![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d3ac4b-7ffc-47f0-94d2-652e0810c9f9/1/3XcJWTg3UFqzXsG5x-62525Uj5g.mft
File: 3XcJWTg3UFqzXsG5x-62525Uj5g.mft (raw, json)
Hash identifier: FUczqd9CHdrz1B9Vq1hun4qbzDce+9PerIw/E3sP56I=
Subject key identifier: C3:8E:7B:3D:88:56:36:AA:A6:4D:2D:AB:5D:24:8D:11:9D:38:70:75
Authority key identifier: DD:77:09:59:38:37:50:5A:B3:5E:C1:B9:C7:EE:B6:E7:6E:54:8F:98
Certificate issuer: /CN=dd7709593837505ab35ec1b9c7eeb6e76e548f98
Certificate serial: 01894897828229E18119FEE3EDA214832615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XcJWTg3UFqzXsG5x-62525Uj5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d3ac4b-7ffc-47f0-94d2-652e0810c9f9/1/3XcJWTg3UFqzXsG5x-62525Uj5g.mft
Manifest number: 0326
Signing time: Wed 12 Jul 2023 05:33:56 +0000
Manifest this update: Wed 12 Jul 2023 05:33:56 +0000
Manifest next update: Thu 13 Jul 2023 05:33:56 +0000
Files and hashes: 1: 3XcJWTg3UFqzXsG5x-62525Uj5g.crl (hash: SVpOQQVI7ENNh6z3ep4Bz4+6oRzbDYBirbBj8LxveLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:97:82:82:29:e1:81:19:fe:e3:ed:a2:14:83:26:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7709593837505ab35ec1b9c7eeb6e76e548f98
Validity
Not Before: Jul 12 05:33:56 2023 GMT
Not After : Jul 13 05:33:56 2023 GMT
Subject: CN=c38e7b3d885636aaa64d2dab5d248d119d387075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:a8:c3:fc:2f:c5:2f:81:fb:e3:56:31:60:
7d:69:6e:8e:89:49:94:2d:2c:1b:68:ab:91:50:cd:
98:a0:fa:d5:9c:7f:54:6c:2b:76:33:67:81:d4:ca:
1e:ef:c8:4c:bf:02:77:c4:c3:1e:cc:ab:40:d5:3a:
e0:4e:36:63:65:8d:ca:09:19:06:62:18:9b:fc:5a:
0b:6d:2d:d9:45:60:8c:7f:83:60:1b:84:fb:2b:9b:
09:26:b8:a1:31:42:1b:79:7e:bf:27:d4:1c:97:09:
af:72:d5:ee:c1:76:a1:50:5b:dd:f8:b1:7d:eb:91:
ca:4c:cc:4a:69:62:4d:69:ff:78:65:63:23:bb:53:
ab:7e:a8:eb:7a:49:c3:46:3b:ef:c7:bd:d3:56:05:
5f:f8:02:a1:27:ea:11:4c:65:37:d6:6f:c7:f9:9a:
b2:ae:88:50:b2:05:0c:7c:2f:c6:1c:9d:84:f4:df:
b1:77:c5:0b:44:50:e4:dc:e0:ec:3e:a7:9e:d4:dc:
be:90:4b:1a:7f:dd:cf:c4:76:2e:25:75:2f:5e:fa:
3c:db:2c:56:5c:58:54:a7:22:a1:c2:c7:a0:9b:ea:
0d:f1:97:0b:ad:86:80:4c:7f:a5:c6:aa:e6:a8:54:
59:47:03:cd:e4:bf:00:aa:a0:aa:ee:bd:79:38:d6:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:7B:3D:88:56:36:AA:A6:4D:2D:AB:5D:24:8D:11:9D:38:70:75
X509v3 Authority Key Identifier:
keyid:DD:77:09:59:38:37:50:5A:B3:5E:C1:B9:C7:EE:B6:E7:6E:54:8F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XcJWTg3UFqzXsG5x-62525Uj5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d3ac4b-7ffc-47f0-94d2-652e0810c9f9/1/3XcJWTg3UFqzXsG5x-62525Uj5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d3ac4b-7ffc-47f0-94d2-652e0810c9f9/1/3XcJWTg3UFqzXsG5x-62525Uj5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:a5:9d:4a:c3:c0:2e:eb:7a:91:5a:33:88:72:12:da:b1:
c0:f8:4c:6f:42:c2:0e:61:8e:a4:4b:79:30:a5:3d:9a:0b:6e:
fd:83:d8:84:14:40:e6:4e:f5:1d:59:63:fc:10:be:28:62:3f:
8b:32:67:c1:8a:82:2d:c7:5c:95:f1:c8:fc:52:47:1d:7b:53:
13:f9:b2:38:60:ab:00:43:e5:53:db:43:44:f6:6b:bf:c3:b4:
b1:90:74:ad:f2:ab:40:1b:a3:ce:38:8e:64:b8:e4:b2:64:e9:
8c:9f:8d:ae:d7:75:f4:ae:c8:26:72:22:0e:a8:b2:57:53:46:
da:b6:5c:3e:c8:f4:3a:d8:67:f3:5f:12:6b:9e:ee:90:0f:49:
0d:7b:77:f5:df:c4:4d:66:68:01:e6:d2:07:79:c2:a7:16:d1:
2e:a0:9a:d6:8c:3d:48:78:0c:41:5e:fc:2e:de:11:77:0c:bd:
b2:8b:63:20:dc:ae:30:76:c8:e1:3b:54:42:a8:32:65:06:7c:
0a:f7:de:aa:e3:87:c6:e3:cd:39:41:2e:68:a3:89:6c:8a:3f:
0d:8b:15:ef:4e:22:39:28:b2:97:8d:40:6b:68:bf:24:9c:fc:
9e:6e:6b:50:2b:d3:2e:9e:0c:7c:b5:b7:5c:42:3c:4a:59:20:
e1:58:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:54 2025 by rpki-client