![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft
File: A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft (raw, json)
Hash identifier: JRzX486Wn/RRMsyJzAolmos+MDInnvAIsib9sozWjfw=
Subject key identifier: F1:68:9A:A1:09:DE:B5:AD:8D:C3:BB:57:EB:48:F8:5F:97:AF:82:18
Authority key identifier: A7:13:C7:6E:92:B2:CC:B5:BE:50:16:65:22:7F:BB:8C:A2:6B:00:48
Certificate issuer: /CN=a713c76e92b2ccb5be501665227fbb8ca26b0048
Certificate serial: 0F90DB7B290912B2A8C25D98859081A236AB8B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxPHbpKyzLW-UBZlIn-7jKJrAEg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft
Manifest number: 12
Signing time: Tue 25 Jun 2024 19:37:48 +0000
Manifest this update: Tue 25 Jun 2024 19:32:48 +0000
Manifest next update: Wed 26 Jun 2024 22:38:48 +0000
Files and hashes: 1: A713C76E92B2CCB5BE501665227FBB8CA26B0048.crl (hash: jLTK40Vv9IWaVBbStB4TpmMYz3V8yjPTdK3DfUm9xWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:90:db:7b:29:09:12:b2:a8:c2:5d:98:85:90:81:a2:36:ab:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a713c76e92b2ccb5be501665227fbb8ca26b0048
Validity
Not Before: Jun 25 19:32:48 2024 GMT
Not After : Jun 26 22:38:48 2024 GMT
Subject: CN=F1689AA109DEB5AD8DC3BB57EB48F85F97AF8218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:8f:b9:81:31:89:2a:4e:8f:51:90:a9:3d:
b2:4e:a6:e4:06:34:68:2b:95:2d:db:ea:6a:9f:8c:
18:67:81:0f:b4:ae:fa:b3:be:e7:8d:a4:fd:66:80:
56:b7:ea:34:08:4c:7b:21:c3:74:6e:c0:79:25:10:
d2:e9:ec:19:06:30:18:a5:99:40:01:18:ca:27:44:
6d:82:cc:9b:58:0d:25:d7:fd:60:92:ec:58:e4:a5:
fe:58:33:85:83:b2:1c:85:12:62:c8:ed:32:c9:a2:
a5:91:24:fb:27:1e:46:05:be:69:8a:a0:7d:ea:82:
f9:67:a6:f4:87:1d:36:42:95:03:7d:35:b4:f5:7e:
8e:a2:47:e7:46:35:0b:83:b9:b6:a9:77:ef:7d:6d:
12:ff:bf:42:10:7a:42:b9:d1:40:39:f2:81:68:80:
37:4d:c8:2d:2c:78:58:d0:9e:81:57:1a:0c:b1:0f:
61:fb:bb:2c:a2:ef:ba:2c:0e:e8:7f:e2:fe:70:ff:
cb:67:db:f8:41:09:b1:a5:d7:1d:72:01:fa:4d:4d:
50:a7:dd:a1:eb:91:fb:00:6c:83:9f:b2:9e:b0:51:
97:a7:5c:41:1c:81:4e:d0:90:49:37:33:3f:ae:1e:
7e:fe:4f:b8:69:f9:9e:e1:8d:57:e3:66:cb:b9:56:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:9A:A1:09:DE:B5:AD:8D:C3:BB:57:EB:48:F8:5F:97:AF:82:18
X509v3 Authority Key Identifier:
keyid:A7:13:C7:6E:92:B2:CC:B5:BE:50:16:65:22:7F:BB:8C:A2:6B:00:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxPHbpKyzLW-UBZlIn-7jKJrAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/0/A713C76E92B2CCB5BE501665227FBB8CA26B0048.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:6c:cc:a7:3c:6d:f9:e7:9f:01:86:d2:ed:f2:59:3b:62:
11:2d:dd:54:3a:a0:0f:1b:00:58:63:82:b2:01:e6:1b:c9:c7:
9b:86:24:eb:43:88:91:f4:56:51:1c:d2:f5:ed:37:ed:31:6b:
73:99:e2:89:94:96:80:5a:60:38:02:a6:11:c5:41:c0:86:76:
79:ae:51:d1:2f:95:03:f0:ac:20:64:ed:ec:b0:c0:d6:b8:c0:
88:5e:42:77:b3:bc:24:78:a0:c5:10:33:82:4f:43:77:9f:ca:
86:80:10:88:58:af:29:45:99:c1:20:29:45:83:82:f1:2e:50:
e7:45:0c:f3:28:d7:42:69:4e:0c:89:80:c0:01:a6:d3:f3:72:
1e:98:a8:f1:64:af:d6:ad:06:93:0b:d0:e4:04:70:9b:7e:83:
b8:75:d5:ee:9b:97:9e:70:1a:87:d0:d7:f3:ec:87:e1:b6:69:
b5:87:a8:ee:15:ef:2e:e5:ef:cc:4e:27:c2:f3:8a:4a:9b:94:
5b:49:94:15:f7:b5:f9:21:87:ac:bc:df:5f:05:bd:04:b4:66:
ea:a5:ff:22:18:6c:cc:9f:f9:92:f4:e8:9c:a2:bc:f0:db:40:
1e:ac:59:28:7e:5e:bd:66:97:d1:05:16:5e:07:57:f8:fb:c8:
6f:37:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:54 2025 by rpki-client