![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/0/0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.mft
File: 0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.mft (raw, json)
Hash identifier: dvjpxLQ/vqqBZnv3l1W1L6gk3d20/6p5FO+a55XdLWM=
Subject key identifier: 48:9A:1C:16:B7:24:7E:74:93:FC:03:B1:4B:29:B2:3F:F7:65:A9:AE
Authority key identifier: 0D:2F:D5:12:8A:CF:54:40:36:35:A1:A1:F6:AE:EF:37:34:14:BA:3D
Certificate issuer: /CN=0d2fd5128acf54403635a1a1f6aeef373414ba3d
Certificate serial: 102734910B58D22306D6D1166A4CCBFB64AB58CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS_VEorPVEA2NaGh9q7vNzQUuj0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/0/0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.mft
Manifest number: 57
Signing time: Sun 10 Dec 2023 21:39:20 +0000
Manifest this update: Sun 10 Dec 2023 21:34:20 +0000
Manifest next update: Tue 12 Dec 2023 01:23:20 +0000
Files and hashes: 1: 0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.crl (hash: L3jtY7h3v5LDZC4iVdwR7R3IQJzsnO+3p/j8LzdrWbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:27:34:91:0b:58:d2:23:06:d6:d1:16:6a:4c:cb:fb:64:ab:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2fd5128acf54403635a1a1f6aeef373414ba3d
Validity
Not Before: Dec 10 21:34:20 2023 GMT
Not After : Dec 12 01:23:20 2023 GMT
Subject: CN=489A1C16B7247E7493FC03B14B29B23FF765A9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:9a:94:c7:73:77:c9:ad:87:04:5b:40:aa:
9d:91:23:bf:03:c0:c1:a6:5a:8f:05:c3:61:74:f1:
05:3a:93:c4:01:87:90:01:29:4d:92:4f:eb:c1:b1:
21:36:e8:7c:92:f4:e1:f1:f4:d5:d9:1e:a6:7d:21:
47:03:b4:04:49:6c:62:82:f7:db:d9:26:76:96:cd:
e7:f0:df:e9:9c:7e:7a:ef:df:36:b5:46:c2:a0:8c:
bc:2b:3c:db:c0:04:73:9d:05:9e:e9:38:9e:be:9e:
59:bc:69:c0:92:71:99:a1:fa:2e:a5:23:5d:6e:f5:
81:1c:43:f3:5d:05:a6:4b:d1:b8:64:8d:37:f4:df:
07:7f:e0:92:66:fc:fb:86:a2:ac:08:3d:2f:06:40:
94:72:df:d9:0a:35:3a:72:c3:e7:01:d9:c8:eb:b0:
2c:33:bd:ad:2d:2a:54:75:77:d2:2a:1c:71:05:38:
1f:e7:a3:61:84:1a:24:8d:83:f4:51:0b:45:70:c2:
7d:ce:72:d5:3f:1d:5e:06:4e:8e:e5:57:64:0b:18:
70:19:74:b9:20:4a:72:dd:75:32:31:fc:5b:30:ed:
83:3a:3c:d8:1d:6a:2f:03:08:d6:2e:b0:0e:1a:6b:
65:a0:ed:b4:a8:18:14:e5:64:11:3f:cf:46:0f:42:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:1C:16:B7:24:7E:74:93:FC:03:B1:4B:29:B2:3F:F7:65:A9:AE
X509v3 Authority Key Identifier:
keyid:0D:2F:D5:12:8A:CF:54:40:36:35:A1:A1:F6:AE:EF:37:34:14:BA:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/0/0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS_VEorPVEA2NaGh9q7vNzQUuj0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1231fd86-c539-46c7-89e9-f3756f3075fa/0/0D2FD5128ACF54403635A1A1F6AEEF373414BA3D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:15:4d:fd:49:f5:5f:ad:cd:5d:bc:ec:e6:c4:10:29:d1:69:
f6:f8:d1:f5:bc:e2:4d:4d:8f:31:f5:bd:4d:34:77:7a:af:c6:
50:61:d8:8d:f5:26:34:b7:62:07:e3:19:40:ed:b8:28:ef:c9:
10:ac:b9:bd:e7:56:d1:80:2e:be:c9:67:54:3c:17:87:bc:e2:
0f:a6:ad:d0:22:ae:c4:c2:21:ab:e2:b1:8b:4c:d6:64:e7:b2:
a5:49:50:a0:0a:25:1f:9e:5f:c8:90:38:48:8b:84:02:15:c4:
dd:cc:c9:53:ca:bc:f0:d9:06:29:6d:30:84:4d:6e:58:9e:76:
d1:3f:0d:10:26:fc:12:0a:93:44:23:03:3e:ca:ee:69:20:65:
fb:9f:34:39:e9:a8:04:b7:2b:27:82:77:93:66:84:d7:cb:a4:
d4:85:94:2f:a2:ad:a2:c0:cf:ec:14:bb:cc:a9:c2:66:7f:4c:
0e:8a:db:31:43:46:bf:af:78:66:da:16:e8:2c:f9:c7:11:81:
6c:ea:e9:d0:d8:55:0c:0c:02:57:79:e6:15:93:af:8d:18:4d:
3b:c3:6f:05:03:e6:7b:fa:48:69:a2:31:ac:10:30:72:6a:a9:
25:ae:e6:ac:99:a6:7b:b4:57:a6:79:fa:8c:16:1e:e0:1f:57:
45:e4:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:59 2025 by rpki-client