![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
File: AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft (raw, json)
Hash identifier: rBhKWLbJeJyPWiERgRTDNus+dkpgrMCV18d5ijDLfLs=
Subject key identifier: 3C:2F:4A:46:DF:EB:FE:E5:CA:F6:41:90:91:02:D1:3A:FA:27:18:54
Authority key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Certificate issuer: /CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Certificate serial: 275B27DB4FF075216E6C6F3CA2DE289A6D612475
Authority info access: rsync://dev.tw/rpki/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
Manifest number: 02C6
Signing time: Sun 24 Nov 2024 17:49:51 +0000
Manifest this update: Sun 24 Nov 2024 17:44:51 +0000
Manifest next update: Mon 25 Nov 2024 18:42:51 +0000
Files and hashes: 1: 326131323a646434373a333330303a3a2f34302d3438203d3e20323131313531.roa (hash: rdPrx+Vx1U/7x4HhZdRnb1qe3n5l7txV+MdjY3r6C/4=)
2: AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.crl (hash: Qqlts9+AZaD5kFZ0mZvwDfwdj2EVRrLmEdgehvADIsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:5b:27:db:4f:f0:75:21:6e:6c:6f:3c:a2:de:28:9a:6d:61:24:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Validity
Not Before: Nov 24 17:44:51 2024 GMT
Not After : Nov 25 18:42:51 2024 GMT
Subject: CN=3C2F4A46DFEBFEE5CAF641909102D13AFA271854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:00:e0:47:c2:53:37:33:05:cd:6d:75:13:
54:d4:7b:9a:00:23:d7:95:da:79:21:de:5e:e4:fd:
52:a5:9f:a3:8b:12:f6:9f:ed:ae:d3:57:a1:19:7a:
9a:9f:3f:fb:23:ff:61:e9:d1:ed:d3:af:96:6f:98:
4b:70:3c:fe:cb:2a:d3:a0:5e:ec:04:58:40:bb:06:
3b:bf:a8:a2:53:d9:4a:2b:33:92:bb:3b:bd:c8:07:
51:cb:ad:f4:ec:98:10:7b:23:85:f3:f7:3a:a4:b5:
a2:19:fb:db:17:ef:ee:b3:4c:78:0a:47:ea:8d:35:
79:ee:e7:dd:dd:94:9c:75:3c:1e:d6:af:7a:ab:d7:
bd:88:36:b0:e5:60:6a:af:a0:c5:ed:41:b7:d9:62:
10:d6:34:f1:b8:75:fe:12:1b:ac:30:9c:1c:1d:e6:
75:77:a1:ab:92:3b:f6:27:a7:65:7e:04:d4:58:5f:
2a:98:7a:1d:e0:0b:40:4f:b4:07:2f:ef:60:1e:bd:
4d:f7:e5:53:71:c8:7f:42:30:67:61:6f:70:47:be:
c7:37:f7:ce:ac:0e:f2:eb:05:ef:ef:f4:61:2a:11:
9e:49:0f:be:98:1f:e3:b9:25:27:23:26:cb:2a:ad:
61:50:93:d5:51:65:eb:fe:64:0f:63:74:1c:1f:6d:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:4A:46:DF:EB:FE:E5:CA:F6:41:90:91:02:D1:3A:FA:27:18:54
X509v3 Authority Key Identifier:
keyid:AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:ec:aa:98:59:58:4d:33:bf:5c:49:a8:8c:b3:95:9b:c5:
