![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
File: 3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft (raw, json)
Hash identifier: c/eJdWU8z3lczrA7s2Rzu8F0h8Y6GBcj+ODuL7iwZzM=
Subject key identifier: D9:F6:8C:0B:FC:51:D5:7E:E4:20:D6:BD:BD:E3:C3:F8:D2:2A:15:6B
Authority key identifier: 34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75
Certificate issuer: /CN=3489625418bf8a48ef4e82dfda81e7e427c6b975
Certificate serial: 0A35AED28FBE38D47A144B45B86CA701A072CE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIliVBi_ikjvToLf2oHn5CfGuXU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
Manifest number: 02
Signing time: Thu 18 May 2023 15:25:22 +0000
Manifest this update: Thu 18 May 2023 15:20:22 +0000
Manifest next update: Fri 19 May 2023 17:22:22 +0000
Files and hashes: 1: 3489625418BF8A48EF4E82DFDA81E7E427C6B975.crl (hash: reRSW3zdyqhz8QLv33VnyIcFdxzw/SkZLkSXl+4eIhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:35:ae:d2:8f:be:38:d4:7a:14:4b:45:b8:6c:a7:01:a0:72:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3489625418bf8a48ef4e82dfda81e7e427c6b975
Validity
Not Before: May 18 15:20:22 2023 GMT
Not After : May 19 17:22:22 2023 GMT
Subject: CN=D9F68C0BFC51D57EE420D6BDBDE3C3F8D22A156B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:fa:5f:da:a3:ef:9e:4d:28:93:bc:f1:e9:
61:fb:3a:95:8b:ba:b2:3d:93:98:5e:65:9c:88:e9:
91:2c:73:ab:4a:d5:32:61:75:59:62:d5:05:9b:aa:
f4:20:05:27:45:66:5a:3e:c4:84:82:46:7c:b6:97:
0b:56:0b:29:80:5d:bc:cc:9c:b4:26:ab:13:54:58:
01:71:50:b6:f2:54:38:a8:e7:05:70:fd:b2:7a:45:
59:4e:12:19:16:fe:18:03:6f:57:4c:e5:0c:87:b1:
a0:01:13:2d:47:89:23:f8:e9:e1:12:66:31:d0:c9:
20:24:2c:d8:4e:1a:41:27:a2:a3:67:a7:11:3d:ed:
15:71:f5:fd:b6:c0:bd:38:f6:51:bf:43:d5:d5:a5:
82:bd:1b:d5:0f:24:8f:9d:92:9c:40:eb:37:2a:a3:
9c:49:66:be:d1:5f:87:8b:db:b9:04:a5:37:2c:a4:
39:f6:73:77:d7:c7:7f:99:6a:ce:64:95:02:51:db:
9d:57:92:25:e3:63:70:94:65:e6:7b:a4:19:8d:ed:
5b:22:f0:72:3d:f8:a5:87:50:03:54:a6:4a:10:57:
52:f0:72:26:84:b0:e8:f3:a3:d9:f9:0e:78:01:41:
06:f2:63:eb:27:d0:5f:e3:37:5d:31:9e:3c:92:1b:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:8C:0B:FC:51:D5:7E:E4:20:D6:BD:BD:E3:C3:F8:D2:2A:15:6B
X509v3 Authority Key Identifier:
keyid:34:89:62:54:18:BF:8A:48:EF:4E:82:DF:DA:81:E7:E4:27:C6:B9:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIliVBi_ikjvToLf2oHn5CfGuXU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f668aa8b-36be-4c70-a687-47558ae70b89/0/3489625418BF8A48EF4E82DFDA81E7E427C6B975.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:8a:86:09:a9:f4:b0:2b:24:ee:22:bb:d4:d0:03:2c:67:
b4:2e:08:58:cd:ea:27:cb:0e:d3:8c:0f:5a:e1:5e:4d:b2:32:
70:fd:56:c6:0d:5f:66:b4:e9:a9:4f:f8:b5:93:1c:b6:e9:91:
8d:e6:ae:12:fb:8d:0d:09:3f:74:35:b4:f1:ae:cf:40:ec:0d:
0a:ed:b3:28:ef:22:2d:49:db:8d:6a:5b:0f:c2:b5:5b:36:d2:
b2:c1:4a:0a:53:99:65:2a:b3:c3:02:e2:2c:b8:82:6e:01:1b:
86:4f:ac:9b:5e:34:3d:92:7a:dc:5a:a4:1e:6a:c1:8d:db:fe:
c1:77:50:7e:45:90:84:84:bc:56:77:84:52:c4:1d:a9:0f:e2:
45:d8:22:6e:b9:2b:94:b0:7e:cd:cc:f3:5e:a3:0b:66:95:2e:
52:f2:f7:df:5e:86:43:cb:65:65:ea:dc:9e:3f:dc:db:d7:4a:
d9:d1:44:b3:7e:09:0e:4c:f8:e7:c1:08:da:bd:e8:b1:fb:07:
4b:b5:56:7f:43:5e:99:26:d4:a6:11:88:fb:89:12:5e:4b:ff:
60:aa:e0:26:3c:b9:c8:a7:dc:a2:01:d7:e3:8a:f6:80:0c:c7:
cb:00:d6:6e:30:0c:75:cb:4e:cb:86:a8:57:dd:00:32:5c:48:
5d:9a:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:06 2025 by rpki-client