![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft
File: B94FD58785AD63D80164954186C24BEA7CDAA27C.mft (raw, json)
Hash identifier: TKOQdS8hH5XTC84jjkr5OK7wkmNPCSHI2srJ+YJ3I+0=
Subject key identifier: 47:E7:A9:75:FC:B5:33:B6:82:1A:F0:F7:3A:C1:30:A9:65:3D:37:59
Authority key identifier: B9:4F:D5:87:85:AD:63:D8:01:64:95:41:86:C2:4B:EA:7C:DA:A2:7C
Certificate issuer: /CN=b94fd58785ad63d80164954186c24bea7cdaa27c
Certificate serial: 3955B4B46BDB938669059A147FF46314CDAB9F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU_Vh4WtY9gBZJVBhsJL6nzaonw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft
Manifest number: 02
Signing time: Fri 08 Sep 2023 09:00:08 +0000
Manifest this update: Fri 08 Sep 2023 08:55:08 +0000
Manifest next update: Sat 09 Sep 2023 12:43:08 +0000
Files and hashes: 1: B94FD58785AD63D80164954186C24BEA7CDAA27C.crl (hash: anl0GLd3czW7tma73G1YGCuOD3JAkNy44QWKxeWyDAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:55:b4:b4:6b:db:93:86:69:05:9a:14:7f:f4:63:14:cd:ab:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94fd58785ad63d80164954186c24bea7cdaa27c
Validity
Not Before: Sep 8 08:55:08 2023 GMT
Not After : Sep 9 12:43:08 2023 GMT
Subject: CN=47E7A975FCB533B6821AF0F73AC130A9653D3759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:47:c4:0f:49:8e:db:34:3e:d3:e1:98:95:
2e:f2:28:d9:72:fe:31:7b:ca:f8:d9:40:f4:0c:7e:
26:d9:f1:bd:b8:61:57:6a:68:e8:e5:27:a6:cf:c7:
f8:d1:a0:1f:19:a7:f8:5f:c1:d9:fd:7a:26:80:e0:
7c:8b:71:cd:54:a5:b4:3b:b2:a5:09:a7:9c:06:7c:
cb:f1:64:60:55:f9:b6:3c:27:83:70:1c:78:22:fd:
9b:2e:69:63:47:ff:50:97:39:87:84:59:f5:1e:03:
00:a7:12:bc:2b:43:e6:a8:46:fc:53:68:6e:89:a2:
e4:eb:ff:ab:97:e2:10:de:80:6a:2e:85:51:80:86:
6a:3f:d7:81:6b:85:ea:8d:88:ff:2b:11:a5:1f:b4:
e3:2a:0a:45:ca:40:cd:97:29:ba:48:49:10:88:b9:
15:d8:a3:8d:98:bd:d2:ac:62:da:7d:c4:f6:9e:6a:
b0:86:6b:bf:85:8e:b7:ff:2e:05:d5:f4:7f:b0:df:
19:f6:10:e1:ea:57:5b:7b:f6:6d:44:70:94:b3:67:
d7:1f:53:44:38:b5:43:fb:05:3a:13:af:41:4c:26:
1b:ec:69:58:2a:5d:09:c6:37:84:fd:18:83:dd:11:
9f:ad:83:d2:6e:3d:b8:af:8d:59:b2:e4:b0:4a:42:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:A9:75:FC:B5:33:B6:82:1A:F0:F7:3A:C1:30:A9:65:3D:37:59
X509v3 Authority Key Identifier:
keyid:B9:4F:D5:87:85:AD:63:D8:01:64:95:41:86:C2:4B:EA:7C:DA:A2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU_Vh4WtY9gBZJVBhsJL6nzaonw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a224b13-9254-4669-9459-04698ac624a4/0/B94FD58785AD63D80164954186C24BEA7CDAA27C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f0:d2:66:d1:d0:a2:20:c5:0c:ec:bb:c6:66:8e:53:02:8e:
8d:4f:16:fb:ab:96:b8:58:17:40:b4:27:39:62:5e:d7:50:bb:
c9:76:cb:cb:ae:45:31:23:73:0a:fa:a3:35:76:08:ce:9e:c4:
ca:36:ec:26:cc:24:b2:2e:d9:b0:01:03:9a:07:8f:96:93:15:
8f:f0:89:8c:ac:23:2d:53:30:1c:be:7b:7a:21:ba:4d:fa:be:
8f:81:f1:7b:d7:7b:7e:f6:dc:d0:27:c9:a2:96:04:aa:db:a8:
51:9a:4e:f3:e4:37:5f:23:bf:f8:38:b4:67:dd:15:30:36:a7:
fa:c8:50:bd:aa:11:72:dc:93:4c:f0:1a:97:9b:5a:22:a3:c8:
97:48:22:02:6a:e8:81:d4:0d:97:b8:2c:a0:d4:af:9b:cb:b0:
c8:fb:73:09:e9:91:b6:7a:3b:7d:8b:ec:0d:a8:d6:8d:8a:48:
44:61:d9:de:6a:d6:f4:4a:17:96:cd:73:17:fd:5a:02:7d:1c:
1e:a4:54:c9:06:78:8c:4a:0e:c7:c2:c8:1c:d5:77:30:15:21:
16:67:df:42:1e:65:7a:77:74:26:c1:36:31:b2:50:51:c0:15:
8b:1c:d8:ca:e2:d2:15:84:2e:4f:60:0f:29:3f:3f:38:60:ac:
68:f5:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:26 2025 by rpki-client