46:c5:67:bd:09:35:61:37:e7:51:2d:ea:e9:af:57:b7:7b:f1:
d4:15:3f:f1:fd:52:7d:b0:c4:6d:67:26:ba:59:60:b9:78:d9:
00:6e:ff:4a:e8:e2:16:54:c1:58:fa:e9:50:bf:5f:90:c2:f2:
ea:e7:8f:3e:22:b8:9a:cd:26:b8:0f:ac:9e:bf:ca:e9:d9:a9:
2b:8a:44:95:00:b4:19:d3:b0:db:f8:ff:7c:d8:0c:35:82:df:
12:80:dc:ea:d8:30:d9:1a:bf:1f:71:1b:2e:08:c8:63:9f:d6:
d8:8a:84:da:bd:41:17:cb:4b:a6:80:81:61:54:a4:7e:4a:72:
13:6b:10:f2:7e:10:2f:9f:54:33:d7:a7:67:61:d6:43:fd:7a:
a0:4f:07:71:85:39:30:df:5a:9d:f7:1c:a4:51:d5:de:89:3e:
cd:68:c0:f2:37:bb:a3:91:f4:09:1e:3c:dd:7f:75:cd:55:ab:
be:20:df:21:54:0e:d2:bf:5d:23:0a:01:27:be:4b:13:1e:d9:
7e:a6:9f:db:86:c2:cf:7e:53:c8:f7:20:6c:85:9b:cd:6e:09:
5a:72:89:aa:ea:08:ea:f2:be:b0:6b:fb:31:1e:c1:42:24:e1:
37:16:41:0e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJ1sn20/wdSFubG88ot4omm1hJHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxMjQ3MkRBMUUwQUZEMkIwRTlENURDNkY0RURFMTZD
NEQxMTFDRjAeFw0yNDExMjQxNzQ0NTFaFw0yNDExMjUxODQyNTFaMDMxMTAvBgNV
BAMTKDNDMkY0QTQ2REZFQkZFRTVDQUY2NDE5MDkxMDJEMTNBRkEyNzE4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jgDgR8JTNzMFzW11E1TUe5oA
I9eV2nkh3l7k/VKln6OLEvaf7a7TV6EZepqfP/sj/2Hp0e3Tr5ZvmEtwPP7LKtOg
XuwEWEC7Bju/qKJT2UorM5K7O73IB1HLrfTsmBB7I4Xz9zqktaIZ+9sX7+6zTHgK
R+qNNXnu593dlJx1PB7Wr3qr172INrDlYGqvoMXtQbfZYhDWNPG4df4SG6wwnBwd
5nV3oauSO/Ynp2V+BNRYXyqYeh3gC0BPtAcv72AevU335VNxyH9CMGdhb3BHvsc3
986sDvLrBe/v9GEqEZ5JD76YH+O5JScjJssqrWFQk9VRZev+ZA9jdBwfbaa/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUPC9KRt/r/uXK9kGQkQLROvonGFQwHwYDVR0j
BBgwFoAUrhJHLaHgr9Kw6dXcb07eFsTREc8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzIvQUUxMjQ3MkRBMUUwQUZEMkIwRTlENURDNkY0RURFMTZDNEQxMTFDRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL2Rldi50dy9y
cGtpL0FTOTQ1LzEvQUUxMjQ3MkRBMUUwQUZEMkIwRTlENURDNkY0RURFMTZDNEQx
MTFDRi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jMTI4MjcxZS1j
MjY5LTQ5NTQtODdkYi1kMTg0ZGYxN2Y4NWMvMi9BRTEyNDcyREExRTBBRkQyQjBF
OUQ1REM2RjRFREUxNkM0RDExMUNGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKXsqphZWE0zv1xJqIyz
lZvFRsVnvQk1YTfnUS3q6a9Xt3vx1BU/8f1SfbDEbWcmullguXjZAG7/SujiFlTB
WPrpUL9fkMLy6uePPiK4ms0muA+snr/K6dmpK4pElQC0GdOw2/j/fNgMNYLfEoDc
6tgw2Rq/H3EbLgjIY5/W2IqE2r1BF8tLpoCBYVSkfkpyE2sQ8n4QL59UM9enZ2HW
Q/16oE8HcYU5MN9anfccpFHV3ok+zWjA8je7o5H0CR483X91zVWrviDfIVQO0r9d
IwoBJ75LEx7Zfqaf24bCz35TyPcgbIWbzW4JWnKJquoI6vK+sGv7MR7BQiThNxZB
Dg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:47 2025 by rpki-client