![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
File: 28D274261297C12288EF52D49B3AA9F60111564B.mft (raw, json)
Hash identifier: YbQnXTkzantKPeIYqY8OTZNEh041ShhjkAFfbqGMQJw=
Subject key identifier: 1E:F6:18:91:B1:A8:5D:0B:79:5B:91:2E:A6:DF:A3:1E:B4:20:8E:5D
Authority key identifier: 28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B
Certificate issuer: /CN=28d274261297c12288ef52d49b3aa9f60111564b
Certificate serial: 77101CDE47FF31FF90D51A6A61F892C2E6919718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
Manifest number: 0175
Signing time: Sun 30 Jun 2024 01:29:03 +0000
Manifest this update: Sun 30 Jun 2024 01:24:03 +0000
Manifest next update: Mon 01 Jul 2024 05:24:03 +0000
Files and hashes: 1: 28D274261297C12288EF52D49B3AA9F60111564B.crl (hash: qu0KvYVgstZ7ODLu4i9PKpgnmQ3LmfSvKLsWpZnO2j4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:10:1c:de:47:ff:31:ff:90:d5:1a:6a:61:f8:92:c2:e6:91:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d274261297c12288ef52d49b3aa9f60111564b
Validity
Not Before: Jun 30 01:24:03 2024 GMT
Not After : Jul 1 05:24:03 2024 GMT
Subject: CN=1EF61891B1A85D0B795B912EA6DFA31EB4208E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:b4:b0:d3:72:f5:c9:74:3f:9d:09:29:49:
c4:6e:50:4c:3a:d1:c1:c8:f1:a3:36:07:2f:ad:84:
6c:b8:01:4e:a2:aa:5c:7a:48:9d:fd:5b:99:0f:2a:
38:98:68:7f:8c:dc:65:dd:a0:3c:ba:7c:2f:83:b1:
a9:95:0f:eb:1d:f2:c3:4a:f1:a0:fd:e9:fb:00:a0:
14:0d:7c:f9:f0:d9:e7:58:e6:65:00:29:ad:b5:2c:
7d:53:7b:19:99:06:db:d3:92:0f:5b:a0:7f:f6:02:
8d:a3:6f:65:e9:a3:ff:bc:df:f5:a0:84:fa:b4:e6:
f8:88:e9:4b:42:08:aa:ca:58:a6:56:67:6a:1f:7f:
15:d1:9b:d5:2b:58:d3:10:78:89:a5:25:dc:e0:98:
c7:7d:53:60:aa:a2:04:6d:1e:9a:12:73:98:5e:be:
01:56:e5:cd:4c:dc:81:9e:82:bd:e8:2b:b7:8c:23:
2f:68:b1:c1:fa:f1:fe:0a:ae:86:e9:a4:31:1d:db:
da:2d:ee:57:bb:ec:37:f2:b7:a4:32:7f:bd:8c:78:
22:4e:5a:0a:8c:5d:8c:e3:f2:57:08:81:fd:ce:a8:
c0:7d:cd:36:5c:a7:e1:82:d3:f6:ae:5e:2d:e4:19:
59:ae:4f:c0:d6:9f:8b:59:22:1e:b2:33:d5:75:61:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:18:91:B1:A8:5D:0B:79:5B:91:2E:A6:DF:A3:1E:B4:20:8E:5D
X509v3 Authority Key Identifier:
keyid:28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b6:c9:36:e0:d4:c5:04:bb:cb:79:94:05:53:13:95:a7:83:
ec:fc:a5:7f:35:c9:c1:93:4a:a6:56:cd:1b:ed:ba:44:fd:4d:
