:d8:dc:a2:7b:ce:a9:bc:70:
7a:7d:c6:44:b5:4b:0b:e9:d2:6f:1d:eb:a1:3a:8a:88:d9:98:
6f:bb:4c:a9:0a:ec:76:de:63:80:67:77:68:20:45:c6:a6:aa:
5a:d5:8f:16:36:3a:25:3c:8c:1e:62:78:e7:39:3e:e0:ca:08:
84:d3:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:43 2025 by rpki-client