![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft
File: Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft (raw, json)
Hash identifier: O3WULpZ89Nlcfndal1Hw0MfbK6AXht1LwzPoWWYPxb0=
Subject key identifier: FE:33:66:26:62:F4:B9:12:A4:94:0F:2A:C7:22:A2:5E:9F:60:3B:76
Authority key identifier: 2E:5D:85:DC:24:E9:7D:58:11:A3:0F:F4:FD:7C:F7:AE:C1:2C:CC:6E
Certificate issuer: /CN=2e5d85dc24e97d5811a30ff4fd7cf7aec12ccc6e
Certificate serial: 0190772E52C516C2652C803947377FEEAE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ll2F3CTpfVgRow_0_Xz3rsEszG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft
Manifest number: 11F3
Signing time: Wed 03 Jul 2024 06:00:42 +0000
Manifest this update: Wed 03 Jul 2024 06:00:42 +0000
Manifest next update: Thu 04 Jul 2024 06:00:42 +0000
Files and hashes: 1: Ll2F3CTpfVgRow_0_Xz3rsEszG4.crl (hash: rpnGAcSrR4MrlSld/uTaNekjzuyk/0yWIra+YSWbIbE=)
2: p9_f3QWYc8u-hO71w-jW4kverKo.roa (hash: uJRvhhxMfsdr4Tv1r412h8aLjaFIfm9VLiSvIU5cRJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:2e:52:c5:16:c2:65:2c:80:39:47:37:7f:ee:ae:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5d85dc24e97d5811a30ff4fd7cf7aec12ccc6e
Validity
Not Before: Jul 3 06:00:42 2024 GMT
Not After : Jul 4 06:00:42 2024 GMT
Subject: CN=fe33662662f4b912a4940f2ac722a25e9f603b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e6:fb:4e:ea:e5:40:da:fb:a3:2e:f3:2c:0a:
77:b3:41:12:e6:8a:cf:c3:73:ac:97:73:7b:18:c9:
e9:ca:6f:f1:f6:01:3f:02:93:01:ff:cf:ad:3a:8e:
5a:3a:39:fd:6a:86:72:d7:06:47:73:9c:a2:9f:0f:
b0:c4:4e:5b:73:6e:3b:25:bb:e4:4e:6b:db:6f:23:
e3:c9:f2:9b:69:72:bc:36:ae:f3:bd:c6:d7:a1:58:
f6:8d:38:4b:0a:49:82:04:69:b9:57:a4:1d:de:fe:
c2:29:7f:53:8d:c3:04:8a:33:c9:51:d5:ed:60:c7:
80:ee:0b:36:04:41:c0:75:36:0f:81:d3:5a:6d:37:
5a:05:89:4b:d0:06:0b:7d:af:39:ed:46:f5:d2:a3:
6f:41:4b:d3:f6:a0:74:cc:5d:1a:c2:ba:ba:08:b2:
26:43:66:d3:ff:1c:a1:9a:3b:0b:bc:f3:46:fe:73:
ac:5f:74:88:4f:32:82:b7:6d:e5:58:b6:28:5f:d4:
7f:02:73:bb:0e:49:36:9b:aa:18:55:a8:a0:d5:31:
12:d2:a5:1a:5d:3b:5c:91:86:89:fd:89:c7:f1:90:
a0:44:6f:9f:75:90:37:c0:45:97:b1:64:d0:b3:c0:
19:6a:f2:56:be:c0:66:78:c0:bc:99:39:18:b5:6e:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:66:26:62:F4:B9:12:A4:94:0F:2A:C7:22:A2:5E:9F:60:3B:76
X509v3 Authority Key Identifier:
keyid:2E:5D:85:DC:24:E9:7D:58:11:A3:0F:F4:FD:7C:F7:AE:C1:2C:CC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ll2F3CTpfVgRow_0_Xz3rsEszG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a8383-aab0-4367-89c3-92b47adb2b90/1/Ll2F3CTpfVgRow_0_Xz3rsEszG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:73:a0:59:53:64:43:53:c3:51:06:c2:b5:5c:b3:a3:df:
e6:43:f5:60:6b:c9:d9:09:e2:fd:40:12:72:f0:4f:96:4a:c8:
60:f2:27:7e:cf:4b:54:8e:a0:b2:01:61:c2:9d:60:19:40:1d:
90:a0:34:43:de:0a:b1:e9:71:f2:bc:31:96:39:41:c1:a7:c1:
33:3e:21:41:c5:c8:a3:cd:d2:85:ad:65:4b:89:98:88:99:28:
ab:c1:71:f9:52:da:14:85:ae:4f:02:e8:40:46:ce:39:e2:38:
c9:5a:e4:e4:ef:5a:eb:70:56:06:eb:11:25:09:3b:fc:49:2d:
cb:85:d6:66:03:23:b9:38:7e:40:3a:10:6c:85:48:e3:ee:19:
ed:37:12:d2:5d:dd:bf:1d:24:9f:aa:9a:c4:b9:73:38:a0:da:
94:ae:b2:c4:e9:db:75:32:0a:92:9a:67:81:8b:f9:26:df:c0:
0c:eb:07:cf:59:ff:23:aa:d0:45:2b:6d:5e:f3:df:43:f2:eb:
55:f8:92:40:62:1f:9f:ab:1d:bf:29:16:9b:06:b0:04:cb:21:
9d:44:c5:01:a3:b3:35:a3:f7:fb:b0:3f:c6:57:42:7f:5e:1c:
a9:64:d9:85:3f:cd:b5:f0:94:6a:12:c9:6c:47:45:fb:f5:3f:
f8:ce:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:16 2025 by rpki-client