fc:dd:94:37:d0:b7:30:62:54:a2:09:5f:76:0c:76:44:cd:f4:
0d:97:ce:c7:48:53:b7:28:00:1c:2a:2b:01:4b:a3:5e:e1:17:
e8:50:e3:2d:2c:db:19:cd:05:73:b7:73:73:73:48:bf:6b:c2:
56:3c:10:a0:fc:40:16:47:08:b8:ff:a3:41:1c:2f:85:fa:b3:
bd:9c:76:83:e3:d9:22:b5:16:33:12:bc:ac:fc:a2:7f:bb:1e:
b1:db:fe:32:56:d9:32:23:9d:eb:84:c8:bb:0a:0b:cc:c4:cc:
b8:83:a0:bf:83:9c:78:a2:c9:e1:36:56:11:e7:6f:22:93:ec:
4b:89:5d:32:a8:ef:e6:e9:34:91:da:0f:b7:6f:df:26:ba:86:
1d:f4:89:5c:e0:d8:36:64:88:ae:4a:8e:7a:7e:9d:6a:d6:ca:
b6:2c:57:58:73:0a:29:c9:90:2b:b8:72:06:ac:15:dd:a6:69:
ba:88:02:52:3c:5c:62:42:8a:56:1d:af:e6:56:bf:15:72:86:
f9:43:e3:09:fe:a6:a2:fa:99:38:29:1b:ab:cc:2a:91:ad:c5:
11:5d:8b:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdxAc3kf/Mf+Q1RpqYfiSwuaRlxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhkMjc0MjYxMjk3YzEyMjg4ZWY1MmQ0OWIzYWE5ZjYw
MTExNTY0YjAeFw0yNDA2MzAwMTI0MDNaFw0yNDA3MDEwNTI0MDNaMDMxMTAvBgNV
BAMTKDFFRjYxODkxQjFBODVEMEI3OTVCOTEyRUE2REZBMzFFQjQyMDhFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhJrSw03L1yXQ/nQkpScRuUEw6
0cHI8aM2By+thGy4AU6iqlx6SJ39W5kPKjiYaH+M3GXdoDy6fC+DsamVD+sd8sNK
8aD96fsAoBQNfPnw2edY5mUAKa21LH1TexmZBtvTkg9boH/2Ao2jb2Xpo/+83/Wg
hPq05viI6UtCCKrKWKZWZ2offxXRm9UrWNMQeImlJdzgmMd9U2CqogRtHpoSc5he
vgFW5c1M3IGegr3oK7eMIy9oscH68f4KrobppDEd29ot7le77Dfyt6Qyf72MeCJO
WgqMXYzj8lcIgf3OqMB9zTZcp+GC0/auXi3kGVmuT8DWn4tZIh6yM9V1YZVBAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHvYYkbGoXQt5W5Eupt+jHrQgjl0wHwYDVR0j
BBgwFoAUKNJ0JhKXwSKI71LUmzqp9gERVkswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8yNC8yOEQyNzQyNjEyOTdDMTIyODhFRjUyRDQ5QjNBQTlGNjAxMTE1NjRC
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS05KMEpoS1h3U0tJNzFMVW16cXA5
Z0VSVmtzLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMjQvMjhEMjc0MjYxMjk3QzEy
Mjg4RUY1MkQ0OUIzQUE5RjYwMTExNTY0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIm2yTbg1MUEu8t5
lAVTE5Wng+z8pX81ycGTSqZWzRvtukT9TfzdlDfQtzBiVKIJX3YMdkTN9A2XzsdI
U7coABwqKwFLo17hF+hQ4y0s2xnNBXO3c3NzSL9rwlY8EKD8QBZHCLj/o0EcL4X6
s72cdoPj2SK1FjMSvKz8on+7HrHb/jJW2TIjneuEyLsKC8zEzLiDoL+DnHiiyeE2
VhHnbyKT7EuJXTKo7+bpNJHaD7dv3ya6hh30iVzg2DZkiK5Kjnp+nWrWyrYsV1hz
CinJkCu4cgasFd2mabqIAlI8XGJCilYdr+ZWvxVyhvlD4wn+pqL6mTgpG6vMKpGt
xRFdi8k=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:43 2025 by rpki-client