![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
File: 4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft (raw, json)
Hash identifier: CWBYfsElhkwKMHGbXm9VCDk+aftYpebL3PG/1AV0TZQ=
Subject key identifier: AC:42:BB:96:67:AE:DC:39:73:87:3E:42:43:1F:BB:8D:BF:E9:FC:7F
Authority key identifier: 4A:E2:AC:2E:3A:0C:9B:F1:EE:26:C1:63:A7:0C:F6:66:19:2F:7B:2F
Certificate issuer: /CN=4ae2ac2e3a0c9bf1ee26c163a70cf666192f7b2f
Certificate serial: 12BDA1830690264D4393F8ED75D147FD1409CA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuKsLjoMm_HuJsFjpwz2Zhkvey8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
Manifest number: 65
Signing time: Sun 20 Oct 2024 23:19:32 +0000
Manifest this update: Sun 20 Oct 2024 23:14:32 +0000
Manifest next update: Mon 21 Oct 2024 23:19:32 +0000
Files and hashes: 1: 4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.crl (hash: b5omap0mmyTynxiJ1G9SeET1UUjhNl4alQ941zw5siI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bd:a1:83:06:90:26:4d:43:93:f8:ed:75:d1:47:fd:14:09:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae2ac2e3a0c9bf1ee26c163a70cf666192f7b2f
Validity
Not Before: Oct 20 23:14:32 2024 GMT
Not After : Oct 21 23:19:32 2024 GMT
Subject: CN=AC42BB9667AEDC3973873E42431FBB8DBFE9FC7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d4:41:ae:4e:f8:c2:43:fe:5f:5b:af:62:9f:
82:ee:4d:4a:48:37:07:89:6d:13:b0:a1:8b:2f:d9:
33:9f:98:c9:87:ec:6a:85:fd:e1:97:1e:e6:93:26:
6b:f8:82:0c:db:36:62:c9:94:f4:39:fd:91:ac:7b:
85:ce:1e:a4:2a:f3:74:59:c5:39:49:d4:5d:7d:58:
44:80:3a:6c:9a:3d:0f:9f:5e:2a:f4:ea:34:88:4d:
40:96:c0:e0:fc:56:dd:24:84:9d:2b:68:07:b9:a2:
d4:4a:1f:c9:69:af:a1:ba:10:7d:b6:ac:61:3e:64:
76:71:20:dd:62:00:23:fa:20:b3:6a:47:ad:e3:3a:
23:e1:36:75:5e:b6:15:5e:2e:d3:4a:15:75:6a:b0:
15:20:67:4c:b1:04:8a:77:1a:61:4a:2a:ac:75:cc:
d1:5f:5f:40:83:42:c7:31:de:6e:85:a5:cd:e1:5a:
d2:62:b4:75:ac:59:9e:d4:c9:01:8a:53:42:58:3a:
76:09:64:b6:4d:9d:72:75:51:a2:09:63:6e:aa:ca:
14:7b:5e:89:0e:e1:b5:e5:11:44:0d:e0:33:dc:3b:
51:e6:3c:d6:5b:d6:df:f5:10:ac:1b:33:a7:a8:73:
0b:9a:19:ce:f0:8a:08:ab:e7:ed:34:19:e2:20:44:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:42:BB:96:67:AE:DC:39:73:87:3E:42:43:1F:BB:8D:BF:E9:FC:7F
X509v3 Authority Key Identifier:
keyid:4A:E2:AC:2E:3A:0C:9B:F1:EE:26:C1:63:A7:0C:F6:66:19:2F:7B:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuKsLjoMm_HuJsFjpwz2Zhkvey8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:d6:e6:00:70:87:31:6d:95:fd:94:f3:10:03:7f:c0:3d:
e8:8b:99:04:7f:84:17:b9:f0:e2:30:ae:a5:e5:f9:27:80:56:
7c:5b:98:c8:c4:b6:2f:02:9e:62:a4:ca:22:52:c6:8d:d8:61:
f0:1c:b9:ba:cc:43:46:91:aa:d9:b8:e2:50:12:56:8c:59:f6:
f5:20:a7:9c:ac:a8:40:00:88:f8:35:07:64:2c:eb:87:66:a9:
b0:a2:91:74:99:a0:4b:a5:ea:3f:73:ea:f4:75:27:f6:a8:72:
01:65:cc:cf:71:32:64:74:eb:a2:24:8c:f6:ac:9a:54:70:87:
ea:8d:6e:65:55:b9:ed:a2:1f:4c:97:70:c5:92:26:fd:8e:6c:
56:bc:07:d5:d5:22:0e:66:ad:33:25:8b:fb:6e:d8:9d:4d:01:
2e:fb:e2:a9:a5:dd:15:81:a6:5c:e0:16:9d:7f:d4:11:db:4d:
6b:53:3b:1a:9c:1b:52:ad:ba:7c:fd:74:ab:a5:9c:48:1b:64:
99:90:29:f2:90:f6:3e:a6:c3:e0:e8:5a:fa:61:95:fc:be:6f:
0d:4c:f0:45:d8:72:07:e1:e1:2b:d4:44:ca:aa:3a:9f:9e:2a:
77:ea:c0:92:10:cb:c4:32:6d:86:a8:a6:06:5c:fa:9c:73:4b:
cc:44:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:37 2025 by rpki-client